Hydrogen Station Safety Control Watchdog Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Hydrogen stations face challenges in managing and preventing abnormalities in their systems, which can lead to hydrogen leaks and electrical contact issues, as existing systems lack effective measures for ensuring the reliability of state management and safety controls.

Innovation Solution

A hydrogen station with a state management apparatus and a safety control apparatus that perform watchdog controls to monitor and cut off power supply if abnormalities are detected, ensuring the main equipment's safe operation by prioritizing power shutdown even if the state management apparatus appears to be functioning correctly.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If the state management apparatus performs watchdog control to check system operations, then the operational monitoring capability is improved, but the reliability of safety control is worsened when the state management apparatus itself malfunctions

Engineering Contradiction:
Improveoperational monitoring capabilityVSAvoidsafety control reliability
Core Design Contradiction:
Measurement precisionVSReliability

Solution Approach 1:

The safety control system is segmented into two independent watchdog control functions: first watchdog control in the state management apparatus for monitoring system operations, and second watchdog control in the safety control apparatus for monitoring the state management apparatus itself. This segmentation allows each component to independently verify the other, preventing a single point of failure from compromising overall safety control reliability.

Inventive Principle:
Principle #1Segmentation

2Object-affected harmful factors

If the safety control apparatus cuts off power supply when detecting abnormalities in the state management apparatus, then the safety against hydrogen leaks is improved, but the operational continuity is worsened

Engineering Contradiction:
Improvehydrogen leak preventionVSAvoidoperational continuity
Core Design Contradiction:
Object-affected harmful factorsVSProductivity

Solution Approach 1:

The safety control apparatus performs preliminary anti-action by proactively cutting off power supply to the main equipment when the second watchdog control detects abnormalities in the state management apparatus. This preventive measure stops potential hydrogen leaks and electrical contact hazards before they can occur, prioritizing safety over operational continuity.

Inventive Principle:
Principle #9Preliminary anti-action

3Device complexity

If the system uses a single watchdog control in the state management apparatus, then the device complexity is reduced, but the ability to detect management apparatus failures is worsened

Engineering Contradiction:
Improvecontrol system complexityVSAvoidfailure detection capability
Core Design Contradiction:
Device complexityVSDifficulty of detecting and measuring

Solution Approach 1:

The second watchdog control in the safety control apparatus provides feedback monitoring of the state management apparatus's operational status. This feedback mechanism detects failures in the state management apparatus that would otherwise go unnoticed, enabling the safety control apparatus to take corrective action by cutting off power supply when necessary.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11162180B2Hydrogen station
Publication Date: 2021.11.02 HONDA MOTOR CO LTD
  • US11162180B2 patent drawing
  • US11162180B2 patent drawing
  • US11162180B2 patent drawing

AI summary

A hydrogen station includes a state management apparatus that is connected to each of a plurality of systems and manages the states of the plurality of systems, and a safety control apparatus that is formed separately from the main equipment and is connected to the state management apparatus. The state management apparatus performs first watchdog control to check operations of the plurality of systems and the safety control apparatus performs second watchdog control to check an operation of the state management apparatus. The state management apparatus or the safety control apparatus cuts off the power supply from the safety control apparatus to the main equipment if an abnormality is recognized by the second watchdog control, even if the first watchdog control indicates correct operation.