Method for checking a communication connection between a motor vehicle and a hydrogen filling station

Abstract

The invention relates to a method for checking a communication connection between a motor vehicle (1) and a hydrogen filling station (8), comprising the steps: I) establishing the communication connection between the motor vehicle (1) and the hydrogen filling station (8); II) unlocking a cover (4) of a filler neck (5) of the motor vehicle (1); III) sending a status confirmation that the cover (4) of the filler neck (5) is unlocked from the motor vehicle (1) to the hydrogen filling station (8); IV) checking by the hydrogen filling station (8) whether a status confirmation has been received from the motor vehicle (1); V) determining a correct communication connection if the status confirmation has been received or determining a faulty communication connection if the status confirmation has not been received.

Description

[0001] 24-2977 1

[0002] Method for verifying a communication link between a motor vehicle and a hydrogen refueling station

[0003] The invention relates to a method for verifying a communication link between a motor vehicle with a hydrogen tank and a hydrogen filling station.

[0004] For data exchange between a motor vehicle, in particular a fuel cell electric vehicle (FCEV), and a hydrogen refueling station, an infrared interface is used, for example, in accordance with standards SAE J2601 or SAE J2799. However, other technologies for wireless communication between two or more technical devices can also be used, such as mobile communications or NFC. For example, DE 102015 221 538 A1 describes a motor vehicle with a tank in which hydrogen can be stored under higher pressure in the range of 300 bar to 700 bar, wherein the vehicle has an electronic communication device that notifies the refueling station of an impending refueling request for its tank via digital mobile communications.

[0005] One challenge when establishing connections over long distances, for example via mobile networks or other wireless communication technologies, is ensuring that the correct partners are communicating with each other and that another participant doesn't accidentally send data to the receiver. For example, several vehicles might be at a gas station, each sending data to the station according to their refueling request.

[0006] It is an object of the invention to provide an improved method for verifying a communication link between a motor vehicle and a hydrogen filling station, which ensures that the filling station communicates with the motor vehicle to be refueled.

[0007] This problem is solved by a method according to claim 1. Advantageous embodiments and further developments of the invention are set forth in the dependent claims. 24-2977 2

[0008] The procedure verifies a communication link between a motor vehicle with a hydrogen tank, in particular a fuel cell electric vehicle (FCEV), and a hydrogen refueling station. The motor vehicle can be, in particular, a passenger car or a commercial vehicle such as a truck or bus. The hydrogen refueling station can be, in particular, a publicly accessible hydrogen refueling station (HRS). The procedure involves establishing a communication link between the motor vehicle and the hydrogen refueling station. In a further step, a cover of the motor vehicle's filler neck, for example, a fuel filler flap, is unlocked or opened. The motor vehicle then sends a status confirmation to the hydrogen refueling station indicating that the filler neck cover is unlocked or open. The hydrogen refueling station verifies whether the motor vehicle has received the status confirmation.A successful communication connection is established if the status confirmation is received. Otherwise, if the status confirmation is not received, a faulty communication connection is established.

[0009] The invention is based in particular on the consideration of including the status of the cover of the vehicle's filler neck for the verification of the communication link between the vehicle and the hydrogen refueling station. A signal sent from the vehicle to the hydrogen refueling station indicating that the cover of the vehicle's filler neck is unlocked or open serves as confirmation for the hydrogen refueling station that error-free data transmission from the vehicle is possible and that refueling can take place using a wireless communication link (in particular, the delivery of the hydrogen medium according to a safety-oriented COM protocol).If this is not the case, another attempt can be made to establish a flawless wireless communication connection, or the refueling process can take place without using a wireless communication connection (delivery of the hydrogen medium via non-COM protocol).

[0010] According to one configuration, the communication link is disconnected if a faulty communication link is detected. In this case, another attempt can then be made to establish a correct communication link between the vehicle and the hydrogen refueling station. The previously described steps of unlocking a cover on a filler neck of the vehicle, sending a status confirmation from the vehicle to the hydrogen refueling station, and verification by the 24-2977 3

[0011] The hydrogen filling station, whether a confirmation of regulation was received from the vehicle, and the determination of a correct communication connection if the status confirmation was received, or the determination of a faulty communication connection if the status confirmation was not received, can in this case be repeated at least once or several times.

[0012] According to one implementation, if a faulty communication link is detected, refueling is carried out without a digital communication link between the vehicle and the hydrogen refueling station. Such a non-communication-based (non-COM) refueling process can be carried out, for example, according to the SAE J2601 standard.

[0013] If a correct communication link is established between the vehicle and the hydrogen refueling station, refueling is preferably carried out using a digital communication link. This has the particular advantage that the refueling process can be carried out faster and / or a higher fill level of the hydrogen tank can be achieved.

[0014] The communication link between the vehicle and the hydrogen refueling station can be, in particular, a connection via Wi-Fi or mobile network. Alternatively, other wireless communication technologies can also be used.

[0015] In one implementation of the process, the vehicle and the hydrogen refueling station mutually authenticate each other when establishing the communication connection. This can be done, for example, via digital certificates or other cryptographic mechanisms. It can be stipulated that only correctly authenticated vehicles are authorized to begin refueling. The previously described check to ensure that the vehicle has sent a status confirmation of the filler neck cover to the hydrogen refueling station is performed in addition to this, in order to guarantee an error-free communication connection during the refueling process.

[0016] According to one implementation of the procedure, the communication link between the vehicle and the hydrogen refueling station is an encrypted connection. This ensures that only authorized participants have access to the content of the 24-2977 4.

[0017] Communication takes place. In particular, secure communication protocols such as TLS (Transport Layer Security) are used to protect data exchange.

[0018] The vehicle may still have a unique identifier, which is verified when the communication link is established.

[0019] A preferred embodiment of the invention is described below with reference to the accompanying drawings. Further details, preferred embodiments, and further developments of the invention will be derived from these drawings. Specifically, the drawings show...

[0020] Fig. 1 shows a schematic representation of a motor vehicle upon arrival at a hydrogen filling station,

[0021] Fig. 2 shows a schematic representation of a motor vehicle connected to a hydrogen filling station and

[0022] Fig. 3 shows a representation of the steps of the procedure according to an exemplary embodiment using a flowchart.

[0023] Identical or similarly functioning components are marked with the same reference symbols in the figures. The depicted components and their relative sizes are not to be considered to scale.

[0024] Figure 1 schematically depicts a motor vehicle 1 (FCEV) that has a hydrogen tank 2, in particular for gaseous hydrogen. The hydrogen tank 2 can be designed as a pressure vessel system comprising several pressure vessels. The hydrogen tank 2 can be refueled with hydrogen via a filler neck 5 on the motor vehicle 1. The filler neck 5 is located behind a cover 4, for example, a fuel filler flap, which is locked unless unlocked by a control unit 3 in the motor vehicle 1 to prepare for refueling. To prepare for refueling, a user of the vehicle can signal a refueling request to the control unit 3 of the motor vehicle 1, for example, via a button, a switch, or voice input.It is also possible that the user is offered the option of refueling by the vehicle 1 24-2977 5, for example, depending on the tank level and / or based on recorded position data of the vehicle and the coordinates of known hydrogen refueling stations. It is also conceivable that a hydrogen refueling station 8, which is communicatively networked with a fleet of vehicles via a server system, signals a refueling option to a refueling-capable vehicle, which can then be confirmed by the user. When the vehicle 1 is located at the hydrogen refueling station 8 as shown in Figure 1, a wireless communication link is established between the vehicle 1 and the hydrogen refueling station 8 to carry out the refueling process. The hydrogen refueling station 8 has a control unit 9, which is configured to communicate with a control unit 3 in the vehicle 1.Communication takes place primarily via wireless communication technology such as mobile communications, WLAN or NFC.

[0025] Once the vehicle 1 has unlocked the cover 4 of the filler neck 5, it can be opened automatically or manually by the user to insert a dispensing nozzle 6 into the filler neck 5 and begin the refueling process, as shown in Figure 3. During the subsequent refueling process, hydrogen is transferred via a pressure line 7 from the hydrogen refueling station 8 to the hydrogen tank 2 of the vehicle 1. The hydrogen refueling station 8 is, for example, configured to refuel the vehicle 1 with hydrogen at a pressure of up to 350 bar or up to 700 bar. The hydrogen is preferably cooled in the hydrogen refueling station 8, for example, to a temperature in the range of -40 °C to 0 °C inclusive. This limits the maximum temperature that the hydrogen reaches in the hydrogen tank due to compression during the refueling process. In particular, it is ensured that a maximum temperature of 85 °C is not exceeded.

[0026] When establishing the wireless communication link between vehicle 1 and hydrogen refueling station 8, it is important to ensure that hydrogen refueling station 8 communicates with the vehicle 1 actually being refueled. Faulty communication, for example with another vehicle located in the vicinity of hydrogen refueling station 8, should be avoided.

[0027] Figure 3 schematically illustrates the steps of a procedure used to verify the communication link between the motor vehicle 1 and the hydrogen filling station 8 24-2977 6.

[0028] Before the refueling process begins, a communication link is established in step S1 between the control unit 9 in the hydrogen refueling station 8 and the control unit 3 in the vehicle 1. For example, the user of the vehicle 1 can communicate a refueling request to the hydrogen refueling station 8 via a user interface connected to the control unit 3 or via an app. Communication between the hydrogen refueling station 8 and the vehicle 1 takes place, for example, via mobile network, WLAN, or NFC.

[0029] The vehicle 1, via its control unit 3 at the hydrogen refueling station 8, signals its readiness for refueling. This involves, in step S2, unlocking or opening the cover 4 of the filler neck 5. In step S3, the vehicle 1, specifically its control unit 3, sends a status confirmation to the hydrogen refueling station 8 indicating that the cover 4 is unlocked or open. The hydrogen refueling station 8, specifically its control unit 9, checks in step S4 whether the status confirmation has been received from the vehicle 1. If the status confirmation has been received, a successful communication link exists. In this case, a refueling process can be carried out in step S5 using a wireless communication link.Refueling with an active digital communication link between the control unit 9 of the hydrogen refueling station 8 and the control unit 3 of the vehicle 1 is advantageous for enabling a fast refueling process and / or achieving a high fill level during refueling. If the hydrogen refueling station 8 does not receive a status confirmation from the vehicle 1, a faulty communication link exists. In this case, the previously described steps S1 to S4 can be repeated to attempt to establish a fault-free communication link. Alternatively, or if this also fails, a refueling process without a digital communication link (non-COM refueling) can be carried out in step S6.

[0030] Although the invention has been illustrated and described in detail with reference to exemplary embodiments, the invention is not limited by these embodiments. Rather, other variations of the invention can be derived by a person skilled in the art without departing from the scope of protection of the invention as defined by the claims. 24-2977 7

[0031] Reference symbol list

[0032] 1 Motor vehicle 2 Hydrogen tank

[0033] 3. Motor vehicle control unit

[0034] 4 Cover

[0035] 5 filling ports

[0036] 6. Fuel nozzle 7. Pressure line

[0037] 8 hydrogen filling stations

[0038] 9 Control unit of the hydrogen filling station

[0039] S1...S6 process steps

Claims

24-2977 8 Patent claims 1. Method for verifying a communication link between a motor vehicle (1) and a hydrogen refueling station (8), comprising the steps: I) Establishment of the communication link between the motor vehicle (1) and the hydrogen filling station (8); II) Unlocking or opening a cover (4) of a filler neck (5) of the motor vehicle (1); III) Sending a status confirmation that the cover (4) of the filler neck (5) is unlocked or opened from the motor vehicle (1) to the hydrogen filling station (8); IV) The hydrogen filling station (8) must check whether the vehicle (1) has received the status confirmation; V) Determining a correct communication link if the status confirmation has been received, or determining a faulty communication link if the status confirmation has not been received.

2. The method of claim 1, wherein the communication link is disconnected in the event of a faulty communication link being detected and steps I) to V) are repeated at least once.

3. Method according to one of the preceding claims, wherein in the event of a faulty communication connection being detected, refueling is carried out without a digital communication connection between the motor vehicle (1) and the hydrogen refueling station (8).

4. Method according to one of the preceding claims, wherein, in the event of the detection of a correct communication connection, a refueling process is carried out using a digital communication connection.

5. Method according to any of the preceding claims, wherein the communication link is a connection via WLAN or mobile network. 24-2977 9 6. A method according to any one of the preceding claims, wherein the motor vehicle (1) and the hydrogen refueling station (8) mutually authenticate each other when establishing the communication connection.

7. A method according to any one of the preceding claims, wherein the communication connection between the motor vehicle (1) and the hydrogen refueling station (8) is an encrypted communication connection.

8. Method according to any of the preceding claims, wherein the motor vehicle (1) has a unique identification which is verified during the establishment of the communication connection.

9. Control device for a hydrogen filling station, wherein the control device (9) is configured to perform a method according to one of methods 1 to 8.

Images