Fuel Cell Controller Failure Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In fuel cell systems with multiple power supply sources, concurrent failures can occur due to delayed failure information transfer between controllers, leading to uncontrolled system component shutdowns and potential semiconductor device failures.

Innovation Solution

Implementing a communication system between controllers to share failure information, allowing simultaneous stopping of affected system components and controlled restarts, using a configuration where multiple controllers work together to manage converters and inverters, and incorporating a judgment part for determining the cause of failures to safely restart the system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If failure information is not shared between controllers, then controller complexity is reduced, but concurrent failures cannot be avoided

Engineering Contradiction:
Improvecontroller complexityVSAvoidsystem reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent segments the control system into multiple independent controllers, each responsible for specific system components. This segmentation maintains low individual controller complexity while enabling coordinated failure response through information sharing via the communication system.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The communication system serves as an intermediary that enables failure information sharing between segmented controllers. This allows the system to achieve high reliability through coordinated response without increasing individual controller complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If system components stop independently upon failure detection, then component protection is improved, but uncontrolled shutdowns occur leading to potential semiconductor device failures

Engineering Contradiction:
Improvecomponent protectionVSAvoiduncontrolled shutdown effects
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent uses feedback to ensure that when one controller detects a failure, this information is immediately communicated to other controllers. This coordinated feedback mechanism ensures that all components stop in a controlled manner, preventing harmful effects from uncontrolled shutdowns while maintaining component protection.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent implements preliminary action by having controllers prepare to stop system components simultaneously upon receiving failure information. This coordinated preliminary stopping action prevents uncontrolled shutdowns and their harmful effects while maintaining individual component protection capabilities.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP2876716B1Fuel cell system
Publication Date: 2019.04.17 TOYOTA JIDOSHA KK
  • EP2876716B1 patent drawingFigure 1
  • EP2876716B1 patent drawingFigure 2
  • EP2876716B1 patent drawingFigure 3

AI summary

A fuel cell system according to the present invention comprises: a fuel cell and a secondary battery, each acting as a power supply source; a first converter a second converter provided between the fuel cell and the secondary battery and first and second loads; a first inverter provided between the first and second converters and the first load and a second inverter provided between the first and second converters and the second load; a first controller that controls an output of the fuel cell by controlling the first converter; and a second controller configured separately from the first controller, the second controller controlling the second converter, the first inverter and the second inverter to thereby control outputs supplied to the first inverter and the second inverter, including an output from the secondary battery. The first and second controllers are connected so as to be able to communication with each other regarding failure information on respective control targets. If one of the first controller and the second controller receives the failure information sent from the other, the first controller or the second controller that has received the failure information stops operation of the control target thereof.