+

WO2009000363A1 - Safety device for a vehicle operated with a fuel cell system and vehicle with the safety device - Google Patents

Safety device for a vehicle operated with a fuel cell system and vehicle with the safety device Download PDF

Info

Publication number
WO2009000363A1
WO2009000363A1 PCT/EP2008/003643 EP2008003643W WO2009000363A1 WO 2009000363 A1 WO2009000363 A1 WO 2009000363A1 EP 2008003643 W EP2008003643 W EP 2008003643W WO 2009000363 A1 WO2009000363 A1 WO 2009000363A1
Authority
WO
WIPO (PCT)
Prior art keywords
vehicle
fuel cell
cell system
safety device
response scheme
Prior art date
Application number
PCT/EP2008/003643
Other languages
French (fr)
Inventor
Werner Belschner
Wolfram Faas
Dietmar Mirsch
Bernd Monzel
Volker Schempp
Manfred Strohmaier
Hans-Frieder Walz
Original Assignee
Daimler Ag
Ford Global Technologies, Llc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Daimler Ag, Ford Global Technologies, Llc filed Critical Daimler Ag
Publication of WO2009000363A1 publication Critical patent/WO2009000363A1/en

Links

Classifications

    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01M—PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY
    • H01M8/00—Fuel cells; Manufacture thereof
    • H01M8/04—Auxiliary arrangements, e.g. for control of pressure or for circulation of fluids
    • H01M8/04298—Processes for controlling fuel cells or fuel cell systems
    • H01M8/04313—Processes for controlling fuel cells or fuel cell systems characterised by the detection or assessment of variables; characterised by the detection or assessment of failure or abnormal function
    • H01M8/04664—Failure or abnormal function
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L3/00—Electric devices on electrically-propelled vehicles for safety purposes; Monitoring operating variables, e.g. speed, deceleration or energy consumption
    • B60L3/0007—Measures or means for preventing or attenuating collisions
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L3/00—Electric devices on electrically-propelled vehicles for safety purposes; Monitoring operating variables, e.g. speed, deceleration or energy consumption
    • B60L3/0023—Detecting, eliminating, remedying or compensating for drive train abnormalities, e.g. failures within the drive train
    • B60L3/0069—Detecting, eliminating, remedying or compensating for drive train abnormalities, e.g. failures within the drive train relating to the isolation, e.g. ground fault or leak current
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L50/00—Electric propulsion with power supplied within the vehicle
    • B60L50/50—Electric propulsion with power supplied within the vehicle using propulsion power supplied by batteries or fuel cells
    • B60L50/70—Electric propulsion with power supplied within the vehicle using propulsion power supplied by batteries or fuel cells using power supplied by fuel cells
    • B60L50/72—Constructional details of fuel cells specially adapted for electric vehicles
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01M—PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY
    • H01M8/00—Fuel cells; Manufacture thereof
    • H01M8/04—Auxiliary arrangements, e.g. for control of pressure or for circulation of fluids
    • H01M8/04223—Auxiliary arrangements, e.g. for control of pressure or for circulation of fluids during start-up or shut-down; Depolarisation or activation, e.g. purging; Means for short-circuiting defective fuel cells
    • H01M8/04228—Auxiliary arrangements, e.g. for control of pressure or for circulation of fluids during start-up or shut-down; Depolarisation or activation, e.g. purging; Means for short-circuiting defective fuel cells during shut-down
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01M—PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY
    • H01M8/00—Fuel cells; Manufacture thereof
    • H01M8/04—Auxiliary arrangements, e.g. for control of pressure or for circulation of fluids
    • H01M8/04298—Processes for controlling fuel cells or fuel cell systems
    • H01M8/043—Processes for controlling fuel cells or fuel cell systems applied during specific periods
    • H01M8/04303—Processes for controlling fuel cells or fuel cell systems applied during specific periods applied during shut-down
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01M—PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY
    • H01M8/00—Fuel cells; Manufacture thereof
    • H01M8/04—Auxiliary arrangements, e.g. for control of pressure or for circulation of fluids
    • H01M8/04298—Processes for controlling fuel cells or fuel cell systems
    • H01M8/04694—Processes for controlling fuel cells or fuel cell systems characterised by variables to be controlled
    • H01M8/04955—Shut-off or shut-down of fuel cells
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01M—PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY
    • H01M8/00—Fuel cells; Manufacture thereof
    • H01M8/04—Auxiliary arrangements, e.g. for control of pressure or for circulation of fluids
    • H01M8/04298—Processes for controlling fuel cells or fuel cell systems
    • H01M8/04992—Processes for controlling fuel cells or fuel cell systems characterised by the implementation of mathematical or computational algorithms, e.g. feedback control loops, fuzzy logic, neural networks or artificial intelligence
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01M—PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY
    • H01M2250/00—Fuel cells for particular applications; Specific features of fuel cell system
    • H01M2250/20—Fuel cells in motive systems, e.g. vehicle, ship, plane
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01M—PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY
    • H01M8/00—Fuel cells; Manufacture thereof
    • H01M8/04—Auxiliary arrangements, e.g. for control of pressure or for circulation of fluids
    • H01M8/04298—Processes for controlling fuel cells or fuel cell systems
    • H01M8/04313—Processes for controlling fuel cells or fuel cell systems characterised by the detection or assessment of variables; characterised by the detection or assessment of failure or abnormal function
    • H01M8/04537—Electric variables
    • H01M8/04634—Other electric variables, e.g. resistance or impedance
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02E—REDUCTION OF GREENHOUSE GAS [GHG] EMISSIONS, RELATED TO ENERGY GENERATION, TRANSMISSION OR DISTRIBUTION
    • Y02E60/00—Enabling technologies; Technologies with a potential or indirect contribution to GHG emissions mitigation
    • Y02E60/30—Hydrogen technology
    • Y02E60/50—Fuel cells
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02T—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO TRANSPORTATION
    • Y02T90/00—Enabling technologies or technologies with a potential or indirect contribution to GHG emissions mitigation
    • Y02T90/40—Application of hydrogen technology to transportation, e.g. using fuel cells

Definitions

  • the invention relates to a safety device for a vehicle operated with a fuel cell system, having a plurality of system input interfaces, having a plurality of vehicle input interfaces, having a plurality of output interfaces, having an evaluation module, which is designed to activate a vehicle safety level with a response scheme for the fuel cell system and/or for the vehicle on the basis of input data, and having an open-loop control module, which is designed to actuate the output interfaces on the basis of the respective response scheme .
  • Fuel cell systems for vehicles are mobile energy converters, which permit environmentally compatible provision of drive ener gy for vehicles.
  • a fuel such as for example hydrogen gas
  • an oxidant for example ambient air
  • Fuel cell systems are complex assemblies, which are controlled by closed- or open-loop control circuits, such that the electrical energy needed for travel operation is provided.
  • closed- or open-loop control in addition to actuation for normal operation, other control strategies are known, for allowing closed- or open-loop control in special cases outside of normal operation, such as for example in the event of degradation of the fuel cell system or if the vehicle suffers an accident.
  • Document DE 43 41 437 Cl relates to a safety system for a vehicle operated with gaseous fuel, the status of the vehicle or of the fuel cell system being checked by means of sensors, such as for example gas sensors, crash sensors and refuelling sensors, and a pre-alarm, a main alarm or a fault being signalled as a function of the sensor signals. Triggering of a pre-alarm leads to the emission of a warning sound and of visual information to the driver. In the case of a main alarm, gas valves are closed and a battery isolator opened, so interrupting supply and stopping operation of the vehicle. In the event of a fault, a message is output to the driver.
  • sensors such as for example gas sensors, crash sensors and refuelling sensors
  • a pre-alarm Triggering of a pre-alarm leads to the emission of a warning sound and of visual information to the driver.
  • gas valves are closed and a battery isolator opened, so interrupting supply and stopping operation of the vehicle.
  • a message is output
  • Document DE 103 32 520 Al relates to a device for monitoring a fuel cell unit, at least one operating parameter being detected when the fuel cell unit is in operation and a characteristic parameter being generated, which serves as a measure for degradation of the fuel cell unit, at least one at least function-preserving measure being initiated by the device if the characteristic parameter reflects a predetermined degree of degradation. For example, if degradation is detected, a kind of protective operation of the fuel cell unit is initiated and a warning output to the driver, which calls on the driver to take the vehicle to a garage.
  • Another safety system designed for application in a vehicle with a fuel cell system is known from published patent application DE 10361647 Al, which constitutes the closest prior art.
  • a plurality of fuel cell system sensors supplying safety-relevant signals are assigned to the safety system.
  • the safety system is associated with an airbag or seatbelt tensioner system, suitable countermeasures being triggered by the safety system for example in dangerous situations by way of signals of the fuel cell system or the airbag or seatbelt tensioner.
  • the object of the invention is to propose a safety device for a vehicle operated with a fuel cell system and a vehicle with the safety device, which allows simplified control of the fuel cell system in different operating states.
  • a safety device for a vehicle operated with a fuel cell system which comprises as input interfaces on the one hand system input interfaces, which are designed to transfer fuel cell system data or signals, and on the other hand vehicle input interfaces, which are designed to detect or transfer vehicle data or signals, in particular independently of the fuel cell system.
  • both vehicle-specific and fuel cell system-specific data and/or signals are detected by the safety device.
  • the safety device comprises a plurality of output interfaces.
  • the input and/or output interfaces may be designed for analogue and/or digital signal or data transmission.
  • An evaluation module in the safety device is designed with regard to software and/or circuitry to activate a vehicle safety level with a response scheme for the fuel cell system and/or for the vehicle on the basis of the input data or signals received from the input interfaces.
  • the safety device comprises an open-loop control module, which is designed to implement the respective response scheme, the output interfaces being actuated accordingly.
  • the safety device comprises at least four vehicle safety levels which may be activated, a response scheme being assigned to each safety level:
  • a fourth vehicle safety level has assigned to it a fourth response scheme, which comprises the output of information to the driver or is designed solely as the output of information to the driver;
  • a third vehicle safety level has a third response scheme assigned to it, which preferably solely comprises automatic adaptation of the operating parameters of the fuel cell system and/or of the vehicle;
  • a second vehicle safety level has a second response scheme assigned to it, which preferably solely comprises a controlled cutout process for the fuel cell system;
  • a first vehicle safety level has a first response scheme assigned to it, which preferably solely comprises an immediate emergency cutout for the fuel cell system.
  • the evaluation module comprises precisely the four stated vehicle safety levels.
  • the safety device offers a solution in which the safety levels are arranged or defined hierarchically, clearly and/or without susceptibility to error.
  • the safety device is provided in hardware form, in particular is designed as a hardware system.
  • the hardware system does not comprise any software components, so as to rule out a software-related crash of the safety device.
  • the safety device takes the form of an embedded system and/or real time system.
  • the safety device is designed solely to actuate components of the fuel cell system and/or of the energy supply means of the vehicle, in particular no further safety units of the vehicle are controlled thereby, in order to keep the control complexity of the safety device simple and thus make it unsusceptible to error.
  • the safety device takes the form of a closed, one-part, replaceable structural unit.
  • the functions of the safety device are performed centrally and not in a decentralized manner using a plurality of for example spatially separate arithmetic and logic units.
  • the fourth response scheme comprises visual, audible and/or tactile driver notification.
  • Driver notification proceeds for example via a signal lamp or a display screen in the passenger cell.
  • the fourth response scheme takes the form purely of an information scheme without any open- and/or closed-loop control-related intervention in the fuel cell system and/or the vehicle.
  • the third response scheme preferably takes the form of a correction or repair scheme and comprises in particular one or more open- and/or closed-loop control circuits for ensuring and/or recovering serviceability of the fuel cell system and/or of the vehicle.
  • the third response scheme is designed for stepwise restriction of the fuel cell system.
  • some of the fuel cells may be switched off and/or emergency operation of the fuel cell system implemented, in particular in such a way that the vehicle remains capable of reaching a garage under its own steam.
  • the second response scheme implements a controlled cutout process for the fuel cell system, which is designed in particular as a preventative protective cutout.
  • a preventative protective cutout the components of the fuel cell system are deactivated in such a way that system loads caused by pressure or current or voltage are relieved in such a way as to prevent lasting damage to the fuel cell system.
  • the first response scheme preferably implements a time-optimized emergency cutout, with as many as possible or all the components of the fuel cell system being deactivated at or close to the same time.
  • the sensors take the form of hydrogen sensors, crash sensors, airbag sensors and/or resistance sensors.
  • the sensor signals are evaluated as input data by the evaluation module, in order to activate the appropriate vehicle safety level.
  • the first vehicle safety level is activated.
  • the first vehicle safety level may be activated if the hydrogen sensors report hydrogen leakage or the resistance sensors report an insulation resistance fault.
  • the first vehicle safety level is activated if driver safety is at risk.
  • Other signals such as for example signals from pressure sensors, which point to an incorrect operating pressure within the gas regions of the fuel cell system, lead, on the other hand, to activation of the second safety level, which serves in particular to protect system safety or integrity.
  • Unsatisfactory fuel cell system power data may, for example, lead to activation of the third vehicle safety level, the response scheme ensuring reliable continuous operation of the fuel cell system.
  • the invention also provides a vehicle with a fuel cell system, the vehicle comprising a safety device as just described or as defined in the precedingly discussed claims. Further features, advantages and effects of the invention are revealed by the following description of a preferred exemplary embodiment of the invention. In the drawing:
  • Figure 1 shows a block diagram of a vehicle with fuel cell system and safety device as an exemplary embodiment of the invention.
  • Figure 1 is a high Iy schematic representation of a vehicle 1, in which a fuel cell system 2 with an open-loop controller
  • the open-loop controller 3 assumes control of the fuel cell system 2 with regard to supply of the fuel cells with fuel and ambient air and temperature regulation and current distribution, etc.
  • the vehicle 1 has a safety device 4, which takes the form for example of an electronic box, being hard-wired hardware and in particular software-free.
  • the safety device 4 is connected via input interfaces 5 to sensors of the vehicle 1, in particular to a crash sensor 6 and an airbag sensor 7.
  • sensors of the vehicle in particular to a crash sensor 6 and an airbag sensor 7.
  • further sensors of the vehicle may be connected for signalling to the safety device
  • one of the input interfaces 5 is connected to a vehicle computer 8, such that a data output channel of the vehicle computer 8 is connected for signalling to one of the input interfaces 5.
  • the input interfaces 5 are used to convey sensor signals from the fuel cell system 2 and/or data from the open-loop controller 3 of the fuel cell system 2 to the safety device 4.
  • the safety device 4 comprises a plurality of output interfaces 9, which inter alia output open-loop control signals to the fuel cell system 2, to the open-loop controller 3 or to further actuators 10 in the vehicle 1.
  • an evaluation module 11 which activates a vehicle safety level I - IV with an assigned response scheme on the basis of the information supplied via the input interfaces 5.
  • the activated response scheme is sent to an open-loop control module 12, which is designed, depending on the response scheme, to actuate the output interfaces 9 and thus the fuel cell system 2, the open-loop controller 3 or the actuators 10.
  • the evaluation module 11 assigns one of the four possible vehicle safety levels I to IV to the vehicle 1 and/or the fuel cell system 2 on the basis of the information supplied via the input interfaces 5.
  • the vehicle safety levels are graded according to priority, the lowest priority vehicle safety level IV resulting in driver notification via a lamp or a display 13.
  • vehicle safety level III which has a slightly higher priority, the operating reliability of the fuel cell system 2 is ensured, for example by adapting the operating parameters. In this case, provision is made, for example, for an alarm matrix to be used for faults, such that the availability of the fuel cell system 2 is restricted in a stepwise manner.
  • This vehicle level allows protective or emergency operation, for example, with the fuel cell system 2 being operated in non- optimum mode.
  • the system Under vehicle safety level II the system is safeguarded, monitored cutout of the fuel cell system 2 being effected via the open-loop control module 12. For example, the command for monitored cutout is sent to the open-loop controller 3 of the fuel cell system 2, which then coordinates the cutout process.
  • vehicle safety level I which is triggered for example by a signal from crash sensor 6 or the airbag sensor 7 and leads to the conclusion that the vehicle 1 has suffered an accident, emergency cutout takes place, in order as far as possible to safeguard driver safety. Provision is made, in particular, for the signals for emergency cutout to be transmitted directly from the safety device 4 to the fuel cell system 2 and/or valves, switches or the like of the fuel cell system 2, in particular in such a way that the open-loop controller 3 is overridden.

Landscapes

  • Engineering & Computer Science (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Sustainable Energy (AREA)
  • Sustainable Development (AREA)
  • Chemical Kinetics & Catalysis (AREA)
  • Chemical & Material Sciences (AREA)
  • General Chemical & Material Sciences (AREA)
  • Electrochemistry (AREA)
  • Manufacturing & Machinery (AREA)
  • Mechanical Engineering (AREA)
  • Transportation (AREA)
  • Power Engineering (AREA)
  • Theoretical Computer Science (AREA)
  • Artificial Intelligence (AREA)
  • Automation & Control Theory (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • Evolutionary Computation (AREA)
  • Software Systems (AREA)
  • Medical Informatics (AREA)
  • Fuzzy Systems (AREA)
  • Fuel Cell (AREA)

Abstract

Fuel cell systems for vehicles are complex assemblies, which are controlled by closed- or open-loop control circuits, such that the electrical energy needed for travel operation is provided. In addition to actuation for normal operation, other control strategies are known, for allowing closed- or open-loop control in special cases outside of normal operation, such as for example in the event of degradation of the fuel cell system or if the vehicle suffers an accident. A safety device 1 is proposed for a vehicle 1 operated with a fuel cell system 2, at least four vehicle safety levels I-IV with response schemes being activatable.

Description

SAFETY DEVICE FOR A VEHICLE OPERATED WITH A FUEL CELL SYSTEM AND VEHICLE WITH THE SAFETY DEVICE
The invention relates to a safety device for a vehicle operated with a fuel cell system, having a plurality of system input interfaces, having a plurality of vehicle input interfaces, having a plurality of output interfaces, having an evaluation module, which is designed to activate a vehicle safety level with a response scheme for the fuel cell system and/or for the vehicle on the basis of input data, and having an open-loop control module, which is designed to actuate the output interfaces on the basis of the respective response scheme .
Fuel cell systems for vehicles are mobile energy converters, which permit environmentally compatible provision of drive ener gy for vehicles. In fuel cell systems, a fuel, such as for example hydrogen gas, is reacted electrochemically with an oxidant, for example ambient air, such that electrical energy is obtained from the chemical energy. Fuel cell systems are complex assemblies, which are controlled by closed- or open-loop control circuits, such that the electrical energy needed for travel operation is provided. In addition to actuation for normal operation, other control strategies are known, for allowing closed- or open-loop control in special cases outside of normal operation, such as for example in the event of degradation of the fuel cell system or if the vehicle suffers an accident.
Document DE 43 41 437 Cl relates to a safety system for a vehicle operated with gaseous fuel, the status of the vehicle or of the fuel cell system being checked by means of sensors, such as for example gas sensors, crash sensors and refuelling sensors, and a pre-alarm, a main alarm or a fault being signalled as a function of the sensor signals. Triggering of a pre-alarm leads to the emission of a warning sound and of visual information to the driver. In the case of a main alarm, gas valves are closed and a battery isolator opened, so interrupting supply and stopping operation of the vehicle. In the event of a fault, a message is output to the driver.
Document DE 103 32 520 Al relates to a device for monitoring a fuel cell unit, at least one operating parameter being detected when the fuel cell unit is in operation and a characteristic parameter being generated, which serves as a measure for degradation of the fuel cell unit, at least one at least function-preserving measure being initiated by the device if the characteristic parameter reflects a predetermined degree of degradation. For example, if degradation is detected, a kind of protective operation of the fuel cell unit is initiated and a warning output to the driver, which calls on the driver to take the vehicle to a garage.
Another safety system designed for application in a vehicle with a fuel cell system is known from published patent application DE 10361647 Al, which constitutes the closest prior art. A plurality of fuel cell system sensors supplying safety-relevant signals are assigned to the safety system. In addition, the safety system is associated with an airbag or seatbelt tensioner system, suitable countermeasures being triggered by the safety system for example in dangerous situations by way of signals of the fuel cell system or the airbag or seatbelt tensioner.
The object of the invention is to propose a safety device for a vehicle operated with a fuel cell system and a vehicle with the safety device, which allows simplified control of the fuel cell system in different operating states.
This object is achieved by a safety device having the features of Claim 1 and by a vehicle with safety device having the features of Claim 9. Preferred or advantageous embodiments of the invention are disclosed by the subclaims, the following description and/or the attached figures.
According to the invention, a safety device is proposed for a vehicle operated with a fuel cell system which comprises as input interfaces on the one hand system input interfaces, which are designed to transfer fuel cell system data or signals, and on the other hand vehicle input interfaces, which are designed to detect or transfer vehicle data or signals, in particular independently of the fuel cell system. Thus, in operation, both vehicle-specific and fuel cell system-specific data and/or signals are detected by the safety device.
To actuate actuators and/or data input channels of the fuel cell system and/or of the vehicle, the safety device comprises a plurality of output interfaces. The input and/or output interfaces may be designed for analogue and/or digital signal or data transmission. An evaluation module in the safety device is designed with regard to software and/or circuitry to activate a vehicle safety level with a response scheme for the fuel cell system and/or for the vehicle on the basis of the input data or signals received from the input interfaces.
In addition, the safety device comprises an open-loop control module, which is designed to implement the respective response scheme, the output interfaces being actuated accordingly.
According to the invention, the safety device comprises at least four vehicle safety levels which may be activated, a response scheme being assigned to each safety level:
a fourth vehicle safety level has assigned to it a fourth response scheme, which comprises the output of information to the driver or is designed solely as the output of information to the driver;
a third vehicle safety level has a third response scheme assigned to it, which preferably solely comprises automatic adaptation of the operating parameters of the fuel cell system and/or of the vehicle;
a second vehicle safety level has a second response scheme assigned to it, which preferably solely comprises a controlled cutout process for the fuel cell system;
a first vehicle safety level has a first response scheme assigned to it, which preferably solely comprises an immediate emergency cutout for the fuel cell system. In a preferred embodiment, the evaluation module comprises precisely the four stated vehicle safety levels.
According to the invention, a four-stage strategy is thus implemented, which achieves maximum vehicle or fuel cell system reliability while maintaining driver safety. While in the known prior art various response schemes are implemented in a plurality of closed- or open-loop control circuits, which are partially linked with one another and hence hold a risk of interaction between the closed- or open-loop control circuits, the safety device according to the invention offers a solution in which the safety levels are arranged or defined hierarchically, clearly and/or without susceptibility to error.
In a preferred embodiment of the invention, the safety device is provided in hardware form, in particular is designed as a hardware system. Preferably the hardware system does not comprise any software components, so as to rule out a software-related crash of the safety device. Alternatively, the safety device takes the form of an embedded system and/or real time system. In one possible embodiment, the safety device is designed solely to actuate components of the fuel cell system and/or of the energy supply means of the vehicle, in particular no further safety units of the vehicle are controlled thereby, in order to keep the control complexity of the safety device simple and thus make it unsusceptible to error.
In a preferred structural embodiment, the safety device takes the form of a closed, one-part, replaceable structural unit. In particular, the functions of the safety device are performed centrally and not in a decentralized manner using a plurality of for example spatially separate arithmetic and logic units.
In a preferred further development of the invention, the fourth response scheme comprises visual, audible and/or tactile driver notification. Driver notification proceeds for example via a signal lamp or a display screen in the passenger cell. Preferably, the fourth response scheme takes the form purely of an information scheme without any open- and/or closed-loop control-related intervention in the fuel cell system and/or the vehicle.
In contrast, the third response scheme preferably takes the form of a correction or repair scheme and comprises in particular one or more open- and/or closed-loop control circuits for ensuring and/or recovering serviceability of the fuel cell system and/or of the vehicle. In particular, the third response scheme is designed for stepwise restriction of the fuel cell system. Thus, for example, some of the fuel cells may be switched off and/or emergency operation of the fuel cell system implemented, in particular in such a way that the vehicle remains capable of reaching a garage under its own steam.
At the next safety level, the second response scheme implements a controlled cutout process for the fuel cell system, which is designed in particular as a preventative protective cutout. With the preventative protective cutout the components of the fuel cell system are deactivated in such a way that system loads caused by pressure or current or voltage are relieved in such a way as to prevent lasting damage to the fuel cell system. The first response scheme, on the other hand, preferably implements a time-optimized emergency cutout, with as many as possible or all the components of the fuel cell system being deactivated at or close to the same time.
In a preferred development of the invention, the sensors take the form of hydrogen sensors, crash sensors, airbag sensors and/or resistance sensors. The sensor signals are evaluated as input data by the evaluation module, in order to activate the appropriate vehicle safety level. For example, in the case of positive crash or airbag signals, which indicate an accident, the first vehicle safety level is activated. Likewise, the first vehicle safety level may be activated if the hydrogen sensors report hydrogen leakage or the resistance sensors report an insulation resistance fault. Overall, the first vehicle safety level is activated if driver safety is at risk. Other signals, such as for example signals from pressure sensors, which point to an incorrect operating pressure within the gas regions of the fuel cell system, lead, on the other hand, to activation of the second safety level, which serves in particular to protect system safety or integrity.
Unsatisfactory fuel cell system power data may, for example, lead to activation of the third vehicle safety level, the response scheme ensuring reliable continuous operation of the fuel cell system.
The invention also provides a vehicle with a fuel cell system, the vehicle comprising a safety device as just described or as defined in the precedingly discussed claims. Further features, advantages and effects of the invention are revealed by the following description of a preferred exemplary embodiment of the invention. In the drawing:
Figure 1 shows a block diagram of a vehicle with fuel cell system and safety device as an exemplary embodiment of the invention.
Figure 1 is a high Iy schematic representation of a vehicle 1, in which a fuel cell system 2 with an open-loop controller
3 is arranged for generating the drive energy for the vehicle 1. The open-loop controller 3 assumes control of the fuel cell system 2 with regard to supply of the fuel cells with fuel and ambient air and temperature regulation and current distribution, etc.
The vehicle 1 has a safety device 4, which takes the form for example of an electronic box, being hard-wired hardware and in particular software-free.
The safety device 4 is connected via input interfaces 5 to sensors of the vehicle 1, in particular to a crash sensor 6 and an airbag sensor 7. Optionally, further sensors of the vehicle may be connected for signalling to the safety device
4 via the input interfaces 5. In addition, one of the input interfaces 5 is connected to a vehicle computer 8, such that a data output channel of the vehicle computer 8 is connected for signalling to one of the input interfaces 5. Furthermore, the input interfaces 5 are used to convey sensor signals from the fuel cell system 2 and/or data from the open-loop controller 3 of the fuel cell system 2 to the safety device 4. On the output side, the safety device 4 comprises a plurality of output interfaces 9, which inter alia output open-loop control signals to the fuel cell system 2, to the open-loop controller 3 or to further actuators 10 in the vehicle 1.
In the safety device 4 there is arranged an evaluation module 11, which activates a vehicle safety level I - IV with an assigned response scheme on the basis of the information supplied via the input interfaces 5. The activated response scheme is sent to an open-loop control module 12, which is designed, depending on the response scheme, to actuate the output interfaces 9 and thus the fuel cell system 2, the open-loop controller 3 or the actuators 10.
From an operational standpoint, the evaluation module 11 assigns one of the four possible vehicle safety levels I to IV to the vehicle 1 and/or the fuel cell system 2 on the basis of the information supplied via the input interfaces 5. The vehicle safety levels are graded according to priority, the lowest priority vehicle safety level IV resulting in driver notification via a lamp or a display 13. Under vehicle safety level III, which has a slightly higher priority, the operating reliability of the fuel cell system 2 is ensured, for example by adapting the operating parameters. In this case, provision is made, for example, for an alarm matrix to be used for faults, such that the availability of the fuel cell system 2 is restricted in a stepwise manner. This vehicle level allows protective or emergency operation, for example, with the fuel cell system 2 being operated in non- optimum mode. Under vehicle safety level II the system is safeguarded, monitored cutout of the fuel cell system 2 being effected via the open-loop control module 12. For example, the command for monitored cutout is sent to the open-loop controller 3 of the fuel cell system 2, which then coordinates the cutout process. Under vehicle safety level I, which is triggered for example by a signal from crash sensor 6 or the airbag sensor 7 and leads to the conclusion that the vehicle 1 has suffered an accident, emergency cutout takes place, in order as far as possible to safeguard driver safety. Provision is made, in particular, for the signals for emergency cutout to be transmitted directly from the safety device 4 to the fuel cell system 2 and/or valves, switches or the like of the fuel cell system 2, in particular in such a way that the open-loop controller 3 is overridden.

Claims

Daimler AG SenftFord Global Technologies, LLC 05.05.2008Patent Claims
1. Safety device (1) for a vehicle (1) operated with a fuel cell system (2)
having a plurality of system input interfaces (5), which are connected and/or connectable to sensors and/or data output channels (3) of the fuel cell system for transfer of input data,
having a plurality of vehicle input interfaces (5) , which are connected and/or connectable to sensors (6, 7) and/or data output channels (8) of the vehicle (1) for transfer of input data,
having a plurality of output interfaces (9), which are connected and/or connectable to actuators (10) and/or data input channels (3, 13) of the fuel cell system (2) and/or of the vehicle (1) ,
having an evaluation module (11), which is designed to activate a vehicle safety level (I-IV) with a response scheme for the fuel cell system (2) and/or for the vehicle (1) on the basis of the input data, having an open-loop control module (12), which is designed to actuate the output interfaces (9) on the basis of the respective response scheme,
characterized in that
at least four vehicle safety levels (I-IV) with response schemes are activatable,
a fourth response scheme, which is assigned to the fourth vehicle safety level (IV), comprising output of information to the user;
a third response scheme, which is assigned to the third vehicle safety level (III), comprising automatic adaptation of the operating parameters of the fuel cell system (2) and/or of the vehicle (1) ;
a second response scheme, which is assigned to the second vehicle safety level (II), comprising a controlled cutout process for the fuel cell system (2);
a first response scheme, which is assigned to the first vehicle safety level (I) , comprising an immediate emergency cutout for the fuel cell system (2) .
2. Safety device (4) according to Claim 1, characterized as a hardware system, embedded system, real time system and/or closed structural unit.
3. Safety device (4) according to Claim 1 or 2, characterized in that the fourth response scheme (IV) comprises visual, audible and/or tactile driver notification.
4. Safety device (4) according to one of the preceding claims, characterized in that the third response scheme (III) comprises one or more open- and/or closed-loop control circuits for ensuring and/or recovering serviceability of the fuel cell system and/or of the vehicle.
5. Safety device (4) according to Claim 4, characterized in that the third response scheme comprises stepwise restriction of the availability of the fuel cell system and/or emergency operation of the fuel cell system.
6. Safety device (4) according to one of the preceding claims, characterized in that the second response scheme (II) comprises preventative protective cutout of the fuel cell system (2) .
7. Safety device (4) according to one of the preceding claims, characterized in that the first response scheme (I) comprises a time-optimized emergency cutout.
8. Safety device (4) according to one of the preceding claims, characterized in that the sensors take the form of hydrogen sensors, crash sensors (6), airbag sensors (7) and/or resistance sensors.
9. Vehicle (1) with fuel cell system (2), characterized by a safety device (4) according to one of the preceding claims .
PCT/EP2008/003643 2007-06-27 2008-05-07 Safety device for a vehicle operated with a fuel cell system and vehicle with the safety device WO2009000363A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102007029715.9 2007-06-27
DE102007029715A DE102007029715A1 (en) 2007-06-27 2007-06-27 Safety device for a vehicle operated with a fuel cell system and vehicle with the safety device

Publications (1)

Publication Number Publication Date
WO2009000363A1 true WO2009000363A1 (en) 2008-12-31

Family

ID=39705469

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2008/003643 WO2009000363A1 (en) 2007-06-27 2008-05-07 Safety device for a vehicle operated with a fuel cell system and vehicle with the safety device

Country Status (2)

Country Link
DE (1) DE102007029715A1 (en)
WO (1) WO2009000363A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8838342B2 (en) 2007-07-13 2014-09-16 Toyota Jidosha Kabushiki Kaisha Fuel cell safety system for vehicles
CN119050419A (en) * 2024-06-25 2024-11-29 广东广晟氢能有限公司 Control method of fuel cell air system and fuel cell air system

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102009042901A1 (en) * 2009-09-25 2011-04-07 Daimler Ag Method for operating a fuel cell system
DE102013014235A1 (en) 2013-08-27 2015-03-05 Daimler Ag Safety system for a power generation system
DE102020120431B3 (en) 2020-08-03 2021-10-28 Audi Aktiengesellschaft Method for operating an on-board network, on-board network and motor vehicle with an on-board network
DE102021107503B4 (en) * 2020-09-14 2024-05-02 Hwa Ag Control unit network, working process and fuel cell vehicle with such a control unit network or working process
NL2031481B1 (en) * 2022-04-01 2023-10-25 Total Safety Solutions B V A safety plug for hydrogen vehicles and remote plug and interface system
DE102023208587A1 (en) 2023-09-06 2025-03-06 Robert Bosch Gesellschaft mit beschränkter Haftung Fuel cell system, trailer and method for increasing the safety of a fuel cell system in a trailer
DE102023124603A1 (en) 2023-09-12 2025-03-13 Bayerische Motoren Werke Aktiengesellschaft Means of transport, device and method for closing a shut-off valve of a pressure tank of a means of transport

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1164048A2 (en) * 2000-06-12 2001-12-19 Honda Giken Kogyo Kabushiki Kaisha Method and apparatus for cutting off fuel supply of a fuel cell vehicle
US6374166B1 (en) * 1999-05-06 2002-04-16 Nissan Motor Co., Ltd. Control system for a fuel cell vehicle having an exhaust hydrogen combustor
US20030000758A1 (en) * 1999-12-23 2003-01-02 Brueck Rolf Fuel cell installation and method for operating the fuel cell installation
US20050184495A1 (en) * 2003-12-30 2005-08-25 Bernd Zerbe Safety system for use in a vehicle
US20070013382A1 (en) * 2005-07-13 2007-01-18 Hartmut Hinz Method for detection and diagnosis of isolation faults in fuel cell hybrid vehicles

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE4341437C1 (en) 1993-12-04 1995-01-19 Daimler Benz Ag Safety system for a vehicle which is operated with gaseous fuel
DE10332520A1 (en) 2003-07-17 2005-02-03 Robert Bosch Gmbh Monitoring fuel cell during operation has control unit to determine degradation state

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6374166B1 (en) * 1999-05-06 2002-04-16 Nissan Motor Co., Ltd. Control system for a fuel cell vehicle having an exhaust hydrogen combustor
US20030000758A1 (en) * 1999-12-23 2003-01-02 Brueck Rolf Fuel cell installation and method for operating the fuel cell installation
EP1164048A2 (en) * 2000-06-12 2001-12-19 Honda Giken Kogyo Kabushiki Kaisha Method and apparatus for cutting off fuel supply of a fuel cell vehicle
US20050184495A1 (en) * 2003-12-30 2005-08-25 Bernd Zerbe Safety system for use in a vehicle
US20070013382A1 (en) * 2005-07-13 2007-01-18 Hartmut Hinz Method for detection and diagnosis of isolation faults in fuel cell hybrid vehicles

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8838342B2 (en) 2007-07-13 2014-09-16 Toyota Jidosha Kabushiki Kaisha Fuel cell safety system for vehicles
CN119050419A (en) * 2024-06-25 2024-11-29 广东广晟氢能有限公司 Control method of fuel cell air system and fuel cell air system

Also Published As

Publication number Publication date
DE102007029715A1 (en) 2009-01-08

Similar Documents

Publication Publication Date Title
WO2009000363A1 (en) Safety device for a vehicle operated with a fuel cell system and vehicle with the safety device
US20050177288A1 (en) Interdependent control of aftermarket vehicle accessories without invasive control connections
KR20210073705A (en) Vehicle control system according to failure of autonomous driving vehicle and method thereof
US6640174B2 (en) Restraint and fuel system cutoff control module
US20050184495A1 (en) Safety system for use in a vehicle
JP2001512395A (en) Vehicle safety device controller
KR20150138762A (en) Safety system of fuel cell vehicle and control method for the same
JPWO2017056688A1 (en) Monitoring system and vehicle control device
US20030000758A1 (en) Fuel cell installation and method for operating the fuel cell installation
US20130338872A1 (en) Method and device for initiating an operation of a motor vehicle under emergency conditions
KR20190092037A (en) Control apparatus for abnormal situation of electric two-wheeled vehicle
CN114450516A (en) Tank system
US7511389B2 (en) Emergency electric power supply unit
CN104583017B (en) Vehicular communication system and vehicle-mounted communication method
US7952314B2 (en) Electronic control device of an electrical drive system with redundant disconnection device
JP2011032903A (en) Control device of vehicle
CN217259672U (en) Vehicle-mounted hydrogen safety monitoring system
US10320205B2 (en) Monitoring device and method for monitoring the functional capability of an accumulator for electrical energy of a battery and discharge device, battery system and motor vehicle
US11104378B2 (en) Steering control system for a steering system of a transportation vehicle and method for operating a steering control system
CN112193196A (en) Vehicle with a steering wheel
US8088532B2 (en) Monitoring apparatus for a fuel cell stack
KR101902446B1 (en) Emergency power suppression units and method
US11813995B2 (en) Redundant power distribution system based on single power source
EP3623226A1 (en) A supplementary power supply and a method for providing supplemental power
KR20170092230A (en) Electronic unit control apparatus for construction machine

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08749363

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 08749363

Country of ref document: EP

Kind code of ref document: A1

点击 这是indexloc提供的php浏览器服务，不要输入任何密码和下载