Tank system and method for servicing a tank system
The tank system addresses maintenance challenges by using a computing unit to control valves only via user interface commands, ensuring safe and efficient maintenance operations by overriding external signals and blocking error messages.
Patent Information
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- ROBERT BOSCH GMBH
- Filing Date
- 2025-11-27
- Publication Date
- 2026-06-18
Smart Images

Figure EP2025084453_18062026_PF_FP_ABST
Abstract
Description
[0001] R. 413454
[0002] - 1 -
[0003] Description
[0004] title
[0005] The presented invention relates to a tank system, a method for maintaining a tank system and a vehicle.
[0006] State of the art
[0007] To supply consumers, such as fuel cell systems, with fuel, i.e., hydrogen-containing fluid, tank systems are typically used. These systems include a processing unit and a number of controllable valves. To supply hydrogen, a consumer sends a supply command to the respective tank system, whereupon the tank system's processing unit activates the corresponding valves, i.e., switches them to an open state.
[0008] Furthermore, the computing unit of a tank system is configured to perform diagnostic functions in order to detect and report a faulty condition of the tank system.
[0009] During maintenance or manufacturing of a tank system, situations may arise in which the tank system needs to be filled or emptied.
[0010] Disclosure of the invention
[0011] The invention presents a tank system for storing hydrogen, a method for maintaining a tank system, and a vehicle. Further features and details of the invention are set forth in R. 413454.
[0012] - 2 - from the respective dependent claims, the description and the drawings. Features and details described in connection with the tank system according to the invention naturally also apply in connection with the method and the vehicle according to the invention, and vice versa, so that the disclosure regarding the individual aspects of the invention always refers to each other or can refer to each other.
[0013] The presented invention serves in particular to provide a means for the simple maintenance of a tank system for storing hydrogen.
[0014] Thus, according to a first aspect of the presented invention, a tank system for storing hydrogen is presented.
[0015] The presented tank system comprises a number of tanks, each tank comprising a number of valves and a computing unit, the computing unit being configured to control respective valves to adjust a hydrogen flow out of the tank system, and the computing unit comprising an interface to a user interface and being configured to switch to a maintenance mode in response to a lock command provided by the user interface, in which the computing unit is configured to control the valves only in response to a control command provided by the user interface.
[0016] In the context of the presented invention, a computing unit is to be understood as a computer, a processor, a control unit or any other programmable circuit.
[0017] A valve in a tank system can be, for example, a pressure regulator, a tank valve and / or a shut-off valve.
[0018] The presented invention is based on a maintenance operation in which the valves of the tank system are controlled only, i.e., exclusively, in response to a control command issued via the user interface R. 413454.
[0019] - 3 - is provided, through which the locking command is also provided. The user interface can be, for example, a workshop tester or an end-of-line tester, or be integrated into one.
[0020] To prevent the valves from being activated by another signal source, such as a vehicle control unit connected to the tank system or a server that has not issued the blocking command, the tank system's control unit can, for example, override or disregard commands to activate the valves transmitted to the tank system by another signal source during maintenance operation. Accordingly, maintenance operation prevents unintentional activation of the valves during maintenance, for example, by a vehicle encompassing the tank system or another external system such as a server, and ensures safe operation of the tank system.
[0021] To activate maintenance mode, the presented tank system includes an interface, such as a wireless or wired interface, to a user interface, such as a testing device, in particular a workshop tester or end-of-line tester. Accordingly, a technician can communicatively connect a user interface to the tank system via its interface to transmit a lock command to the tank system's processing unit and activate maintenance mode, or switch the maintenance mode to the "on" state.
[0022] It may also be provided that the computing unit is configured to control the valves in the maintenance operation in response to the control command in such a way that the tank system can be filled or emptied.
[0023] By restricting the control of the valves for emptying or refueling the tank system to maintenance operations, unintended control of the valves by another system during maintenance is prevented, and a technician can empty or refuel the tank system without needing access to the other system, such as a vehicle containing the tank system. R. 413454
[0024] - 4 -
[0025] It may also be provided that the computing unit is configured to block the output of error messages during maintenance operation, in particular the execution of a diagnostic function to diagnose a condition of the tank system.
[0026] By blocking the output of error messages, a technician can work on the tank system or bring the tank system into states where an error message would normally be displayed, without the error messages being stored in the tank system's error memory or in the error memory of a higher-level system encompassing the tank system, such as a vehicle. Accordingly, blocking the output of error messages eliminates the effort required to delete such error messages. In particular, this can make access to the error memory of the higher-level system unnecessary for the technician, allowing the technician to service the tank system independently of access to the higher-level system.
[0027] It may also be provided that the interface is configured for communication with a test device.
[0028] An interface for communication with a testing device, such as a workshop tester or an end-of-line tester, can, for example, support a predefined communication protocol.
[0029] It may also be provided that the tank system includes a testing device configured to transmit the locking command and the control command to the computing unit in response to user input.
[0030] A test device, such as a workshop tester or an end-of-line tester, can contain a predefined set of control commands, for example, stored in memory or downloaded from a server. This set causes the lock command and the control command to be transmitted to the processing unit, thereby activating maintenance operation. Therefore, for example, a predefined test device can be controlled via a communicative connection to a server or by R. 413454
[0031] - 5 -
[0032] Loading the specified command set onto the specified test device to the test device that is configured to transmit the lock command and the control command to the computing unit in response to user input, is converted or upgraded.
[0033] It may also be provided that the computing unit is configured to terminate maintenance operations in response to an unlock command provided through the user interface.
[0034] To end the maintenance operation, an unlock command is suitable, which, for example, sets the maintenance operation state to "off".
[0035] According to a second aspect, the presented invention relates to a method for maintaining a tank system.
[0036] The presented method comprises transmitting a locking command to a computing unit of the tank system, activating a maintenance operation of the tank system in response to the locking command, in which valves of the tank system are controlled only in response to a control command provided via the user interface in order to refuel or empty the tank system, transmitting an unlocking command to the computing unit and deactivating the maintenance operation in response to the unlocking command.
[0037] The presented method is particularly useful for setting up the maintenance operation and for refueling or emptying the presented tank system during the maintenance operation.
[0038] According to a third aspect, the presented invention relates to a vehicle, wherein the vehicle comprises a possible embodiment of the presented tank system.
[0039] It may be provided that a computing unit of the tank system is configured to transmit the status of a maintenance operation of the tank system to the vehicle's computing unit. R. 413454
[0040] - 6 -
[0041] By transmitting the status of the tank system's maintenance operation to the vehicle's computer unit, a reaction by the vehicle to a potentially faulty state of the tank system while the maintenance operation is active can be prevented, thus preventing error messages from being entered into the vehicle's fault memory.
[0042] Further advantages, features, and details of the invention will become apparent from the following description, in which exemplary embodiments of the invention are described in detail with reference to the drawings. The features mentioned in the claims and in the description can each be essential to the invention individually or in any combination.
[0043] Drawings
[0044] They each show schematically:
[0045] Figure 1 shows a possible embodiment of the presented tank system in a possible embodiment of the presented vehicle, and
[0046] Figure 2 shows a possible embodiment of the presented method.
[0047] Description of the exemplary implementations
[0048] Figure 1 shows a tank system 100 for storing hydrogen.
[0049] The tank system 100 comprises a number of tanks 101, valves 103 and a computing unit 105.
[0050] The computing unit 105 is configured to control respective valves 103 in order to adjust a hydrogen flow from the tank system 100.
[0051] The computing unit 105 includes an interface 107 to a user interface 109 and is configured to respond to a command issued by R. 413454.
[0052] - 7 - the user interface 109 provided lock command to switch to a maintenance mode in which the control unit 105 prevents the valves 103 from being controlled.
[0053] Optionally, the tank system 100 includes a tester 111, which includes the user interface 109 and is configured to transmit the locking command to the computing unit 105 in response to user input.
[0054] The tank system 100 is part of a vehicle 200, which includes a fuel cell system 201 and a vehicle computing unit 203.
[0055] The fuel cell system 201 is supplied with hydrogen by the tank system 100. For this purpose, the vehicle control unit 203 can transmit a provision command to the control unit 105, which, in normal operation, switches the valves 103 in response to the provision command so that hydrogen flows from the tanks 101 to the fuel cell system 201. If maintenance mode is activated, the control unit 105 does not execute a provision command from the vehicle control unit 203.
[0056] Rather, the computing unit 105 in the maintenance operation is configured to adjust the valves 103 only in response to control commands provided by the user interface 109 or the tester 111, so that the tank system 100 can be filled or emptied.
[0057] Fig. 2 shows a method 300 for maintaining the tank system 100 according to Fig. 1.
[0058] The procedure 300 comprises a first transmission step 301, in which a locking command is transmitted to the computing unit 105 of the tank system 100, and an activation step 303, in which a maintenance operation of the tank system 100 is activated in response to the locking command. In this maintenance operation, valves 103 of the tank system 100 are actuated only in response to a control command provided via the user interface 109 in order to refuel or empty the tank system 100. R. 413454
[0059] - 8 -
[0060] Furthermore, the procedure 300 includes a second transmission step 305, in which an unlock command is transmitted to the computing unit 105, and a deactivation step 307, in which the maintenance operation is deactivated in response to the unlock command.
Claims
R. 413454 - 9 - Claims 1. Tank system (100) for storing hydrogen, wherein the tank system (100) comprises: a number of tanks (101), each tank (101) comprising a number of valves (103), a computing unit (105), wherein the computing unit (105) is configured to control respective valves (103) to regulate a hydrogen flow out of the tank system (100), and wherein the computing unit (105) comprises an interface (107) to a user interface (109) and is configured to switch to a maintenance mode in response to a lock command provided by the user interface (109), in which the computing unit (105) is configured to control the valves (103) only in response to a control command provided by the user interface (109).
2. Tank system (100) according to claim 1, characterized in that the computing unit (105) is configured to control the valves (103) in maintenance mode in response to the control command in such a way that the tank system can be filled or emptied.
3. Tank system (100) according to claim 1 or 2, characterized in that the computing unit (105) is configured to block the output of error messages, in particular the execution of a diagnostic function for diagnosing a condition of the tank system (100), during maintenance operation.
4. Tank system (100) according to one of the preceding claims, characterized in that R. 413454 - 10 - that the interface (107) is configured for communication with a test device (111).
5. Tank system (100) according to one of the preceding claims, characterized in that the tank system (100) comprises a test device (111) which is configured to transmit the locking command and at least one control command for actuating the valves (103) to the computing unit (105) in response to a user input.
6. Tank system (100) according to one of the preceding claims, characterized in that the computing unit (105) is configured to output a maintenance operation status.
7. Tank system (100) according to one of the preceding claims, characterized in that the computing unit (105) is configured to terminate maintenance operation in response to an unlock command provided by the user interface (109).
8. Method (300) for maintaining a tank system (100), wherein the method (300) comprises: Transmitting (301) a locking command provided by using a user interface (109) communicatively coupled with the tank system (100) to a computing unit (105) of the tank system (100), Activating (303) a maintenance operation of the tank system (100) in response to the locking command, wherein in the maintenance operation valves (103) of the tank system (100) are controlled only in response to a control command provided by means of the user interface (109) in order to refuel or empty the tank system (100), Transmitting (305) an unlock command to the computing unit (105), R. 413454 - 11 - Disable (307) maintenance operation in response to the unlock command.
9. Vehicle (200), wherein the vehicle (200) comprises a vehicle computing unit (203) and a Tank system (100) according to any one of claims 1 to 7.
10. Vehicle (200) according to claim 9, characterized in that a computing unit (201) of the tank system (100) is configured to transmit a maintenance operation status of the tank system (100) to the vehicle computing unit (203) of the vehicle (200).