Protection method and apparatus for energy storage system, energy storage system, device, and storage medium

Abstract

The present application relates to a protection method and apparatus for an energy storage system, an energy storage system, a device, and a storage medium. The method comprises: in the energy storage system, acquiring a first communication state from a monitoring background to a system controller, first communication states from battery management controllers to the monitoring background, and first communication states from the battery management controllers to the monitoring background via the system controller; and if at least one of the first communication states indicates that there is a communication fault in the energy storage system, executing a processing action corresponding to the communication fault, wherein the processing action comprises shutdown and maintaining a current state. By using the present application, the risk of information loss can be reduced, and the stability and reliability of the energy storage system can be improved.

Description

Method and device for protecting energy storage system, energy storage system, equipment and storage medium Related applications

[0001] The present application claims priority to the Chinese patent application No. 2024107583847, filed on June 12, 2024, and entitled "Method and device for protecting energy storage system, energy storage system, equipment and storage medium", the content of which is incorporated herein by reference in its entirety. TECHNICAL FIELD

[0002] The present application relates to the field of new energy technology, in particular to a method and device for protecting an energy storage system, an energy storage system, an equipment and a storage medium. BACKGROUND

[0003] In today's energy field, energy storage systems play an increasingly important role. With the rapid development of renewable energy and the transformation of power networks, energy storage systems are widely used in power grid dispatching, power stability and energy management. Various controllers are provided in the energy storage system, and communication links are provided between the controllers to realize data acquisition and system control functions.

[0004] In the case of communication failure between the controllers, information loss will occur, which will seriously affect the energy storage system and bring various safety hazards. SUMMARY

[0005] Based on the above problems, the present application provides a method and device for protecting an energy storage system, an energy storage system, an equipment and a storage medium, which can reduce the risk of information loss and improve the stability and reliability of the energy storage system.

[0006] In a first aspect, the present application provides a method for protecting an energy storage system, which comprises: obtaining a first communication state from a monitoring background to a system controller in the energy storage system, a first communication state from each battery management controller to the monitoring background, and a first communication state from each battery management controller to the monitoring background through the system controller; if at least one first communication state indicates that the energy storage system has a communication failure, performing a processing action corresponding to the communication failure; wherein the processing action comprises shutdown and maintaining the current state.

[0007] In the technical solution of the present application, two communication paths are provided from the battery management controller to the monitoring background and from the battery management controller to the monitoring background through the system controller. The redundant communication paths can improve the communication reliability and reduce the risk of information loss. Moreover, if a communication failure occurs, a processing action such as shutdown or maintaining the current state can be taken according to the communication failure, thereby improving the reliability and stability of the energy storage system.

[0008] In some embodiments, if at least one first communication state indicates that the energy storage system has a communication failure, a processing action corresponding to the communication failure is performed, including: if the first communication state from the monitoring background to the system controller is normal, if the first communication state from any battery management controller to the monitoring background is a communication failure, and at least one of the first communication states from any battery management controller to the corresponding module controller, from any module controller to the system controller, from the system controller to the monitoring background is a communication failure, the energy storage system is controlled to be shut down. In the technical solution of the embodiment of the application, in the case that the downlink communication path from the monitoring background to the system controller is normal and the two uplink communication paths from the battery management controller to the monitoring background are both abnormal, the energy storage system is shut down, which can reduce the risk caused by information loss and help improve the stability and reliability of the energy storage system.

[0009] In some embodiments, if at least one first communication state indicates that the energy storage system has a communication failure, a processing action corresponding to the communication failure is performed, including: if the first communication state from the monitoring background to the system controller is a communication failure, if the first communication state from each battery management controller to the monitoring background, and / or the first communication state from each battery management controller to the monitoring background through the corresponding module controller and the system controller is normal, the current state of the energy storage system is maintained. In the technical solution of the embodiment of the application, on the one hand, the risk caused by the processing action of the error of the energy storage system can be reduced, and on the other hand, unnecessary shutdown can be reduced, which helps to minimize the shutdown time of the system and improve the availability and operating efficiency of the system.

[0010] In some embodiments, the method further includes: if all the first communication states are normal, obtaining, for each energy storage submodule in the energy storage system, a second communication state of the battery management controller and each battery management unit; statistically processing the second communication states to obtain a number of communication failures; and performing a corresponding processing action according to the number of communication failures, wherein the processing action further includes outputting a warning information. In the technical solution of the embodiment of the application, in the case that it is determined that there is no overall information loss risk, the information loss risk of the energy storage submodule is detected, which can effectively prevent the energy storage system from failing and shutting down due to the information loss of a single or multiple energy storage submodules, which helps to improve the reliability and stability of the energy storage system.

[0011] In some embodiments, the corresponding processing action according to the number of communication failures includes: if the number of communication failures corresponding to any energy storage submodule is greater than a first number threshold, or the total number of communication failures corresponding to multiple energy storage submodules is greater than a second number threshold, the energy storage system is controlled to be shut down. In the technical solution of the embodiment of the application, the information loss of a single cabinet can be responded in a timely manner, which helps to prevent potential safety risks such as electrical failure, overheating and other problems caused by the information loss of a single or multiple cabinets.

[0012] In some embodiments, the corresponding processing actions are performed according to the number of communication failures, including: if the number of communication failures corresponding to each energy storage submodule is less than or equal to a first number threshold, obtaining the switch state of the bus switch and the fire state of each energy storage submodule; in the case of the switch state being on or the fire state being started, controlling the energy storage system to shut down. In the technical solution of the embodiments of the application, it can be reasonably judged whether to shut down the energy storage system according to different situations, which helps to minimize the system downtime and improve the availability and operating efficiency of the system.

[0013] In some embodiments, the method further comprises: in the case of the switch state being off and the fire state being not started, performing state of charge statistics on the target energy storage submodule with communication failure to obtain the minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, controlling the energy storage system to shut down. In the technical solution of the embodiments of the application, it can be reasonably judged whether to shut down the energy storage system according to different situations, which helps to minimize the system downtime and improve the availability and operating efficiency of the system.

[0014] In some embodiments, the state of charge statistics on the target energy storage submodule with communication failure to obtain the minimum state of charge comprises: for the target energy storage submodule, if the battery management controller and the first battery management unit in the target energy storage submodule are in communication failure, performing state of charge statistics on the battery unit corresponding to the first battery management unit, and determining the first state of charge obtained by the statistics as the minimum state of charge. In the technical solution of the embodiments of the application, the minimum state of charge is obtained, and corresponding measures can be taken according to the minimum state of charge to reduce the risk of over-discharge and other problems caused by over-discharge.

[0015] In some embodiments, the method further comprises: for the target energy storage submodule, if the battery management controller and the second battery management unit other than the first battery management unit in the energy storage submodule are in communication failure, performing state of charge statistics on the battery unit corresponding to the second battery management unit to obtain a second state of charge; if the difference between the first state of charge and the second state of charge is greater than a preset difference, updating the second state of charge as the minimum state of charge. In the technical solution of the embodiments of the application, new communication failures can be found in time, and the minimum state of charge can be updated according to the new communication failures, so that the control of the energy storage system can be more in line with the actual situation, thereby improving the safety of the energy storage system.

[0016] In some embodiments, the method further comprises: if the minimum state of charge is greater than or equal to the preset state of charge threshold, calculating a safe discharge duration corresponding to the minimum state of charge, and performing a corresponding processing action according to the safe discharge duration. In the technical solution of the embodiments of the application, the minimum state of charge can be updated according to the newly occurring communication failure, so that the corresponding processing action is taken, and the safety of the energy storage system is improved.

[0017] In some embodiments, performing a corresponding processing action according to the safe discharge duration comprises: after the safe discharge duration is calculated, obtaining a discharged duration; and if the discharged duration is greater than the safe discharge duration, controlling the energy storage system to shut down. In the technical solution of the embodiments of the application, the energy storage system is controlled to shut down after the safe discharge duration is exceeded, which helps to ensure the safe operation of the energy storage system and can prevent problems such as overheating and overvoltage of the faulty energy storage sub-module during the discharge process, thereby improving the safety of the energy storage system.

[0018] In some embodiments, the method further comprises: determining a warning duration according to the safe discharge duration; and if the discharged duration is greater than the warning duration and less than the safe discharge duration, outputting a warning information. In the technical solution of the embodiments of the application, the energy storage system can be warned to remind the relevant operator to pay attention, thereby reducing the over-discharge risk.

[0019] In a second aspect, the application further provides a protection device for an energy storage system, which comprises:

[0020] a first state acquisition module, configured to acquire a first communication state of a monitoring background to a system controller, and a communication state of each battery management controller to the monitoring background, and a communication state of each battery management controller to the monitoring background via the system controller in the energy storage system;

[0021] a first protection module, configured to perform a processing action corresponding to a communication failure if the communication failure exists in at least one of the first communication states; wherein the processing action comprises shutting down and maintaining a current state.

[0022] In a third aspect, the application further provides an energy storage system, which comprises a monitoring background, a system controller, a plurality of energy storage sub-modules, a battery management controller and a module controller corresponding to each energy storage sub-module, and the battery management controller and the module controller are in one-to-one communication connection; the monitoring background is in communication connection with the system controller and each battery management controller respectively, and the system controller is also in communication connection with each module controller respectively; the battery management controller is configured to acquire state information of the corresponding energy storage sub-module; the module controller is configured to control the corresponding energy storage sub-module; the monitoring background is configured to perform state monitoring; and the system controller is configured to perform the method of any one of the first aspect.

[0023] In a fourth aspect, the present application provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the method in any one of the first aspect.

[0024] In a fifth aspect, the present application provides a computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to implement the method in any one of the first aspect.

[0025] In a sixth aspect, the present application provides a computer program product, which comprises a computer program, and the computer program is executed by a processor to implement the method in any one of the first aspect. BRIEF DESCRIPTION OF DRAWINGS

[0026] Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description, with reference to the drawings. The drawings are for purposes of illustration only and are not intended to limit the application thereto. The same reference numbers in different drawings identify the same components. In the drawings:

[0027] FIG. 1a is a structural schematic diagram of an energy storage system according to an embodiment of the present application;

[0028] FIG. 1b is a structural schematic diagram of an energy storage sub-module according to an embodiment of the present application;

[0029] FIG. 2 is a flowchart of a protection method of an energy storage system according to an embodiment of the present application;

[0030] FIG. 3 is a flowchart of a protection method for a communication fault of an energy storage sub-module according to an embodiment of the present application;

[0031] FIG. 4 is a flowchart of a processing action step according to a number of communication faults according to an embodiment of the present application;

[0032] FIG. 5 is a flowchart of an updating minimum state of charge step according to an embodiment of the present application;

[0033] FIG. 6 is a flowchart of a processing action step according to a safety discharge time according to an embodiment of the present application;

[0034] FIG. 7 is a flowchart of an outputting warning information step according to a warning time according to an embodiment of the present application;

[0035] FIG. 8 is a structural block diagram of a protection device of an energy storage system according to an embodiment of the present application;

[0036] FIG. 9 is a structural block diagram of a protection device of an energy storage system according to an embodiment of the present application;

[0037] FIG. 10 is an internal structure diagram of a computer device according to an embodiment of the present application. DETAILED DESCRIPTION

[0038] The embodiments of the present application will be described in detail with reference to the drawings. The following embodiments are only used to more clearly illustrate the technical solutions of the present application, and therefore only serve as examples, and cannot be used to limit the protection scope of the present application.

[0039] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs; the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the present application; the terms "comprising," "comprises" and "including" as used herein are synonymous with and meant to have the same meaning as the term "including"; the term "coupled" as used herein means the joining of two members together with one or more intervening members.

[0040] In the description of the embodiments of the present application, the technical terms "first", "second", etc. are only used to distinguish different objects, and cannot be understood as indicating or implying relative importance or implicitly indicating the number, specific order or primary and secondary relationship of the indicated technical features. In the description of the embodiments of the present application, the meaning of "a plurality of" is two or more, unless otherwise explicitly and specifically limited.

[0041] Reference herein to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the application. The appearance of the phrase in various places in the specification does not necessarily all refer to the same embodiment, nor is it necessarily independent or alternative embodiments to each other. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0042] In the description of the embodiments of the present application, the term "and / or" is only a description of the association relationship of the associated objects, which means that there can be three relationships, for example, A and / or B, which can represent the three cases of A alone, A and B together, and B alone. In addition, the character " / " in this paper generally represents that the front and rear associated objects are a "or" relationship.

[0043] In the description of the embodiments of the present application, the term "a plurality of" refers to two or more (including two), and similarly, "a plurality of groups" refers to two or more groups (including two groups), and "a plurality of pieces" refers to two or more pieces (including two pieces).

[0044] In the description of the embodiments of the present application, unless otherwise explicitly specified and limited, the technical terms "mounting", "connection", "connecting", "fixing" and the like should be understood in a broad sense, for example, can be fixed connection, can also be detachable connection, or integral; can be mechanical connection, can also be electrical connection; can be direct connection, can also be indirect connection through an intermediate medium, can be internal communication of two elements or interaction relationship between two elements. For those skilled in the art, the specific meanings of the above terms in the embodiments of the present application can be understood according to the specific circumstances.

[0045] In the field of energy today, energy storage systems play an increasingly important role. With the rapid development of renewable energy and the transformation of power networks, energy storage systems are widely used in power grid scheduling, power stability and energy management. Various controllers are provided in the energy storage system, and communication links are provided between the controllers to realize data acquisition and system control functions. In the case of communication failure between the controllers, information loss will occur, which will seriously affect the energy storage system and bring various safety hazards.

[0046] The embodiments of the present application provide an energy storage system protection scheme, which first acquires the first communication state of the monitoring background to the system controller in the energy storage system, the first communication state of each battery management controller to the monitoring background, and the first communication state of each battery management controller to the monitoring background through the system controller. If multiple first communication states indicate that the energy storage system has a communication failure, a processing action such as stopping operation or maintaining the current state of the energy storage system is performed. In this scheme, two communication paths of the battery management controller to the monitoring background and the battery management controller to the monitoring background through the system controller are provided, and the redundant communication paths can improve the communication reliability and reduce the risk of information loss. Moreover, if a communication failure occurs, a processing action such as stopping operation or maintaining the current state can be taken according to the communication failure, thereby improving the reliability and stability of the energy storage system.

[0047] The energy storage system protection method provided by the embodiments of the present application can be applied to the energy storage system shown in FIG. 1a. The energy storage system includes a monitoring background 101, a system controller (Valve Base Controller, VBC) 102, a plurality of energy storage sub-modules 103, a battery management controller (Battery Management Controller, BMC) 104 and a module controller (Sub-Module Controller, SMC) 105 corresponding to each energy storage sub-module (Sub-Module, SM) 103, and the battery management controller 104 and the module controller 105 are one-to-one communication connection; the monitoring background 101 is communication connection with the system controller 102 and each battery management controller 104 respectively, and the system controller 102 is also communication connection with each module controller 105 respectively; the battery management controller 104 is used for acquiring the state information of the corresponding energy storage sub-module 103; the module controller 105 is used for controlling the corresponding energy storage sub-module 103; the monitoring background 101 is used for state monitoring; and the system controller 102 is used for acquiring the communication state of each communication path in the energy storage system and performing corresponding processing actions according to the communication state.

[0048] In the embodiments of the present application, the energy storage system includes a plurality of energy storage sub-modules 103, each energy storage sub-module 103 can be composed of a plurality of electric cabinets in series and / or parallel, each electric cabinet can be composed of a plurality of electric boxes in series and / or parallel, and each electric box can be composed of a plurality of batteries in series and / or parallel, as shown in FIG. 1b.

[0049] The energy storage system further includes a battery management controller 104 corresponding to the energy storage sub-module 103, which can collect the state information of the corresponding energy storage sub-module 103, and is responsible for detecting the state, performance and health status of the battery, etc. The above-mentioned state information can include voltage, current, temperature, charging and discharging state, state of charge (State Of Charge, SOC), state of health (State of Health, SOH), etc.

[0050] The energy storage system further includes a module controller 105 in one-to-one communication connection with the battery management controller 104. The battery management controller 104 can transmit the collected state information to the module controller 105, and the module controller 105 can also transmit control instructions to the battery management controller 104, so as to control the corresponding energy storage sub-module 103. For example, the energy storage sub-module 103 is controlled to be put into or cut out of the energy storage system, and the energy storage sub-module 103 can also be controlled to charge and discharge, etc.

[0051] The energy storage system further comprises a system controller 102 and a monitoring background 101, the system controller 102 is communicatively connected with the plurality of module controllers 105 and the monitoring background 101 respectively, and the monitoring background 101 is further communicatively connected with the plurality of battery management controllers 104. The system controller 102 can acquire the state information collected by the battery management controller 104 through the module controller 105 and transmit the state information to the monitoring background 101. The system controller 102 can also acquire the state information collected by the battery management controller 104 through the monitoring background 101. The system controller 102 can send control instructions to the module controller 105 according to the state information, so as to control the energy storage sub-modules 103. The system controller 102 can determine the communication state of each communication path and take corresponding processing actions when a communication fault occurs. The monitoring background 101 can monitor the state of the system controller 102 through communication with the system controller 102, and can also monitor the state of the battery management controller 104 through communication with the battery management controller 104. The monitoring background 101 is mainly used for monitoring the state, and in some embodiments, the monitoring background 101 and the system controller 102 can be integrated into one hardware device as two components.

[0052] In some embodiments, the battery management controller 104 is connected with the monitoring background 101 and the system controller 102 respectively in the case of omitting the module controller 105. For example, the energy storage system comprises one energy storage sub-module 103, and the battery management controller 104 replaces the module controller 105. It should be noted that the case that the battery management controller 104 is directly connected with the system controller 102 is not limited to the above example, and can be set according to actual conditions.

[0053] In some embodiments, optical fiber communication is adopted between the monitoring background 101, the system controller 102, the battery management controller 104 and the module controller 105.

[0054] In some embodiments, the energy storage system further comprises a plurality of battery management units (BMU), and each battery management unit corresponds to an electric cabinet. The battery management controller 104 corresponding to each energy storage sub-module 103 is communicatively connected with the battery management unit corresponding to each electric cabinet in the energy storage sub-module 103. The battery management unit can collect the state information of the electric cabinet and transmit the collected electric cabinet information to the battery management controller 104.

[0055] In some embodiments, the energy storage system further comprises a bus switch and a bypass switch. The bus switch can realize the connection between the battery and the external device of the energy storage system, and the bypass switch can realize the investment and cut-out of the energy storage sub-module 103.

[0056] In the technical solution of the embodiment of the application, the energy storage system comprises a monitoring background, a system controller, a plurality of energy storage sub-modules, a battery management controller corresponding to each energy storage sub-module, and a module controller; the battery management controller acquires state information of the corresponding energy storage sub-module; the module controller controls the corresponding energy storage sub-module; the monitoring background performs state monitoring; and the system controller acquires the communication state of each communication path in the energy storage system and performs corresponding processing actions according to the communication state. The scheme sets two communication paths from the battery management controller to the monitoring background and from the battery management controller to the monitoring background via the corresponding module controller and the system controller, and the redundantly set communication paths can improve communication reliability, reduce the risk of information loss, and improve the stability and reliability of the energy storage system.

[0057] [According to Rule 91 correction 14.07.2025] According to some embodiments of the application, referring to FIG. 2, a protection method of an energy storage system is provided, which is taken as an example to illustrate the system controller in FIG. 1a, and the method can comprise the following steps:

[0058] Step 201, acquiring the first communication state of the monitoring background to the system controller in the energy storage system, the first communication state of each battery management controller to the monitoring background, and the first communication state of each battery management controller to the monitoring background via the system controller.

[0059] Among them, the first communication state is used to represent whether the two communication connections are normal or faulty.

[0060] The monitoring background can detect whether it is in normal communication or faulty communication with the system controller and each battery management controller. The system controller can detect whether it is in normal communication or faulty communication with the monitoring background and each module controller. The module controller can detect whether it is in normal communication or faulty communication with the system controller and the corresponding battery management controller. The battery management controller can detect whether it is in normal communication or faulty communication with the monitoring background and the corresponding module controller.

[0061] The above detection of normal communication or faulty communication can be sending a communication request to the communication object, if the sending is successful, it is determined that the communication is normal, and if the sending fails, it is determined that the communication is faulty.

[0062] The monitoring background, the module controller, and the battery management control can send the detection result to the system controller. If the system controller successfully receives the detection result sent by the monitoring background, the module controller, and the battery management controller, the first communication state from the monitoring background to the system controller, from each battery management controller to the monitoring background, and from each battery management controller to the monitoring background via the corresponding module controller and the system controller is determined according to the received detection result.

[0063] If the system controller does not successfully receive the detection result sent by at least one of the monitoring background, the module controller and the battery management controller, the first communication states from the monitoring background to the system controller, and from each battery management controller to the monitoring background, from each battery management controller to the monitoring background via the corresponding module controller and the system controller are determined according to the unsuccessful reception of the detection result.

[0064] For example, the system controller does not receive the detection result sent by the module controller directly, but the system controller receives the detection result of the monitoring background and the detection result of the battery management controller and the detection result of the module controller through the monitoring background, and it can be determined that the communication between the module controller and the system controller is faulty.

[0065] In some embodiments, in the case of omitting the module controller, if the system controller successfully receives the detection result sent by the monitoring background and the battery management controller, the first communication states from the monitoring background to the system controller, and from each battery management controller to the monitoring background, from each battery management controller to the monitoring background via the system controller are determined according to the received detection result.

[0066] It should be noted that the way of detecting and determining the communication state is not limited to the above examples, and other ways can also be used in actual applications.

[0067] Step 202, if at least one of the first communication states indicates that the energy storage system has a communication fault, a processing action corresponding to the communication fault is performed.

[0068] The processing action includes shutdown and maintaining the current state.

[0069] There can be at least one communication fault in the plurality of first communication states, such as a communication fault between the monitoring background and the system controller, a communication fault between at least one battery management controller and the monitoring background, a communication fault between at least one battery management controller and the corresponding module controller, a communication fault between at least one module controller and the system controller, a communication fault between the system controller and the monitoring background, etc. It should be noted that the communication fault is not limited to the above cases, and in actual applications, combinations of the above faults or situations other than the above communication faults can also occur.

[0070] The system controller can perform different processing actions according to different communication faults. For example, according to one of the communication faults, a shutdown control instruction is sent to each module controller, and each module controller receives the shutdown control instruction to control the corresponding energy storage submodule to shut down, so that the energy storage system can be controlled to shut down. Or, according to one of the communication faults, the current state of the energy storage system is determined to be maintained, and no control instruction is sent.

[0071] In the above embodiment, the first communication states of the monitoring background to the system controller, the first communication states of each battery management controller to the monitoring background, and the first communication states of each battery management controller to the monitoring background via the system controller are acquired; if at least one of the first communication states indicates that the energy storage system has a communication fault, a processing action corresponding to the communication fault is performed. In the technical solution of the embodiment of the application, the two communication paths of the battery management controller to the monitoring background and the battery management controller to the monitoring background via the system controller are provided, the communication reliability is improved and the risk of information loss is reduced by the redundantly provided communication paths; and if a communication fault occurs, a processing action such as shutdown or maintaining the current state can be taken according to the communication fault, so that the reliability and stability of the energy storage system are improved.

[0072] According to some embodiments of the application, the step "if at least one of the first communication states indicates that the energy storage system has a communication fault, a processing action corresponding to the communication fault is performed" in the above embodiment can include: if the first communication state of the monitoring background to the system controller is normal, if the first communication state of any battery management controller to the monitoring background is a communication fault, and at least one of the first communication states of any battery management controller to the corresponding module controller, any module controller to the system controller, and the system controller to the monitoring background is a communication fault, the energy storage system is controlled to be shut down.

[0073] The system controller can determine whether the monitoring background to the system controller is in a normal communication state or a communication fault state according to the plurality of first communication states. In the case of determining that the monitoring background to the system controller is in a normal communication state, whether the battery management controller to the monitoring background is in a normal communication state or a communication fault state, and whether the battery management controller to the monitoring background via the corresponding module controller and the system controller is in a normal communication state or a communication fault state are determined.

[0074] If the battery management controller to the monitoring background is in a communication fault state, and the battery management controller to the corresponding module controller is in a communication fault state, it is determined that the downlink communication path of the monitoring background to the system controller is normal, but the two uplink communication paths of the battery management controller to the monitoring background are abnormal. In this case, the system controller controls the energy storage system to be shut down.

[0075] If the battery management controller to the monitoring background is in a communication fault state, and the module controller to the system controller is in a communication fault state, it is determined that the downlink communication path of the monitoring background to the system controller is normal, but the two uplink communication paths of the battery management controller to the monitoring background are abnormal. In this case, the system controller controls the energy storage system to be shut down.

[0076] If the battery management controller to monitoring background communication fails, and the system controller to monitoring background communication fails, it is determined that the monitoring background to system controller downlink communication path is normal, but the two battery management controller to monitoring background uplink communication paths are abnormal. In this case, the system controller controls the energy storage system to shut down.

[0077] In the above embodiment, in the case that the first communication state from the monitoring background to the system controller is normal communication, if the first communication state from any battery management controller to the monitoring background is communication failure, and at least one of the first communication state from any battery management controller to the corresponding module controller, the first communication state from any module controller to the system controller, and the first communication state from the system controller to the monitoring background is communication failure, the energy storage system is controlled to shut down. In the technical solution of the embodiment of the application, in the case that the downlink communication path from the monitoring background to the system controller is normal, and the two uplink communication paths from the battery management controller to the monitoring background are abnormal, the energy storage system is shut down, which can reduce the risk caused by information loss, and helps to improve the stability and reliability of the energy storage system.

[0078] According to some embodiments of the application, the step "if at least one first communication state indicates that the energy storage system has communication failure, a processing action corresponding to the communication failure is performed" in the above embodiment can include: in the case that the first communication state from the monitoring background to the system controller is communication failure, if the first communication state from each battery management controller to the monitoring background, and / or the first communication state from each battery management controller to the monitoring background through the corresponding module controller and the system controller is normal communication, the current state of the energy storage system is maintained.

[0079] The system controller can determine whether the monitoring background to the system controller is in normal communication or communication failure according to the plurality of first communication states. In the case of determining that the monitoring background to the system controller is in communication failure, whether the battery management controller to the monitoring background is in normal communication or communication failure, and whether the battery management controller to the monitoring background through the corresponding module controller and the system controller is in normal communication or communication failure is determined.

[0080] If the communication between the battery management controller and the monitoring background is normal, and the communication between each battery management controller and the corresponding module controller is normal, the communication between each module controller and the system controller is normal, the communication between the system controller and the monitoring background is normal, it is determined that the two uplink communication paths of the battery management controller to the monitoring background are normal, but the downlink communication path of the monitoring background to the system controller is abnormal. In this case, the data synchronization delay, data loss or data error caused by the communication failure between the monitoring background and the system controller may cause the data stored by the battery management controller to be inconsistent with the data stored by the monitoring background or the system controller, resulting in an error handling action or other potential problems of the energy storage system, so the system controller closes the information loss protection function and maintains the current state of the energy storage system.

[0081] In the above embodiment, in the case that the first communication state of the monitoring background to the system controller is communication failure, if the first communication state of each battery management controller to the monitoring background, and / or the first communication state of each battery management controller to the monitoring background through the corresponding module controller and the system controller is communication normal, the current state of the energy storage system is maintained. In the technical solution of the embodiment of the application, on the one hand, the risk of the energy storage system caused by the error handling action can be reduced, and on the other hand, unnecessary shutdown can be reduced, which helps to minimize the system downtime and improve the availability and operating efficiency of the system.

[0082] According to some embodiments of the application, with reference to FIG. 3, the method can further include the following steps:

[0083] In step 301, if the plurality of first communication states are all communication normal, the second communication state of the battery management controller and each battery management unit for each energy storage sub-module in the energy storage system is obtained.

[0084] If the communication between the monitoring background and the system controller is normal, and the communication between each battery management controller and the monitoring background is normal, the communication between each battery management controller and the corresponding module controller is normal, the communication between each module controller and the system controller is normal, and the communication between the system controller and the monitoring background is normal, that is, the downlink communication path of the monitoring background to the system controller is normal, and the two communication paths of the battery management controller to upload information to the monitoring background are normal, the risk of overall loss of energy storage system information is small. In this case, it is detected whether there is a risk of information loss for each energy storage sub-module in the energy storage system.

[0085] Each energy storage sub-module includes a plurality of battery units, the energy storage sub-module corresponds to a battery management controller, each battery unit corresponds to a battery management unit, and the battery management controller is in communication connection with the plurality of battery management units. When detecting whether each energy storage sub-module has a risk of information loss, the second communication state between the battery management controller and each battery management unit can be determined first, that is, whether the battery management controller and each battery management unit are in normal communication or communication failure is determined.

[0086] In step 302, the second communication state is statistically processed to obtain the number of communication failures.

[0087] For each energy storage sub-module, the second communication state of the battery management controller and each battery management unit is counted to obtain the number of communication failures corresponding to each energy storage sub-module.

[0088] For example, one battery management controller is in communication connection with three battery management units. If the battery management controller and the three battery management units are in normal communication, the number of communication failures is determined to be 0. If the battery management controller and two of the three battery management units are in normal communication, and the other battery management unit is in communication failure, the number of communication failures is determined to be 1.

[0089] Then, the number of communication failures corresponding to the plurality of energy storage sub-modules in the energy storage system is counted to obtain the total number of communication failures.

[0090] In step 303, a corresponding processing action is performed according to the number of communication failures, wherein the processing action further includes outputting a warning information.

[0091] Different processing actions are taken in different cases of the number of communication failures. For example, in the case of the number of communication failures being 0, the current state is maintained; in the case of the number of communication failures n being greater than a and less than b, a warning information is outputted; and in the case of the number of communication failures being greater than b, the energy storage sub-module or the energy storage system is controlled to be shut down, wherein a is less than b.

[0092] The above outputted warning information can be a warning light or an outputted sound warning. It should be noted that the output mode of the warning information is not limited to the above examples, and other modes can also be used in actual applications.

[0093] In the above embodiment, if the plurality of first communication states are all normal communication, the second communication states between the battery management controller and the battery management units of each energy storage submodule in the energy storage system are obtained; the second communication states are statistically processed to obtain the number of communication faults; and corresponding processing actions are performed according to the number of communication faults, wherein the processing actions further include outputting warning information. In the technical solution of the embodiment of the application, the information loss risk of the energy storage submodule is detected under the condition that it is determined that there is no overall information loss risk, which can effectively prevent the energy storage system from malfunctioning and shutting down due to the information loss of a single or multiple energy storage submodules, and this helps to improve the reliability and stability of the energy storage system.

[0094] According to some embodiments of the application, the step "performing corresponding processing actions according to the number of communication faults" in the above embodiment can include: if the number of communication faults corresponding to any energy storage submodule is greater than a first number threshold, or the total number of communication faults corresponding to multiple energy storage submodules is greater than a second number threshold, then the energy storage system is controlled to shut down.

[0095] In the process of detecting whether the energy storage submodule has an information loss risk, if it is determined that the number of communication faults corresponding to one or more energy storage submodules is greater than a first number threshold, it indicates that there are many communication faults between the battery management controller and the battery management unit in a single energy storage submodule, which may affect the reliability and stability of the overall energy storage system, and the energy storage system is controlled to shut down.

[0096] Alternatively, the number of communication faults corresponding to multiple energy storage submodules is summed to obtain a total number of communication faults. If the total number of communication faults is greater than a second number threshold, it indicates that there are many communication faults between the battery management controller and the battery management unit in the energy storage system, which may affect the reliability and stability of the overall energy storage system, and the energy storage system is controlled to shut down.

[0097] The first number threshold and the second number threshold can be set according to actual conditions, and the second number threshold can be equal to or greater than the first number threshold.

[0098] In the above embodiment, if the number of communication faults corresponding to any energy storage submodule is greater than a first number threshold, or the total number of communication faults corresponding to multiple energy storage submodules is greater than a second number threshold, the energy storage system is controlled to shut down. In the technical solution of the embodiment of the application, the information loss of a single electrical cabinet can be responded in a timely manner, which helps to prevent potential safety risks such as electrical faults, overheating, and other problems caused by the information loss of a single or multiple electrical cabinets.

[0099] According to some embodiments of the application, with reference to FIG. 4, the step "performing corresponding processing actions according to the number of communication faults" in the above embodiment can include:

[0100] In step 401, if the number of communication failures corresponding to each energy storage submodule is less than or equal to the first number threshold, the switch state of the bus switch and the fire-fighting state of each energy storage submodule are obtained.

[0101] In the process of detecting whether the energy storage submodule has information loss risk, if the number of communication failures corresponding to each energy storage submodule is less than or equal to the first number threshold, it indicates that the number of communication failures between the battery management controller and the battery management unit in a single energy storage submodule is within an acceptable range, then the switch state of the bus switch and the fire-fighting state of each energy storage submodule are obtained.

[0102] The function of the bus switch is to control the on-off between the energy storage system and the external device. When the bus switch is in the on position, it means that the energy storage system is connected with the external device. When the bus switch is in the off position, it means that the connection between the energy storage system and the external device is disconnected.

[0103] The fire-fighting state indicates whether the fire-fighting module corresponding to the energy storage submodule is started. If the fire-fighting state is started, it means that the fire-fighting module corresponding to the energy storage submodule is started. If the fire-fighting state is not started, it means that the fire-fighting module corresponding to the energy storage submodule is not started.

[0104] In step 402, if the switch state is in the on position or the fire-fighting state is started, the energy storage system is controlled to be shut down.

[0105] If the switch state of the bus switch is in the on position, it means that the energy storage system is connected with the external device in the case of a certain number of communication failures in the energy storage system. In this case, it is easy to affect the stability of the energy storage system, and further affect the safety of the external device. Therefore, the energy storage system is controlled to be shut down. Understandably, shutting down can prevent the battery from continuing to provide power in the case of communication failure leading to loss of cabinet information, and further prevent potential safety problems or unpredictable operational risks.

[0106] The fire-fighting module started refers to the emergency measures taken against the fire or thermal runaway that may occur in the energy storage submodule. If the fire-fighting state of at least one energy storage submodule is started, it means that there may be a battery overheating, short circuit or other dangerous situation. Shutting down the energy storage system can prevent the battery pack from continuing to discharge to avoid the spread of fire or further deterioration of danger.

[0107] In step 403, if the switch state is in the off position and the fire-fighting state is not started, the state of charge of the target energy storage submodule with communication failure is counted to obtain the minimum state of charge.

[0108] If the switch state of the bus switch is the split state, it indicates that although there is a certain number of communication faults in the energy storage system, the energy storage system is not connected with the external device, and in this case, corresponding processing actions can be performed according to the state of charge. Therefore, the state of charge of the target energy storage submodule with faults can be counted first, and then the minimum state of charge is determined according to the states of charge of the plurality of target energy storage submodules.

[0109] For example, the state of charge of the target energy storage submodule 1 is SOC1, the state of charge of the target energy storage submodule 2 is SOC2, and the state of charge of the target energy storage submodule 3 is SOC3, wherein SOC1 is the minimum, and the minimum state of charge is determined as SOC1.

[0110] In step 404, if the minimum state of charge is less than the preset state of charge threshold, the energy storage system is controlled to be shut down.

[0111] After obtaining the minimum state of charge, the minimum state of charge is compared with the preset state of charge threshold. If the minimum state of charge is greater than or equal to the preset state of charge threshold, it indicates that even if the target energy storage submodule corresponding to the minimum state of charge continues to self-discharge, the risk of over-discharge is relatively low, and therefore the current state of the energy storage system can be maintained.

[0112] If the minimum state of charge is less than the preset state of charge threshold, it indicates that the target energy storage submodule corresponding to the minimum state of charge continues to self-discharge, and the risk of over-discharge is relatively high, and even other safety problems such as damage may occur, affecting the reliability of the energy storage system. Therefore, the energy storage system is controlled to be shut down.

[0113] In the above embodiment, if the number of communication faults corresponding to each energy storage submodule is less than or equal to the first number threshold, the switch state of the bus switch and the fire-fighting state of each energy storage submodule are obtained; in the case that the switch state is the closed state or the fire-fighting state is started, the energy storage system is controlled to be shut down; in the case that the switch state is the split state and the fire-fighting state is not started, the state of charge of the target energy storage submodule with communication faults is counted to obtain the minimum state of charge; and if the minimum state of charge is less than the preset state of charge threshold, the energy storage system is controlled to be shut down. In the technical scheme of the embodiment of the application, whether the energy storage system is shut down can be reasonably determined according to different situations, which helps to minimize the system downtime and improve the availability and operating efficiency of the system.

[0114] According to some embodiments of the application, the step "counting the state of charge of the target energy storage submodule with communication faults to obtain the minimum state of charge" in the above embodiment can include: for the target energy storage submodule, if the battery management controller and the first battery management unit in the target energy storage submodule are in communication failure, counting the state of charge of the battery cell corresponding to the first battery management unit, and determining the counted first state of charge as the minimum state of charge.

[0115] For each target energy storage submodule with communication failure, if the battery management controller is in communication failure with one of the battery management units and in communication normal with the other battery management units, the state of charge of the battery unit corresponding to the battery management unit in communication failure is counted, and the counted first state of charge is determined as the minimum state of charge.

[0116] Taking three electric cabinets as an example, if the battery management controller is in communication failure with the battery management unit corresponding to the electric cabinet 1, the state of charge of the electric cabinet 1 is counted, and the state of charge of the electric cabinet 1 is determined as the minimum state of charge.

[0117] In some embodiments, after the minimum state of charge is determined, the minimum state of charge and the occurrence time of the communication failure are stored.

[0118] In the above embodiments, for a target energy storage submodule, if the battery management controller is in communication failure with a first battery management unit in the target energy storage submodule, the state of charge of the battery unit corresponding to the first battery management unit is counted, and the counted first state of charge is determined as the minimum state of charge. In the technical solution of the embodiments of the application, the minimum state of charge is counted, and corresponding measures can be taken according to the minimum state of charge to reduce the risk of over-discharge and other problems caused by over-discharge.

[0119] Based on the above embodiments, with reference to FIG. 5, the embodiments of the application can further include the following steps:

[0120] Step 501, for a target energy storage submodule, if the battery management controller is in communication failure with a second battery management unit in the energy storage submodule except the first battery management unit, the state of charge of the battery unit corresponding to the second battery management unit is counted to obtain a second state of charge.

[0121] In actual application, the state of charge can be counted according to a preset period, and if the battery management controller is in communication failure with a second battery management unit in the energy storage submodule except the first battery management unit, the state of charge of the battery unit corresponding to the second battery management unit is counted to obtain a second state of charge.

[0122] Taking three electric cabinets as an example, if the battery management controller is in communication failure with the battery management unit corresponding to the electric cabinet 1, the state of charge of the electric cabinet 1 is counted to obtain a first state of charge. Subsequently, the state of charge is counted according to a preset period, and it is found that the battery management controller is in communication failure with the battery management unit corresponding to the electric cabinet 2, and the state of charge of the electric cabinet 2 is counted to obtain a second state of charge.

[0123] The preset period can be set as per hour or per day according to actual conditions.

[0124] In step 502, if the difference between the first state of charge and the second state of charge is greater than the preset difference, the second state of charge is updated as the minimum state of charge.

[0125] If the second state of charge is greater than the first state of charge, it is determined that the first state of charge is still the minimum state of charge.

[0126] If the second state of charge is less than the first state of charge, the difference between the first state of charge and the second state of charge is calculated. If the difference is less than or equal to the preset difference, it indicates that the difference between the states of charge of the two cabinets is small, and the minimum state of charge does not need to be updated. If the difference is greater than the preset difference, it indicates that the second state of charge is smaller than the first state of charge, and the difference is large. In this case, the second state of charge is used to replace the first state of charge as the minimum state of charge.

[0127] In some embodiments, after updating the minimum state of charge, the updated minimum state of charge and the occurrence time of the new communication failure are stored.

[0128] In step 503, if the minimum state of charge is greater than or equal to the preset state of charge threshold, the safe discharge duration corresponding to the minimum state of charge is calculated, and the corresponding processing action is performed according to the safe discharge duration.

[0129] If the minimum state of charge is greater than or equal to the preset state of charge threshold, it indicates that even if the target energy storage sub-module corresponding to the minimum state of charge continues to self-discharge, the risk of over-discharge is relatively low. In this case, the safe discharge duration can be calculated according to the self-discharge amount and the minimum state of charge. For example, the safe discharge duration is obtained by dividing the minimum state of charge by the self-discharge amount.

[0130] Then, the cutoff discharge time can be calculated according to the stored occurrence time of the communication failure and the safe discharge duration. Before the cutoff discharge time, the current state of the energy storage system can be maintained; when the cutoff discharge time is reached, a warning information can be output, or the energy storage system can be controlled to shut down.

[0131] In the above embodiment, for the target energy storage sub-module, if the battery management controller fails to communicate with the second battery management unit other than the first battery management unit in the energy storage sub-module, the state of charge of the battery unit corresponding to the second battery management unit is counted to obtain a second state of charge; if the difference between the first state of charge and the second state of charge is greater than a preset difference, the second state of charge is updated as the minimum state of charge; if the minimum state of charge is greater than or equal to a preset charge threshold, the safe discharge duration corresponding to the minimum state of charge is calculated, and a corresponding processing action is performed according to the safe discharge duration. In the technical solution of the embodiment of the application, a newly occurring communication failure can be found in time, and the minimum state of charge is updated according to the newly occurring communication failure, so that the control of the energy storage system can be more in line with the actual situation, thereby improving the safety of the energy storage system.

[0132] According to some embodiments of the application, with reference to FIG. 6, the step "performing a corresponding processing action according to the safe discharge duration" in the above embodiment includes:

[0133] Step 601: After the safe discharge duration is calculated, the discharged duration is obtained.

[0134] After the safe discharge duration is calculated, the duration from the occurrence time of the communication failure to the current time can be determined as the discharged duration.

[0135] In some embodiments, after the minimum state of charge is updated, the safe discharge duration needs to be recalculated according to the updated minimum state of charge, and the discharged duration needs to be determined again according to the occurrence time of the new communication failure and the current time.

[0136] Step 602: If the discharged duration is greater than the safe discharge duration, the energy storage system is controlled to be shut down.

[0137] If the discharged duration is greater than the safe discharge duration, it indicates that over-discharge may have occurred, and the energy storage system is controlled to be shut down.

[0138] In some embodiments, considering that there may be errors or jumps in time (year, month and day), time protection logic can also be added to prevent the energy storage system from being shut down due to system time errors. If it is detected that the controller time has a large error (such as year, month and day jump), the shutdown function caused by the discharged duration exceeding the safe discharge duration is closed, the safe discharge duration is no longer calculated, the time before the system time error is latched, and after the signal of normal system time is issued by the monitoring background, the shutdown function is restarted.

[0139] In the above embodiments, after the safe discharging duration is calculated, the discharged duration is obtained; if the discharged duration is greater than the safe discharging duration, the energy storage system is controlled to stop running. In the technical solution of the embodiments of the present application, the energy storage system is controlled to stop running after the safe discharging duration is exceeded, which helps to ensure the safe operation of the energy storage system and can prevent problems such as overheating and overvoltage of the faulty energy storage sub-module during the discharging process, thereby improving the safety of the energy storage system.

[0140] Based on the above embodiments, with reference to FIG. 7, the embodiments of the present application can further include the following steps:

[0141] Step 701: determining a warning duration according to the safe discharging duration.

[0142] After the safe discharging duration is calculated, the warning duration can be determined according to a preset ratio and the safe discharging duration, or the warning duration can be determined according to a reserved duration. For example, the safe discharging duration is 30 days, the preset ratio is 90%, and the warning duration is determined to be 27 days; or the reserved duration is 1 day, and the warning duration is determined to be 29 days.

[0143] It should be noted that the determination method of the warning duration is not limited to the above examples, and other methods can also be used for determination.

[0144] Step 702: if the discharged duration is greater than the warning duration and less than the safe discharging duration, outputting a warning information.

[0145] If the discharged duration is greater than the warning duration but less than the safe discharging duration, a warning information is outputted. For example, the discharged duration is 28 days, which is greater than the warning duration of 27 days but less than the safe discharging duration of 30 days, and the alarm lamp is lit.

[0146] In the above embodiments, the warning duration is determined according to the safe discharging duration; if the discharged duration is greater than the warning duration and less than the safe discharging duration, a warning information is outputted. In the technical solution of the embodiments of the present application, the energy storage system can be warned to remind the relevant operating personnel to pay attention, thereby reducing the over-discharging risk.

[0147] [Corrected according to Rule 91 on 14.07.2025] According to some embodiments of the present application, a protection method of an energy storage system is provided, which is taken as an example to illustrate the system controller in FIG. 1a, and the method can include the following steps:

[0148] Step 1: obtaining a first communication state of a monitoring background to a system controller in the energy storage system, a first communication state of each battery management controller to the monitoring background, and a first communication state of each battery management controller to the monitoring background through a corresponding module controller and the system controller.

[0149] Step 2, in the case that the first communication state from the monitoring background to the system controller is normal, if the first communication state from any battery management controller to the monitoring background is communication failure, and at least one of the first communication state from any battery management controller to the corresponding module controller, the first communication state from any module controller to the system controller, the first communication state from the system controller to the monitoring background is communication failure, the energy storage system is controlled to be shut down.

[0150] Step 3, in the case that the first communication state from the monitoring background to the system controller is communication failure, if the first communication state from each battery management controller to the monitoring background, and / or the first communication state from each battery management controller to the monitoring background through the corresponding module controller and the system controller is normal, the current state of the energy storage system is maintained.

[0151] Step 4, if all the first communication states are normal, the second communication state between the battery management controller and each battery management unit of each energy storage submodule in the energy storage system is obtained; the second communication state is statistically processed to obtain the number of communication failures.

[0152] Step 5, if the number of communication failures corresponding to any energy storage submodule is greater than a first number threshold, or the total number of communication failures corresponding to multiple energy storage submodules is greater than a second number threshold, the energy storage system is controlled to be shut down.

[0153] Step 6, if the number of communication failures corresponding to each energy storage submodule is less than or equal to the first number threshold, the switch state of the bus switch and the fire fighting state of each energy storage submodule are obtained.

[0154] Step 7, in the case that the switch state is closed or the fire fighting state is started, the energy storage system is controlled to be shut down.

[0155] Step 8, in the case that the switch state is open and the fire fighting state is not started, for a target energy storage submodule with communication failure, if the battery management controller and the first battery management unit in the target energy storage submodule are in communication failure, the state of charge of the battery unit corresponding to the first battery management unit is counted, and the counted first state of charge is determined as the minimum state of charge; if the battery management controller and the second battery management unit in the energy storage submodule other than the first battery management unit are in communication failure, the state of charge of the battery unit corresponding to the second battery management unit is counted to obtain the second state of charge; if the difference between the first state of charge and the second state of charge is greater than a preset difference, the second state of charge is updated as the minimum state of charge.

[0156] Step 9, if the minimum state of charge is less than a preset charge threshold, the energy storage system is controlled to be shut down.

[0157] Step 10, if the minimum state of charge is greater than or equal to the preset charge threshold, the safe discharge duration corresponding to the minimum state of charge is calculated.

[0158] Step 11, the warning duration is determined according to the safe discharge duration; if the discharged duration is greater than the warning duration and less than the safe discharge duration, the warning information is output.

[0159] Step 12, if the discharged duration is greater than the safe discharge duration, the energy storage system is controlled to shut down.

[0160] In the above embodiment, two communication paths of the battery management controller to the monitoring background and the battery management controller to the monitoring background through the corresponding module controller and the system controller are set, the communication reliability can be improved by the redundant communication paths, and the risk of information loss is reduced; and whether the overall communication fails or the communication of a single energy storage sub-module fails, the handling actions such as shutdown or maintaining the current state can be taken according to the communication failure, so that the system downtime can be minimized, the availability and operation efficiency of the energy storage system can be improved, and the reliability and stability of the energy storage system can be improved, and potential safety risks can be prevented.

[0161] It should be understood that, although each step in the above flowchart is displayed in sequence according to the direction of the arrow, these steps are not necessarily executed in sequence according to the direction of the arrow. Unless otherwise specified herein, the execution of these steps is not strictly limited in sequence, and these steps can be executed in other sequences. Moreover, at least part of the steps in the above flowchart can include multiple steps or multiple stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution sequence of these steps or stages is not necessarily sequential, but can be executed in rotation or alternation with at least part of other steps or steps or stages in other steps.

[0162] Based on the same inventive concept, the embodiments of the present application also provide a protection device for an energy storage system for implementing the protection method of the energy storage system as described above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, so the specific limitations in one or more protection device embodiments for an energy storage system provided below can refer to the limitations of the protection method for an energy storage system in the above text, which will not be repeated here.

[0163] According to some embodiments of the present application, referring to FIG. 8, a protection device for an energy storage system is provided, which comprises:

[0164] The first state acquisition module 801 is configured to acquire a first communication state of the monitoring background to the system controller, a first communication state of each battery management controller to the monitoring background, and a first communication state of each battery management controller to the monitoring background via the system controller.

[0165] The first protection module 802 is configured to perform a processing action corresponding to the communication fault if at least one of the first communication states indicates that the energy storage system has the communication fault; wherein the processing action comprises shutdown and maintaining the current state.

[0166] In some embodiments, the first protection module 802 is specifically configured to, if the first communication state of any battery management controller to the monitoring background is the communication fault, and at least one of the first communication states of any battery management controller to the corresponding module controller, any module controller to the system controller, and the system controller to the monitoring background is the communication fault, control the energy storage system to be shut down, when the first communication state of the monitoring background to the system controller is the communication normal.

[0167] In some embodiments, the first protection module 802 is specifically configured to, if the first communication state of each battery management controller to the monitoring background, and / or the first communication state of each battery management controller to the monitoring background via the corresponding module controller and the system controller is the communication normal, maintain the current state of the energy storage system, when the first communication state of the monitoring background to the system controller is the communication fault.

[0168] In some embodiments, referring to FIG. 9, the apparatus further comprises:

[0169] The second state acquisition module 803 is configured to, if all the first communication states are the communication normal, acquire, for each energy storage submodule in the energy storage system, a second communication state of the battery management controller and each battery management unit.

[0170] The number counting module 804 is configured to count the second communication states to obtain a communication fault number.

[0171] The second protection module 805 is configured to perform a corresponding processing action according to the communication fault number, wherein the processing action further comprises outputting a warning information.

[0172] In some embodiments, the second protection module 805 is specifically configured to control the energy storage system to be shut down if the communication fault number corresponding to any energy storage submodule is greater than a first number threshold, or the total communication fault number corresponding to a plurality of energy storage submodules is greater than a second number threshold.

[0173] In some embodiments, the second protection module 805 is specifically configured to, if the number of communication faults corresponding to each energy storage sub-module is less than or equal to the first number threshold, acquire a switch state of the bus switch and a fire-fighting state of each energy storage sub-module; in the case that the switch state is on or the fire-fighting state is started, control the energy storage system to be shut down.

[0174] In some embodiments, the second protection module 805 is further configured to, in the case that the switch state is off and the fire-fighting state is not started, perform state of charge statistics on a target energy storage sub-module that has a communication fault to obtain a minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, control the energy storage system to be shut down.

[0175] In some embodiments, the second protection module 805 is specifically configured to, for the target energy storage sub-module, if the battery management controller has a communication fault with a first battery management unit in the target energy storage sub-module, perform state of charge statistics on a battery unit corresponding to the first battery management unit, and determine a first state of charge obtained by the statistics as the minimum state of charge.

[0176] In some embodiments, the second protection module 805 is specifically configured to, for the target energy storage sub-module, if the battery management controller has a communication fault with a second battery management unit in the energy storage sub-module except the first battery management unit, perform state of charge statistics on a battery unit corresponding to the second battery management unit to obtain a second state of charge.

[0177] If a difference between the first state of charge and the second state of charge is greater than a preset difference value, the second state of charge is updated as the minimum state of charge.

[0178] In some embodiments, the second protection module 805 is further configured to, if the minimum state of charge is greater than or equal to the preset state of charge threshold, calculate a safe discharging duration corresponding to the minimum state of charge, and perform a corresponding processing action according to the safe discharging duration.

[0179] In some embodiments, the second protection module 805 is further configured to, after the safe discharging duration is calculated, acquire a discharged duration; if the discharged duration is greater than the safe discharging duration, control the energy storage system to be shut down.

[0180] In some embodiments, the second protection module 805 is further configured to determine a warning duration according to the safe discharging duration; if the discharged duration is greater than the warning duration and less than the safe discharging duration, output a warning information.

[0181] Each module in the protection device of the energy storage system described above can be realized by software, hardware, and a combination thereof, in whole or in part. Each module described above can be embedded in or independent of a processor in an electronic device in hardware form, or can be stored in a memory in the electronic device in software form, so as to be called and executed by a processor to perform operations corresponding to each module.

[0182] According to some embodiments of the present application, a computer device can be provided, which can be a system controller in an energy storage system, and an internal structure diagram of the computer device can be as shown in FIG. 10. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The input / output interface of the computer device is used to exchange information between the processor and external devices. The communication interface of the computer device is used to communicate with external terminals in a wired or wireless manner, and the wireless manner can be achieved through WIFI, mobile cellular network, NFC (near field communication) or other technologies. The computer program is executed by the processor to implement a protection method of an energy storage system. The display unit of the computer device is used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer overlaid on the display screen, or a key, trackball or touchpad arranged on the shell of the computer device, or an external keyboard, touchpad or mouse, etc.

[0183] Those skilled in the art can understand that the structure shown in FIG. 10 is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. A specific computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different component arrangement.

[0184] According to some embodiments of the present application, a non-transitory computer readable storage medium including instructions is also provided, for example, a memory including instructions, which can be executed by a processor of an electronic device to complete the above method. For example, the non-transitory computer readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk and an optical data storage device, etc.

[0185] According to some embodiments of the present application, a computer program product is also provided, which, when executed by a processor, can implement the above method. The computer program product includes one or more computer instructions. When the computer instructions are loaded and executed on a computer, part or all of the above method can be implemented according to the processes or functions described in the embodiments of the present application.

[0186] It can be understood by those skilled in the art that all or part of the processes in the above-mentioned embodiment methods can be completed by a computer program instructing related hardware, and the computer program can be stored in a non-volatile computer readable storage medium. When the computer program is executed, it can include the processes of the above-mentioned embodiments of the method. Any reference to memory, database or other medium used in the embodiments provided by the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided by the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided by the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., without being limited thereto.

[0187] The technical features of the above-mentioned embodiments can be combined in any way. In order to make the description concise, not all possible combinations of the technical features in the above-mentioned embodiments are described, but as long as the combinations of the technical features do not exist contradictory, they should be considered as the scope of the present application.

[0188] The above-described embodiments only express several implementation manners of the present application, facilitate specific and detailed understanding of the technical solutions of the present application, but cannot be understood as a limitation on the patent protection scope of the present application. It should be pointed out that, for ordinary skilled persons in the art, several modifications and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. It should be understood that, on the basis of the technical solutions provided by the present application, the technical solutions obtained by logical analysis, reasoning or limited experiments by the skilled person in the art all belong to the protection scope of the appended claims of the present application. Therefore, the patent protection scope of the present application should be subject to the content of the appended claims, and the description and drawings can be used to explain the content of the claims.

Claims

1. A method of protecting an energy storage system, wherein, The method comprises: acquiring first communication states of a monitoring background to a system controller in an energy storage system, each battery management controller to the monitoring background, and each battery management controller to the monitoring background via the system controller; if at least one of the first communication states indicates that the energy storage system has a communication fault, performing a processing action corresponding to the communication fault; wherein the processing action comprises shutdown and maintaining a current state.

2. The method of claim 1, wherein, The if at least one of the first communication states indicates that the energy storage system has a communication fault, performing a processing action corresponding to the communication fault, comprises: if the first communication state of any of the battery management controllers to the monitoring background is a communication fault, and at least one of the first communication states of any of the battery management controllers to a corresponding module controller, any of the module controllers to the system controller, and the system controller to the monitoring background is a communication fault, controlling the energy storage system to shut down, in the case that the first communication state of the monitoring background to the system controller is a normal communication.

3. The method of claim 1, wherein, The if at least one of the first communication states indicates that the energy storage system has a communication fault, performing a processing action corresponding to the communication fault, comprises: if the first communication states of each of the battery management controllers to the monitoring background, and / or the first communication states of each of the battery management controllers to the monitoring background via a corresponding module controller and the system controller are normal communication, maintaining a current state of the energy storage system, in the case that the first communication state of the monitoring background to the system controller is a communication fault.

4. The method according to any one of claims 1 to 3, wherein, The method further comprises: if all of the first communication states are normal communication, acquiring second communication states of the battery management controller and each battery management unit for each energy storage submodule in the energy storage system; statistically processing the second communication states to obtain a number of communication faults; performing a corresponding processing action according to the number of communication faults, wherein the processing action further comprises outputting a warning information.

5. The method of claim 4, wherein, The performing a corresponding processing action according to the number of communication faults, comprises: if a number of communication faults corresponding to any of the energy storage submodules is greater than a first number threshold, or a total number of communication faults corresponding to a plurality of the energy storage submodules is greater than a second number threshold, controlling the energy storage system to shut down.

6. The method of claim 5, wherein, The performing a corresponding processing action according to the number of communication faults, comprises: if a number of communication faults corresponding to each of the energy storage submodules is less than or equal to the first number threshold, acquiring a switch state of a bus switch and a fire-fighting state of each of the energy storage submodules; in the case that the switch state is closed or the fire-fighting state is started, controlling the energy storage system to shut down.

7. The method of claim 6, wherein, The method further comprises: in the case that the switch state is open and the fire-fighting state is not started, performing state of charge statistics on a target energy storage submodule having a communication fault to obtain a minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, controlling the energy storage system to shut down.

8. The method of claim 7, wherein, The state of charge of the target energy storage submodule with communication failure is counted to obtain a minimum state of charge, including: For the target energy storage submodule, if the battery management controller and the first battery management unit in the target energy storage submodule have communication failure, the state of charge of the battery unit corresponding to the first battery management unit is counted, and the first state of charge counted is determined as the minimum state of charge.

9. The method of claim 8, wherein, The method further includes: For the target energy storage submodule, if the battery management controller and the second battery management unit other than the first battery management unit in the energy storage submodule have communication failure, the state of charge of the battery unit corresponding to the second battery management unit is counted to obtain a second state of charge; If the difference between the first state of charge and the second state of charge is greater than a preset difference, the second state of charge is updated as the minimum state of charge.

10. The method of claim 7, wherein, The method further includes: If the minimum state of charge is greater than or equal to the preset state of charge threshold, the safe discharge duration corresponding to the minimum state of charge is calculated, and a corresponding processing action is performed according to the safe discharge duration.

11. The method of claim 10, wherein, The corresponding processing action performed according to the safe discharge duration includes: After the safe discharge duration is calculated, the discharged duration is obtained; If the discharged duration is greater than the safe discharge duration, the energy storage system is controlled to stop operating.

12. The method of claim 11, wherein, The method further includes: The warning duration is determined according to the safe discharge duration; If the discharged duration is greater than the warning duration and less than the safe discharge duration, a warning information is output.

13. A protection device for an energy storage system, wherein, The device includes: A first state acquisition module is configured to acquire a first communication state of a monitoring background to a system controller in an energy storage system, a first communication state of each battery management controller to the monitoring background, and a first communication state of each battery management controller to the monitoring background via the system controller; A first protection module is configured to perform a processing action corresponding to a communication failure if at least one of the first communication states indicates that the energy storage system has the communication failure; wherein the processing action includes stopping operation and maintaining the current state.

14. An energy storage system, wherein, The energy storage system includes a monitoring background, a system controller, a plurality of energy storage submodules, a battery management controller corresponding to each energy storage submodule, and a module controller; the battery management controller and the module controller are in one-to-one communication connection; the monitoring background is in communication connection with the system controller and each battery management controller, and the system controller is in communication connection with each module controller; The battery management controller is configured to acquire state information of the corresponding energy storage submodule; The module controller is configured to control the corresponding energy storage submodule; The monitoring background is configured to perform state monitoring; The system controller is configured to perform the method of any one of claims 1-12.

15. A computer device comprising a memory and a processor, the memory storing a computer program, wherein, The processor executes the computer program to implement the method of any one of claims 1-12.

16. A computer readable storage medium having stored thereon a computer program, wherein, The computer program is executed by the processor to implement the method of any one of claims 1-12.

17. A computer program product comprising a computer program, wherein, The computer program, which when executed by the processor, implements the method of any one of claims 1 to 12.

Images