JP5633458B2 - Fuel cell system - Google Patents

Description

  The present invention relates to a fuel cell system, and more particularly, to a fuel cell system in which voltage converters are provided between a fuel cell and a load and between a power storage device and a load, respectively.

  For example, a vehicle equipped with a fuel cell is equipped with a power storage device in addition to the fuel cell, and is required from this power storage device when the fuel cell is started or when the power required by the vehicle cannot be provided by the fuel cell output alone. Power is supplied. In this case, since neither the fuel cell nor the power storage device is a voltage suitable for the operation of the rotating electrical machine as a load, a fuel cell converter, that is, a voltage converter on the fuel cell side is provided between the fuel cell and the load. In addition, a battery converter, that is, a voltage converter on the power storage device side is provided between the power storage device and the load.

  For example, in Patent Document 1, in a fuel cell system in which a fuel cell converter is provided between the fuel cell and the load and a battery converter is provided between the battery and the load, for example, an overcurrent is applied to the main switch constituting the fuel cell converter. If a switching element causes an open failure, a large current flows to the motor or battery, and an overvoltage is generated in the inverter connected to the motor or the battery converter connected to the battery. It has been pointed out that so-called co-failure occurs. Here, it is described that, when it is detected that an overcurrent flows through the fuel cell converter, the inverter voltage is limited to an overvoltage threshold lower than a breakdown voltage of elements constituting the inverter or the battery converter.

JP 2009-283172 A

  As described in Patent Document 1, when a failure occurs in a fuel cell converter that is responsible for most of the power supply to the load in the fuel cell system and an overcurrent or the like occurs, a battery converter or inverter is caused by a so-called combined failure. May break down. In order to avoid such a combined failure, the inverter voltage can be limited as in Patent Document 1, but the operation of the fuel cell converter is cut off, that is, the operation of the battery converter is cut off at the same time. Conceivable.

  In this case, it is possible to cut off the operation of the fuel cell converter when a failure occurs in the fuel cell converter, for example, by providing an appropriate sensor inside the fuel cell converter. That is, it is possible to shut off the operation of the fuel cell converter almost simultaneously with the failure detection by using a sensor or the like in hardware, that is, without requiring software time.

  For example, it is not easy to cut off the operation of the battery converter using the result of the failure detection of the fuel cell converter. That is, when a signal is transmitted from the control device of the fuel cell converter to the control device of the battery converter via the higher-order integrated control device, since the signal processing is performed by software, there may be a considerable time delay. Because.

  An object of the present invention is to provide a fuel cell system capable of suppressing the occurrence of a combined failure even if a fuel cell side voltage converter fails.

A fuel cell system according to the present invention includes a fuel cell connected to a load, and an FC voltage that is provided between the fuel cell and the load and performs voltage conversion between the voltage between the terminals of the fuel cell and the voltage on the load side. A converter, a power storage device provided in a discharge path from the fuel cell to the load, and connected in parallel with the fuel cell; provided between the power storage device and the load; a voltage between terminals of the power storage device and a voltage on the load side; Battery voltage converter that performs voltage conversion between the two and an FCDC control device that acquires a failure signal that detects a failure of the FC voltage converter and outputs a first cutoff signal that shuts down the operation of the FC voltage converter according to the acquisition An FC cutoff signal line for transmitting the first cutoff signal to the FC voltage converter, and a digital communication line connected to the FC cutoff signal line, wherein a second cutoff signal having the same content as the first cutoff signal To the control device And blocking signal lines are simultaneously cut off the signal line connected, to obtain a second cut-off signal transmitted by the simultaneous cutoff signal lines, comprise a battery DC controller for interrupting the operation of the battery voltage converter, the according to the acquisition It is characterized by.

The fuel cell system according to the present invention performs a fuel cell connected to a load, provided between the fuel cell and the load, the voltage conversion between the terminal voltage and the load side of the voltage of the fuel cell An FC voltage converter, a power storage device provided in a discharge path from the fuel cell to the load, connected in parallel with the fuel cell, and provided between the power storage device and the load. A battery voltage converter that performs voltage conversion between the voltage and a FCDC that acquires a failure signal that detects a failure of the FC voltage converter and outputs a first cutoff signal that shuts down the operation of the FC voltage converter according to the acquisition A control device, an FC cutoff signal line for transmitting the first cutoff signal to the FC voltage converter, and a digital communication line connected to the FC cutoff signal line, wherein a second cutoff signal having the same content as the first cutoff signal is received. , Transmit to a predetermined control device Simultaneously blocking signal lines that are connected simultaneously interrupted signal line, retrieves the second shut-off signal transmitted by the simultaneous cutoff signal line, characterized in that it comprises a load control device for blocking the operation of the load in accordance with the acquisition .

The fuel cell system according to the present invention performs a fuel cell connected to a load, provided between the fuel cell and the load, the voltage conversion between the terminal voltage and the load side of the voltage of the fuel cell An FC voltage converter, a power storage device provided in a discharge path from the fuel cell to the load, connected in parallel with the fuel cell, and provided between the power storage device and the load. A battery voltage converter that performs voltage conversion between the voltage and a FCDC that acquires a failure signal that detects a failure of the FC voltage converter and outputs a first cutoff signal that shuts down the operation of the FC voltage converter according to the acquisition A control device, an FC cutoff signal line for transmitting the first cutoff signal to the FC voltage converter, and a digital communication line connected to the FC cutoff signal line, wherein a second cutoff signal having the same content as the first cutoff signal is received. , Transmit to a predetermined control device Simultaneously blocking signal lines that are connected simultaneously interrupted signal line, retrieves the second shut-off signal transmitted by the simultaneous cutoff signal line, the integrated control device for transmitting a third shut-off signal for interrupting the operation of the load in accordance with the acquisition When obtains the third shut-off signal transmitted from the integrated control apparatus, for a load control device for interrupting the operation of the load in accordance with the acquisition, comprising: a.

The fuel cell system according to the present invention is provided between a fuel cell connected to a load, and between the fuel cell and the load, and performs voltage conversion between the voltage between the terminals of the fuel cell and the voltage on the load side. An FC voltage converter, a power storage device provided in a discharge path from the fuel cell to the load, connected in parallel with the fuel cell, and provided between the power storage device and the load. A battery voltage converter that performs voltage conversion between the voltage and a FCDC that acquires a failure signal that detects a failure of the FC voltage converter and outputs a first cutoff signal that shuts down the operation of the FC voltage converter according to the acquisition A control device, an FC cutoff signal line for transmitting the first cutoff signal to the FC voltage converter, and a digital communication line connected to the FC cutoff signal line, wherein a second cutoff signal having the same content as the first cutoff signal is received. , Transmit to a predetermined control device Simultaneously blocking signal lines that are connected simultaneously interrupted signal line, retrieves the second shut-off signal transmitted by the simultaneous interruption signal line as an interrupt signal, a third for interrupting the operation of the load in accordance with the acquisition of the interrupt signal An integrated control device that outputs and transmits a cut-off signal, and a load control device that acquires a third cut-off signal transmitted from the integrated control device and cuts off the operation of the load according to the acquisition .

  In the fuel cell system according to the present invention, the load control device that controls the operation of the load, the FCDC control device, and the load control device are connected by an internal bus, and the operation of the fuel cell system as a whole And an integrated control device for controlling, the FCDC control device outputs a first shut-off signal for shutting down the operation of the FC voltage converter according to acquisition of a fault signal for detecting a fault of the FC voltage converter, and the fault signal disappears The integrated control device relates to the fact that the FC voltage converter has output the first cutoff signal from the FCDC control device and that the output of the first cutoff signal has been released. A receiving means for receiving information, a command generating section for generating a command signal for the load control device based on the information on the first cutoff signal received by the receiving means, and an internal buffer Via a transmission unit for transmitting the generated command signal to the load control device preferably includes a.

  In the fuel cell system according to the present invention, the receiving means is preferably an input buffer circuit having an input terminal for receiving a second cutoff signal transmitted by the simultaneous cutoff signal line and an output terminal connected to the command generation unit. .

  In the fuel cell system according to the present invention, the receiving means is preferably an internal bus connecting the FCDC control device and the integrated control device.

  In the fuel cell system according to the present invention, the command generation unit generates a return command signal for returning the operation of the load from the cutoff state to the drivable state, and generates the return for the second cutoff signal transmitted to the load control device. It is preferable to include a cutoff signal stop circuit that stops transmission to the load control device using the command output signal.

  In the fuel cell system according to the present invention, the integrated control device includes a feedback signal line for returning a connection state signal provided in the load control device to the integrated control device to receive transmission of the second cutoff signal, and the integrated control device. A disconnection test signal for requesting a response signal to the FCDC control device via an internal bus between the FCDC control device and the FCDC control device, and a response signal returning from the FCDC control device to the integrated control device via the connection portion and the feedback signal line It is preferable to include a disconnection determination unit that determines whether or not there is a disconnection of the path from the FCDC control device to the connection unit depending on the presence or absence.

  With the above configuration, the fuel cell system acquires a failure signal that detects a failure of the FC voltage converter, outputs a first cutoff signal that shuts down the operation of the FC voltage converter according to the acquisition, and outputs the first cutoff signal. A simultaneous cutoff signal line, which is a digital communication line, is connected to the FC cutoff signal line transmitted to the FC voltage converter. And the 2nd interruption | blocking signal of the same content as a 1st interruption | blocking signal is transmitted to a predetermined | prescribed control apparatus by the simultaneous interruption | blocking signal line. In this way, since the simultaneous cutoff signal line is connected to the FC cutoff signal line without going through software-like signal processing, the second cutoff signal having the same content as the first cutoff signal is given a predetermined control in hardware. Since it is transmitted to the apparatus, it is possible to effectively suppress a co-occurrence failure due to processing time delay.

  In the fuel cell system, the simultaneous cutoff signal line is connected to the battery DC control device, and the operation of the battery voltage converter is cut off by the second cutoff signal transmitted by the simultaneous cutoff signal line. In this way, when the FC voltage converter fails due to the transmission of the hardware second cutoff signal, the operation of the battery voltage converter can be cut off almost simultaneously.

  In the fuel cell system, the simultaneous cutoff signal line is connected to the load control device, and the operation of the load is cut off by the second cutoff signal transmitted by the simultaneous cutoff signal line. As a result, the power consumption by the load is also suppressed almost simultaneously, so that it is possible to suppress the loss of power balance without bringing excessive power from the power storage device to compensate for the interruption of power supply from the fuel cell, It is possible to suppress the accompanying failure.

  In the fuel cell system, the simultaneous cutoff signal line is connected to the integrated control device, and a third cutoff signal for shutting down the operation of the load is output by the second cutoff signal transmitted by the simultaneous cutoff signal line. Then, the third cutoff signal is transmitted from the integrated control device to the load control device, and the load control device cuts off the operation of the load by the third cutoff signal. As a result, power consumption due to the load is also suppressed almost simultaneously, so that it is possible to prevent the power balance in the power storage device from being lost, and it is possible to suppress a collateral failure.

  In the fuel cell system, the simultaneous cutoff signal line is connected to the interrupt signal detection function portion of the integrated control device, acquires the second cutoff signal transmitted by the simultaneous cutoff signal line as an interrupt signal, and A third cutoff signal for shutting down the operation of the load is output in accordance with the acquisition of the incoming signal and transmitted to the load control device. The load control device cuts off the operation of the load by the third cut-off signal. Although interrupt signal processing is software-like processing, rapid processing with the highest priority is executed, so that power consumption by the load is also suppressed at the same time. It is possible to suppress accompanying failures.

  Further, in the fuel cell system, the FCDC control device outputs a first cutoff signal for shutting down the operation of the FC voltage converter when acquiring the failure signal of the FC voltage converter, and the first cutoff signal when the failure signal disappears. Cancel the output of. The integrated control device receives from the FCDC control device information related to the fact that the FC voltage converter has output the first cutoff signal and that the output of the first cutoff signal has been canceled, and based on that information, the load control device Is generated and transmitted to the load control device via the internal bus. Thereby, for example, when the output of the first cutoff signal is released, the load can be driven under the control of the integrated control device.

  In the fuel cell system, the receiving means is an input buffer circuit having an input terminal for receiving a second cutoff signal transmitted by the simultaneous cutoff signal line and an output terminal connected to the command generation unit. Since the second cutoff signal is transmitted to the integrated control device via the hardware input buffer circuit, a command signal can be quickly given to the load control device.

  In the fuel cell system, the receiving means is an internal bus that connects the FCDC control device and the integrated control device. For example, when the output of the first cutoff signal is canceled using the already provided internal bus, the load can be driven under the control of the integrated control device.

  In the fuel cell system, the command generation unit generates a return command signal for returning the operation of the load from the cut-off state to the drivable state, and uses this to generate a load for the second cut-off signal transmitted to the load control device. Stop transmission to the controller. For example, even if the FC voltage converter is in failure, when the load can be driven using the power storage device, the load can be driven using this return command signal.

  Further, in the fuel cell system, the integrated control device includes a feedback signal line that feeds back a state signal of a connection portion provided in the load control device to the integrated control device in order to receive transmission of the second cutoff signal. Then, a disconnection test signal for requesting a response signal is output to the FCDC control device via the internal bus, and the FCDC control is performed depending on the presence / absence of a response signal from the FCDC control device to the integrated control device via the connection unit and the feedback signal line It is determined whether or not there is a break in the path from the device to the connection. Thereby, the reliability of the signal system can be ensured.

It is a figure explaining the structure of the fuel cell system of embodiment which concerns on this invention. It is a figure explaining the other structure of the fuel cell system of embodiment which concerns on this invention. It is a figure explaining the further another structure of the fuel cell system of embodiment which concerns on this invention. It is a figure explaining another structure of the fuel cell system of embodiment which concerns on this invention. It is a figure explaining the modification of the structure of FIG. It is a figure explaining the other modification of the structure of FIG. It is a figure explaining the further another modification of the structure of FIG.

  Embodiments according to the present invention will be described below in detail with reference to the drawings. In the following description, the fuel cell system is described as being mounted on a vehicle. However, the fuel cell system may be mounted on a moving body other than the vehicle, or may be a stationary fuel cell system. Further, as a load in the fuel cell system, two rotating electric machines mounted on the vehicle and two inverters connected to the rotating electric machine will be described. However, as long as power generated by the fuel cell is supplied. Of course, it doesn't matter whether it's a circuit, an actuator or an electrical device. The number of rotating electrical machines may be other than two.

  Below, as control devices included in the fuel cell system, those that control the operation of the voltage converter on the fuel cell side, those that control the operation of the voltage converter on the power storage device side, and these operations as a whole are controlled. However, these are merely examples for explanation, and may be provided with a plurality of control functions for performing signal processing between each other in software. That is, the number of control functions may not be three, and one control apparatus may include a plurality of control functions.

  Below, the same code | symbol is attached | subjected to the same element in all the drawings, and the overlapping description is abbreviate | omitted. In the description in the text, the symbols described before are used as necessary.

  FIG. 1 is a diagram showing a configuration of a fuel cell system 10 mounted on a vehicle. In particular, here, there is shown a configuration necessary for suppressing the occurrence of a combined failure in other electric devices when a failure occurs in the voltage converter 28 on the fuel cell side.

  The fuel cell system 10 supplies electric power necessary for two rotating electric machines 40 and 42, which are electric loads mounted on a vehicle, and two inverters 36 and 38 connected thereto, as shown in FIG. This is a system including a fuel cell 30 indicated as FC and a power storage device 20.

  In the fuel cell system 10, a power storage device 20 as a secondary battery and a fuel cell 30 are connected in parallel to a load, and between the load, the power storage device side shown as a BAT voltage converter 24 in FIG. And a voltage converter on the fuel cell side shown as the FC voltage converter 28. In this example, the operation of the FC voltage converter 28 is controlled by the FC voltage converter control device shown as FCDC-ECU 50 in FIG. 1, the BAT voltage converter 24, and the operations of the two inverters 36 and 38. As a control, a BAT / MG control device shown as MG-ECU 54 and an integrated control device shown as PM-ECU 56 are provided.

  The power storage device 20 is a chargeable / dischargeable high-voltage secondary battery that supplies power to the load, for example, when the fuel cell 30 is started or when the output of the fuel cell 30 is insufficient for the required power of the load. Has the function of In addition, since a load refers to what is mounted on a vehicle and operates with electric energy, it is not shown in FIG. 1 in addition to the two rotating electrical machines 40 and 42 and the two inverters 36 and 38. For example, as will be described in connection with the fuel cell 30, it also includes an auxiliary device for the fuel cell.

  As described above, the power storage device 20 serves as a power source that supplies power to the load together with the fuel cell 30, and thus is provided in a discharge path from the fuel cell 30 to the load and connected in parallel to the fuel cell 30. To be placed.

  As the power storage device 20, for example, a lithium ion assembled battery or a nickel hydride assembled battery having a terminal voltage of about 200 V to about 300 V, a capacitor, or the like can be used. Note that the power storage device 20 is a so-called high voltage battery, and when simply described as a battery, the power storage device 20 is often referred to. Therefore, hereinafter, power storage device 20 is referred to as a battery as necessary.

  The BAT voltage converter 24 is a converter circuit that is provided between the power storage device 20 and the load and has a function of performing voltage conversion between the voltage between the terminals of the power storage device 20 and the voltage on the load side. BAT is an abbreviation for Battery indicating the battery that is the power storage device 20. Hereinafter, what is related to the power storage device 20 is referred to as BAT as necessary. Since the voltage converter is sometimes simply called a converter or a DC / DC converter as described above, the BAT voltage converter may be called a BATDC / DC converter.

  As such a BAT voltage converter 24, a bidirectional converter including a reactor and a switching element can be used. The operation of the BAT voltage converter 24 is controlled by a BATDC control unit included in the MG-ECU 54. Note that BATDC is expressed by omitting the BATDC / DC converter.

  The smoothing capacitor 22 provided between the power storage device 20 and the BAT voltage converter 24 is a capacitive element used to suppress fluctuations in voltage and current on the power storage device 20 side.

  The fuel cell 30 is a type of assembled battery configured to extract a high-voltage generated power of about 200 V to about 300 V by combining a plurality of fuel cells, and is called a fuel cell stack. Here, each fuel cell supplies hydrogen as a fuel gas to the anode side, supplies air as an oxidizing gas to the cathode side, and takes out necessary power by a battery chemical reaction through an electrolyte membrane that is a solid polymer membrane. It has a function.

  Here, the fuel gas supply source 32 has a function of supplying hydrogen, which is a fuel gas, to the anode side of the fuel cell 30 at a pressure and a flow rate corresponding to the operation of the fuel cell 30. The fuel gas supply source 32 includes a high-pressure hydrogen tank, a regulator, and other elements.

  The oxidizing gas supply source 34 here has a function of adjusting the atmosphere containing oxygen, which is an oxidizing gas, to a pressure and a flow rate according to the operation of the fuel cell 30 and supplying them to the cathode side of the fuel cell 30. . The fuel gas supply source 32 includes a filter that takes in the atmosphere, an air compressor, and other elements.

  For the operation of the fuel cell 30, in addition to the fuel gas supply source 32 and the oxidizing gas supply source 34, a humidifier that keeps the oxidizing gas or the like at an appropriate humidity, and a diluter that processes and exhausts the used gas. , A cooling system including a cooling pump, various control valves associated therewith, and the like are used. Among these, devices that operate by supplying power are sometimes referred to as fuel cell auxiliary devices, but the power of these devices is supplied from the fuel cell 30 and the power storage device 20 after being converted to appropriate voltages. The Since the operating voltage of these devices is lower than the operating voltage of the rotating electrical machines 40 and 42, a low-voltage voltage converter different from the BAT voltage converter 24 and the FC voltage converter 28 is used.

  The FC voltage converter 28 is a converter circuit that is provided between the fuel cell 30 and the load, and has a function of performing voltage conversion between the voltage between the terminals of the fuel cell 30 and the voltage on the load side. FC is an abbreviation for Fuel Cell indicating the fuel cell 30. Hereinafter, the fuel cell 30 is referred to as FC as necessary.

  As the FC voltage converter 28, a bidirectional converter including a reactor and a switching element can be used as in the BAT voltage converter 24. The operation of the FC voltage converter 28 is controlled by the FCDC-ECU 50. Note that FCDC is abbreviated as FCDC / DC converter, similar to the above BATDC.

  A smoothing capacitor 26 provided between the FC voltage converter 28 and the BAT voltage converter 24 is provided between a power supply unit including the power storage device 20 and the fuel cell 30 and a load. It is a capacitive element used for suppressing fluctuations in voltage and current between the two. The smoothing capacitor 26 is disposed and connected between a common positive side bus and a negative side bus for connecting the FC voltage converter 28 and the BAT voltage converter 24.

  The two inverters 36 and 38 convert the high-voltage DC power into AC three-phase drive power under the control of the MG-ECU 54 and supply it to the rotating electrical machines 40 and 42, and conversely from the rotating electrical machines 40 and 42. This is a circuit having a function of converting the AC three-phase regenerative power into high-voltage DC charging power. In FIG. 1, it corresponds to distinguishing two rotary electric machines 40 and 42 as shown as MG1 and MG2, and the one connected to the rotary electric machine 40 shown as MG1 is the rotary electric machine shown as MG1 inverter 36 and MG2. The one connected to 42 is an MG2 inverter 38.

  The two inverters 36 and 38 can be configured by a circuit including a switching element and a diode. The operations of the two inverters 36 and 38 are controlled by a load control unit included in the MG-ECU 54.

  The two rotating electrical machines 40 and 42 are motor generators (M / G) mounted on the vehicle, functioning as motors when electric power is supplied and functioning as generators during braking. Electric.

  In FIG. 1, the two rotating electrical machines 40 and 42 are distinguished from each other, and the rotating electrical machine 40 indicated as MG1 and the rotating electrical machine 42 indicated as MG2 are illustrated. For example, when the vehicle on which the fuel cell system 10 is mounted does not include an engine, the rotating electrical machine 40 shown as MG1 can be used for front wheel driving, and the rotating electrical machine 42 shown as MG2 can be used for rear wheel driving. In the case of a vehicle equipped with an engine, the rotating electrical machine 40 shown as MG1 is connected to the engine, and is mainly used as a generator to generate AC power, and is converted into DC power by the MG1 inverter 36. Has the function of charging. The rotating electrical machine 42 shown as MG2 is mainly used for driving driving during powering of the vehicle, and has a function of operating DC power of the fuel cell 30 and the power storage device 20 by AC power converted by the MG2 inverter 38. The rotating electrical machine 42 also has a function of recovering the regenerative energy during braking of the vehicle, converting it into DC power by the MG2 inverter 38, and charging the power storage device 20. At this time, the rotating electrical machine 42 functions as a generator.

  Next, a control device used in the fuel cell system 10 will be described. The fuel cell system 10 includes a plurality of electric control units (ECUs) as control devices. Here, the FCDC-ECU 50, the MG-ECU 54, and the PM-ECU 56 are shown as related to the processing that is taken when a failure occurs in the FC voltage converter 28. Further, in FIG. 1, for each control device, only elements related to processing that is taken when a failure occurs in the FC voltage converter 28 are shown. These control devices can be configured by a computer suitable for mounting on a vehicle.

  The FCDC-ECU 50 is a control device having a function of controlling the operation of the FC voltage converter 28. That is, it has a function of converting the electric power generated by the fuel cell 30 into electric power of an appropriate voltage and supplying it to the load according to the state of the vehicle requested by the user. Specifically, the process of controlling the ON / OFF timing of the switching elements constituting the FC voltage converter 28 and performing voltage conversion between the voltage between the terminals of the fuel cell 30 and the voltage on the load side is executed. .

  Processing when a failure occurs in the FC voltage converter 28 is executed with the following contents. In other words, the FC voltage converter 28 is provided with various sensors for detecting the occurrence of an overvoltage, undervoltage, overcurrent, undercurrent, etc. due to a short circuit failure, an open failure, or the like of the switching element. The detection data of these sensors is transmitted to the FCDC-CPU 52 that constitutes the FCDC-ECU 52 through the detection signal line 70.

  The FCDC-CPU 52 is a processor that executes a high-speed logic operation or the like. Here, it is determined whether or not a failure has occurred in the FC voltage converter 28 based on detection values of various sensors. When the FCDC-CPU 52 determines that a failure has occurred in the FC voltage converter 28, a first cutoff signal for shutting down the operation of the FC voltage converter 28 is output.

  The FC cutoff signal line 73 is a signal line for transmitting the first cutoff signal output from the FCDC-CPU 52 to the FC voltage converter 28 side. When there is only one first cutoff signal, only one FC cutoff signal line 73 is required, and this may be directly connected to an operation cutoff means such as an operation cutoff switch of the FC voltage converter 28. At this time, the operation of the FC voltage converter 28 can be directly cut off by the first cut-off signal itself output from the FCDC-CPU 52.

  When there are a plurality of failure detection sensors provided in the FC voltage converter 28, the first cutoff signal is not combined into one, but for each detection signal of various sensors provided in the FC voltage converter 28. Is good. By doing so, even if there is a difference in failure detection timing between various sensors, the first detected signal can be included in the first cutoff signal as it is. In the example of FIG. 1, four FC cutoff signal lines 73 are output from the FCDC-CPU 52 corresponding to the four detection signal lines 70. Each of the four FC cutoff signal lines is for transmitting a first cutoff signal corresponding to each of the four detection signals transmitted via the four detection signal lines 70.

  The four FC cutoff signal lines 73 are connected to the OR circuit. In this way, the four first cutoff signals output from the FCDC-CPU are transmitted with their respective failure detection timings stored as they are, and are controlled from the OR circuit at the timing at which the failure is first detected. A signal is output. The control signal line 72 is a signal line that directly connects the OR circuit and the operation cutoff means of the FC voltage converter.

  With such a configuration, the detection values of the various sensors in the FC voltage converter 28 are transmitted to the FCDC-CPU 52 through the respective dedicated detection signal lines 70, where they are compared with, for example, a preset failure determination threshold value. The first cut-off signal having a digital value is individually output in accordance with the failure detection timing. After this, the first cutoff signal is sent by (individual FC cutoff signal line 73) -OR circuit- (one control signal line 72)-(operation cutoff means of FC voltage converter 28) and hardware. Communicated. Therefore, the operation of the FC voltage converter 28 can be cut off almost simultaneously with the detection of the failure of the FC voltage converter 28 in the FCDC-CPU 52.

  In the FCDC-ECU 50, the four simultaneous cut-off signal lines 74 cut off the BAT voltage converter 24 and the two inverters 36 and 38 almost simultaneously when the FC voltage converter 28 fails and its operation is cut off. It is a signal line for transmitting the signal for. Specifically, the four simultaneous cutoff signal lines 74 are digital communication lines connected to each of the four FC cutoff signal lines 73. That is, the simultaneous cutoff signal line 74 has a function of transmitting a signal having the same content as the first cutoff signal to a control device that can cut off the operations of the BAT voltage converter 24 and the two inverters 36 and 38. If the signal having the same content as the first cutoff signal is distinguished from the first cutoff signal and referred to as a second cutoff signal, the simultaneous cutoff signal line 74 is a signal line for transmitting the second cutoff signal. .

  Just as the four FC cutoff signal lines 73 are input to the OR circuit, the four simultaneous cutoff signal lines 74 are also input to the OR circuit. By doing so, the failure detection timings of the four second cutoff signals having the same contents as the four first cutoff signals output from the FCDC-CPU are stored and transmitted as they are, and the first failure among them is transmitted. A control signal is output from the OR circuit at the timing at which is detected. Since the OR circuit is simple hardware, the control signal line 80 via the OR circuit is a signal line that transmits a control signal equivalent to the second cutoff signal, and is a signal line equivalent to the simultaneous cutoff signal line 74. In the case of FIG. 1, the control signal line 80 is connected to an MG-ECU 54 described below.

  The MG-ECU 54 is a control device having two functions. One function is a function for controlling the operation of the BAT voltage converter 24. The part that executes this function is a part that can be called a BATDC control unit or a battery DC control device. Another function is a function of controlling operations of the two inverters 36 and 38 that are loads. The part that executes this function is a part that can be called a load control unit or a load control device.

  The BATDC control unit included in the MG-ECU 54 has a function of controlling the operation of the BAT voltage converter 24 as described above. That is, when the fuel cell 30 is started, when the output of the fuel cell 30 is insufficient to the required output value required for the vehicle, the output power of the power storage device 20 is set to an appropriate voltage according to the state of the fuel cell 30 and the like. It has the function of converting to the power of and supplying to the load. Specifically, the process of controlling the on / off timing of the switching elements constituting the BAT voltage converter 24 and performing voltage conversion between the voltage between the terminals of the power storage device 20 and the voltage on the load side is executed. .

  The load control unit included in the MG-ECU 54 has a function of controlling the operations of the two inverters 36 and 38 as described above. That is, the operating states of the two inverters 36 and 38 are controlled so that the rotating electrical machines 40 and 42 are driven according to the vehicle state requested by the user. Specifically, for each of the two inverters 36 and 38, the on / off timings of the switching elements constituting them are controlled to control the drive signals of the rotating electrical machines 40 and 42.

  In the MG-ECU 54, processing when a failure occurs in the FC voltage converter 28 is executed as follows. That is, the control signal line 80 to which the control signal output from the OR circuit to which the four simultaneous cutoff signal lines 74 of the FCDC-ECU 50 are input is connected to the input side of each of the three OR circuits.

  One OR circuit belongs to the BATDC control unit, and its output is connected to an operation cutoff means such as an operation cutoff switch of the BAT voltage converter 24. In the example of FIG. 1, a two-input OR circuit is used, and a control signal line 80 is connected to one input terminal thereof. Although not shown in the figure, the other input terminal can receive a cutoff control signal formed in the BATDC control unit. When such a cutoff control signal is not formed, the control signal line 80 can be directly connected to the operation cutoff means of the BAT voltage converter 24.

  The other two OR circuits belong to the load control unit, and their outputs are connected to the respective operation shut-off means of the two inverters 36 and 38. In the example of FIG. 1, these two OR circuits are two-input OR circuits, and a control signal line 80 is connected to one input terminal thereof. An integrated control signal line 76 from the PM-ECU 56 described below is connected to the other input terminal.

  As described above, the second cutoff signal transmitted through the control signal line 80 is a signal having the same content as the first cutoff signal. Therefore, for example, the second cutoff signal is transmitted to the BAT voltage converter 24 by (control signal line 80) -OR circuit- (operation cutoff means of the BAT voltage converter 24) and hardware. Therefore, the operation of the BAT voltage converter 24 can be cut off almost simultaneously with the detection of the failure of the FC voltage converter 28 in the FCDC-CPU 52.

  Similarly, a second cutoff signal is transmitted to the inverter 36 by (control signal line 80) -OR circuit- (operation cutoff means of the inverter 36) and hardware, and the inverter 38 also receives (control signal line 80). -OR circuit- (the operation cutoff means of the inverter 38) and the second cutoff signal are transmitted by hardware. Accordingly, the operations of the two inverters 36 and 38 are cut off almost simultaneously with the detection of the failure of the FC voltage converter 28 in the FCDC-CPU 52, whereby the operations of the two rotating electric machines 40 and 42 are also cut off.

  In this way, the operations of the two inverters 36 and 38 and the two rotating electric machines 40 and 42 that are loads are interrupted by the second cutoff signal. As a result, power consumption due to the load is also suppressed almost at the same time, so that excessive power is not taken from the power storage device 20 to compensate for the interruption of the power supply from the fuel cell 30, and the power balance is prevented from being lost. Yes, it is possible to suppress the accompanying failure.

  The PM-ECU 56 is an integrated control device that integrally controls the operation of the fuel cell system 10 as a whole. In FIG. 1, it is shown as a control device that controls the operation of the FCDC-ECU 50 and the operation of the MG-ECU 54 in an integrated manner. The PM-ECU 56 and the FCDC-ECU 50, and the PM-ECU 56 and the MG-ECU 54 are connected by an internal bus, and various signals are transmitted by software signal processing.

  As a function of processing abnormality detection in the fuel cell system 10, the PM-CPU 60 included in the PM-ECU 56 is provided with an abnormality interrupt detection / output unit 60. This abnormal interrupt detection / output unit, when an abnormal state detection signal is output in the fuel cell system 10, interrupts other task processing to acquire the abnormal state detection value, and outputs a cutoff signal accordingly. Have

  In PM-ECU 56, as shown in FIG. 1, this cutoff signal is input to the OR circuit, and compared with other control signals, the one with the earlier timing is output. Normally, since the interruption signal from the abnormal interrupt detection / output unit 60 is output with fast ting, the output from this OR circuit is often the interruption signal from this abnormal interrupt detection / output unit 60. . Therefore, the output signal of the OR circuit can be referred to as a third cutoff signal in distinction from the first cutoff signal and the second cutoff signal. The integrated control signal line 76 is a signal line through which the third cutoff signal is transmitted. The integrated control signal line 76 is input to each of two OR circuits of the load control unit included in the MG-ECU 54.

  As described above, the third interruption signal based on the signal output from the abnormal interrupt detection / output unit 60 is input to the two OR circuits of the load control unit included in the MG-ECU 54, respectively. Since signal transmission to the output unit 60 takes time, the second cutoff signal transmitted through the control signal line 80 is transmitted faster. Therefore, in the example of FIG. 1, the abnormal interrupt detection / output unit 60 hardly functions.

  As described above, the PM-ECU 56 and the FCDC-ECU 50 and the PM-ECU 56 and the MG-ECU 54 are connected by the internal bus. As described above, when the failure detection signal of the FC voltage converter 28 from the FCDC-ECU 50 is transmitted to the MG-ECU 54 via the PM-ECU 56 using the internal bus, depending on the time required for the transmission, it is a common failure. This is a problem to be solved by the present invention. As described above, the simultaneous cutoff signal line 74 is connected to the FC cutoff signal line 73, and the second cutoff signal transmitted by the simultaneous cutoff signal line 74 is transmitted to the MG-ECU 54 by the control signal line 80 in hardware. This solves this problem.

  In the above description, it is assumed that the control signal line 80 to which the output of the OR circuit to which the simultaneous cutoff signal line 74 is connected is directly connected to the three OR circuits of the MG-ECU 54. In FIG. 2, in place of the control signal line 80, the control signal line 82 to which the output of the OR circuit to which the simultaneous cutoff signal line 74 is connected is directly connected to the integrated control signal line 76 in the PM-ECU 56. It is a figure which shows the fuel cell system 12 which has the structure connected to the OR circuit used as an output. Similar to the control signal line 80, the control signal line 82 is a control signal line equivalent to the simultaneous blocking signal line 74.

  In this configuration, the PM-ECU 56, which is an integrated control device, acquires the second cutoff signal via the control signal line 82, inputs it to the OR circuit, and uses the output as the third cutoff signal by the integrated control signal line 76. This is input to the two OR circuits of the load control unit of the MG-ECU 54.

  Since the other input of the OR circuit of the PM-ECU 56 is the output of the abnormality interrupt detection / output unit 60, the abnormality detection timing of the second cutoff signal transmitted by the control signal line 82 is earlier. Therefore, according to this configuration, the operation of the two inverters 36 and 38, which are loads, can be interrupted faster than the timing of the interrupt signal from the abnormal interrupt detection / output unit 60 processed via the internal bus, The operations of the two rotating electric machines 40 and 42 can be cut off. As a result, power consumption due to the load is also suppressed almost at the same time, so that excessive power is not taken from the power storage device 20 to compensate for the interruption of the power supply from the fuel cell 30, and the power balance is prevented from being lost. Yes, it is possible to suppress the accompanying failure.

  In FIG. 3, instead of the control signal line 80 in FIG. 1 and the control signal line 82 in FIG. 2, the control signal line 84 to which the output of the OR circuit to which the simultaneous cutoff signal line 74 is connected is directly transmitted. It is a figure which shows the fuel cell system 14 which has the structure input into the abnormal interrupt detection and output part 60 of PM-CPU58 contained in PM-ECU56. The control signal line 84 is a control signal line equivalent to the simultaneous cutoff signal line 74, as with the control signal line 80 and the control signal line 82.

  According to this configuration, the abnormality detection signal is not input to the abnormality interrupt detection / output unit 60 via the internal bus, but the control signal line 84 for transmitting the second cutoff signal is provided in hardware, It is directly connected to the input terminal of the abnormal interrupt detection / output unit 60. Then, the output of the abnormal interrupt detection / output unit 60 passes through an OR circuit and then becomes a third cutoff signal. As described above, the integrated control signal line 76 that transmits the third cutoff signal is connected to the two OR circuits of the load control unit of the MG-ECU 54.

  Therefore, according to this configuration, the operation of the two inverters 36 and 38, which are loads, can be interrupted faster than the timing of the interrupt signal from the abnormal interrupt detection / output unit 60 processed via the internal bus, The operations of the two rotating electric machines 40 and 42 can be cut off. As a result, power consumption due to the load is also suppressed almost at the same time, so that excessive power is not taken from the power storage device 20 to compensate for the interruption of the power supply from the fuel cell 30, and the power balance is prevented from being lost. Yes, it is possible to suppress the accompanying failure.

  In the above description, the operations of the two inverters 36 and 38 are cut off almost simultaneously with the detection of the failure of the FC voltage converter 28, whereby the operations of the two rotating electric machines 40 and 42 are also cut off. This process is quickly performed without waiting for the PM-ECU 56, which is an integrated control device, to determine. Here, for example, when the failure of the FC voltage converter 28 is recovered, the operations of the two inverters 36 and 38 are restored almost simultaneously with this, whereby the two rotating electrical machines 40 and 42 are also driven. At this time, the determination by the PM-ECU 56 is not passed.

  Therefore, when the operations of the two inverters 36 and 38 are cut off and the vehicle stops, and then the operations of the two inverters 36 and 38 are restored, regardless of the situation of the vehicle or the fuel cell systems 12, 14, and 16, The vehicle will travel in the meantime. This is because the determination by the PM-ECU 56 that controls the overall operation of the fuel cell systems 12, 14, and 16 mounted on the vehicle is not performed. For these reasons, it is preferable that the PM-ECU 56 determines the return from the shut-off state from the viewpoint of the entire fuel cell system 12, 14, 16.

  FIG. 4 is a diagram for explaining the state of the fuel cell system 16 configured to pass the determination of the PM-ECU 56 regarding the drive return of the rotating electrical machines 40 and 42 that are loads. This figure is a partial modification of the configuration of FIG. That is, the control line 82 to which the output of the OR circuit to which the simultaneous cutoff signal line 74 is connected is directly connected to the OR circuit 100 that outputs the integrated control signal line 76 in the PM-ECU 56. This is the same as FIG. Here, the PM-ECU 58 receives information on the FC voltage converter 28 from the FCDC-ECU 50 via the internal bus 102 connecting the FCDC-ECU 50 and the PM-ECU 56. In this sense, the internal bus 102 is a receiving means for receiving information related to the FC voltage converter 28, but since it is already provided in the FCDC-ECU 50 and the PM-ECU 56, a new receiving means is not required. .

  As information regarding the FC voltage converter 28, the FCDC-ECU 50 outputs a first cutoff signal that shuts down the operation of the FC voltage converter 28 in accordance with the acquisition of a failure signal that detects a failure of the FC voltage converter 28. This includes information related to the cancellation of the output of the first cutoff signal when there is no more.

  The PM-CPU 58 included in the PM-ECU 56 includes a command generation unit 104. The command generation unit 104 has a function of generating a command signal for the MG-ECU 54 based on information on the first cutoff signal received via the internal bus 102. The command signal is transmitted to MG-ECU 54 through internal bus 106 that connects PM-ECU 56 and MG-ECU 54. The internal bus 106 corresponds to a command signal transmission unit, but is already provided in the FCDC-ECU 50 and the PM-ECU 56, so a new transmission unit is not required.

  Since the PM-ECU 56 has a function of controlling the entire operation of the fuel cell system 16 mounted on the vehicle, the operation of the fuel cell 30 and the operation of the FCDC voltage converter 28 according to the state of the vehicle such as the running state. The operation of the BAT voltage converter 24, the operation of the rotating electrical machines 40 and 42, and the like are controlled. Therefore, the command signal for MG-ECU 54 includes a command related to the operation of rotating electrical machines 40 and 42.

  For example, even after the operation of the rotating electrical machines 40 and 42 is once stopped due to a failure of the FC voltage converter 28, the rotating electrical machines 40 and 42 are driven immediately depending on the situation of the vehicle even if the failure of the FC voltage converter 28 is recovered. There are cases where it is not necessary to do so. Alternatively, there may be a procedure or the like that the PM-ECU 56 must process before the rotating electrical machines 40 and 42 are driven again. The PM-ECU 56 appropriately controls the operation of the MG-ECU 54 by using a command signal to the MG-ECU 54 so that the drive return of the rotating electrical machines 40 and 42 is appropriate from the perspective of the fuel cell system 16 as a whole. be able to.

  FIG. 5 is a diagram for explaining a state of the fuel cell system 17 configured such that the PM-ECU 56 directly acquires information related to the FC voltage converter 28 not from the internal bus but from the second cutoff signal. Here, the control signal line 82 to which the output of the OR circuit to which the simultaneous cutoff signal line 74 is connected is directly connected to the OR circuit 100 that outputs the integrated control signal line 76 in the PM-ECU 56. At the same time, it is connected to the input buffer circuit 108.

  The input buffer circuit 108 has an input terminal for receiving the second cutoff signal transmitted by the simultaneous cutoff signal line 74 and an output terminal connected to the command generator 104, and is a means for receiving information regarding the FC voltage converter 28. is there. 4 is different from the internal bus 102 in FIG. 4 in that the internal bus 102 already provided between the FCDC-ECU 50 and the PM-ECU 56 can be used, but a new input buffer circuit 108 needs to be provided. is there. However, since the input buffer circuit 108 has a hardware configuration, the second cutoff signal can be transmitted to the command generation unit 104 more quickly than via the internal bus 102. Since the transmitted content is the second cutoff signal, the command generation unit 104 determines the state of the second cutoff signal and determines whether the FCDC-ECU 59 is outputting the first cutoff signal. It is necessary to judge whether or not the output has been canceled.

  The command generation unit 104 has a function of generating a command signal for the MG-ECU 54 based on the received information regarding the FC voltage converter 28 as described in FIG. As in FIG. 4, the command signal is transmitted to the MG-ECU 54 via the internal bus 106 that connects the PM-ECU 56 and the MG-ECU 54.

  4 and 5, the command generation unit 104 transmits a command to the MG-ECU 54 via the internal bus 106. In addition to this, the fuel cell system 18 shown in FIG. 6 has a function in which the command generation unit 104 stops transmission of the second cutoff signal input to the OR circuit 100 to the MG-ECU 54. This function is performed based on the judgment of the PM-ECU 56. For example, when the failure of the FC voltage converter 28 is continuing, but it can be determined that the rotating electrical machines 40 and 42 can be driven by the power storage device 20. By doing in this way, even if a 1st interruption | blocking signal does not become output cancellation | release, a vehicle can be drive | worked based on the state of the electrical storage apparatus 20, etc.

  Specifically, based on the PM-ECU 56 acquiring the state of the power storage device 20 and determining that it is possible to return the drive of the load, the command generation unit 104 outputs a return command output signal. . The output return command output signal is input to the AND circuit 112 via the control signal line 110.

  The AND circuit 112 in FIG. 6 receives the return command output signal and the second cutoff signal. The output of the AND circuit 112 becomes the input of the OR circuit 100. In this case, the return command output signal is set to the H level in a normal state where the second cutoff signal is not stopped, and is set to the L level when the second cutoff signal is stopped. Therefore, in the normal state, the AND circuit 112 passes the second cutoff signal as it is and transmits it to the OR circuit 100. In this way, the AND circuit 112 uses the return command output signal generated by the command generation unit 104 for the second cutoff signal transmitted to the MG-ECU 54 as a cutoff signal stop circuit that stops transmission to the MG-ECU 54. It has the function of.

  Therefore, the command generation unit 104 transmits the second cutoff signal to the MG-ECU 54 more quickly than the command generation unit 104 transmits a command related to driving the rotating electrical machines 40 and 42 to the MG-ECU 54 via the internal bus 106. Stop transmission. Thereby, even if there is the second cutoff signal, the rotating electrical machines 40 and 42 can be driven, and when the MG-ECU 54 receives a command related to driving the rotating electrical machines 40 and 42 from the command generation unit 104, Immediately, the rotating electrical machines 40 and 42 can be changed from the stopped state to the driven state.

  FIG. 7 is a diagram illustrating the configuration of the fuel cell system 19 that enables diagnosis of disconnection related to the signal path. Here, in addition to the configuration of FIG. 6, a feedback signal line 120 is provided that feeds back a status signal of the connection 114 provided in the MG-ECU 54 to the PM-CPU 58 in order to receive the transmission of the second cutoff signal. The diagnosis of disconnection can be performed on the signal path from the FCDC-ECU 50 to the connection unit 114. Note that, when the operation of the FCDC voltage converter 28 is interrupted, the power source is stopped, so this disconnection diagnosis is performed at the initial diagnosis or the like, not during normal traveling of the vehicle.

  The disconnection determination unit 118 of the PM-CPU 58 has a function of determining whether the two signal paths are disconnected. One signal path extends from the FCDC-ECU 50 via the control signal line 82 to the PM-CPU 58 via the input buffer circuit 108. Another signal path is a path from the FCDC-ECU 50 through the control signal line 82 to the connection unit 114 through the AND circuit 112 and the OR circuit 100. For that purpose, the disconnection determination unit 118 uses an internal bus 116 provided between the PM-ECU 56 and the FCDC-ECU 50. The internal bus 116 is provided between the PM-ECU 56 and the FCDC-ECU 50 in the same manner as the internal bus 102 described with reference to FIG. 4, but is used for disconnection diagnosis. Therefore, the internal bus 102 in FIG. The codes are different from each other.

  The procedure for determining the disconnection of the signal path from the FCDC-ECU 50 to the PM-CPU 58 through the input buffer circuit 108 via the control signal line 82 is performed as follows. First, the disconnection determination unit 118 uses the internal bus 116 to transmit a disconnection test signal with a response request attached to the FCDC-CMU 50. The disconnection test signal is a signal created in advance by the PM-CPU 58. For example, an H level signal or a pulse signal having a predetermined pulse width can be used as the disconnection test signal. The response request is a request to return the disconnection test signal as it is through the control signal line 82 when the disconnection test signal is received.

  Therefore, when the internal bus 116 is normally connected, the FCDC-ECU 50 receives this disconnection test signal and sends back the disconnection test signal to the PM-ECU 56 via the control signal line 82 in accordance with the response request. If the control signal line 82 is normally connected, the returned disconnection test signal is input to the input buffer circuit 108. If the input buffer circuit 108 is normal, the disconnection test signal is output from the input buffer circuit 108. If the connection between the input buffer circuit 108 and the PM-CPU 58 is normal, the disconnection test signal is transmitted to the disconnection determination unit 118 of the PM-CPU 58.

  Therefore, when the transmitted disconnection test signal is sent back as the same content within an error range, the disconnection determination unit 118 passes the control signal line 82 from the FCDC-ECU 50, passes through the input buffer circuit 108, and returns to PM. -It is determined that there is no disconnection in the signal path leading to the CPU 58. If the transmitted disconnection test signal is not sent back, it is determined that there is a disconnection somewhere in the signal path. If the content is different from the transmitted disconnection test signal even if it is sent back, it is determined that there is a problem somewhere in the signal path. In this way, the disconnection determination of the signal path from the FCDC-ECU 50 to the PM-CPU 58 through the input buffer circuit 108 via the control signal line 82 is performed.

  The disconnection judgment of the signal path from the FCDC-ECU 50 via the control signal line 82, through the AND circuit 112 and the OR circuit 100 to the connection unit 114 is performed in the following procedure. First, the disconnection determination unit 118 uses the internal bus 116 to transmit a disconnection test signal with a response request attached to the FCDC-CMU 50. This content is the same as in the case of the disconnection judgment of the signal path from the FCDC-ECU 50 via the control signal line 82 to the PM-CPU 58 through the input buffer circuit 108. Therefore, when the internal bus 116 is normally connected, the FCDC-ECU 50 receives this disconnection test signal and sends the disconnection test signal back to the PM-ECU 56 via the control signal line 82 in accordance with the response request. Is the same.

  The returned disconnection test signal is input to the input buffer circuit 108 as described above. In addition, if the control signal line 82 is normally connected to the AND circuit 112, the returned disconnection test signal is input to the AND circuit 112. When the return command output signal input from the command generator 104 via the control signal line 110 is at the H level, the disconnection test signal is transmitted to the OR circuit 100 as it is. Therefore, if the AND circuit 112 and the OR circuit 100 are normally connected, the OR circuit 100 outputs a disconnection test signal regardless of the signal from the PM-CPU 58. If the OR circuit 100 is normally connected to the connection unit 114, the disconnection test signal is transmitted to the connection unit 114.

  The feedback signal line 120 returns the state of the connection unit 114 to the PM-CPU 58. Therefore, if the signal path from the FCDC-ECU 50 through the control signal line 82 to the connection unit 114 through the AND circuit 112 and the OR circuit 100 is normal, the transmitted disconnection test signal is returned to the PM-CPU 58. It is.

  Therefore, when the transmitted disconnection test signal is sent back as the same content within an error range, the disconnection determination unit 118 causes the AND circuit 112 and the OR circuit 100 to be connected via the control signal line 82 from the FCDC-ECU 50. It is determined that there is no disconnection in the signal path that passes through to the connection unit 114. If the transmitted disconnection test signal is not sent back, it is determined that there is a disconnection somewhere in the signal path. If the content is different from the transmitted disconnection test signal even if it is sent back, it is determined that there is a problem somewhere in the signal path. In this way, the disconnection determination of the signal path from the FCDC-ECU 50 via the control signal line 82 to the connection unit 114 through the AND circuit 112 and the OR circuit 100 is performed.

  The fuel cell system according to the present invention can be used in a system in which voltage converters are provided between the fuel cell and the load and between the power storage device and the load, respectively.

  10, 12, 14, 16, 17, 18, 19 Fuel cell system, 20 Power storage device, 22, 26 Smoothing capacitor, 24 BAT voltage converter, 28 FC voltage converter, 30 Fuel cell, 32 Fuel gas supply source, 34 Oxidizing gas supply source, 36, 38 inverter, 40, 42 rotating electrical machine, 50 FCDC-ECU, 52 FCDC-CPU, 54 MG-ECU, 56 PM-ECU, 58 PM-CPU, 60 abnormal interrupt detection / output unit, 70 detection signal line, 72, 80, 82, 84, 110 control signal line, 73 FC cutoff signal line, 74 simultaneous cutoff signal line, 76 integrated control signal line, 100 OR circuit, 102, 106, 116 internal bus, 104 command Generation unit, 108 input buffer circuit, 112 AND circuit, 114 connection unit, 118 disconnection determination unit, 120 feedback Signal line.

Claims (9)

A fuel cell connected to the load;
An FC voltage converter that is provided between the fuel cell and the load and performs voltage conversion between the voltage between the terminals of the fuel cell and the voltage on the load side;
A power storage device provided in a discharge path from the fuel cell to the load and connected in parallel with the fuel cell;
A battery voltage converter provided between the power storage device and the load, and performing voltage conversion between the voltage between the terminals of the power storage device and the voltage on the load side;
An FCDC control device that acquires a failure signal that detects a failure of the FC voltage converter and outputs a first cutoff signal that shuts down the operation of the FC voltage converter according to the acquisition;
An FC cutoff signal line for transmitting the first cutoff signal to the FC voltage converter;
A digital communication line connected to the FC cutoff signal line, wherein a second cutoff signal having the same content as the first cutoff signal is transmitted to a predetermined control device;
A battery DC control device connected to the simultaneous cutoff signal line, acquiring a second cutoff signal transmitted by the simultaneous cutoff signal line, and blocking the operation of the battery voltage converter according to the acquisition;
A fuel cell system comprising: A fuel cell connected to the load;
An FC voltage converter that is provided between the fuel cell and the load and performs voltage conversion between the voltage between the terminals of the fuel cell and the voltage on the load side;
A power storage device provided in a discharge path from the fuel cell to the load and connected in parallel with the fuel cell;
A battery voltage converter provided between the power storage device and the load, and performing voltage conversion between the voltage between the terminals of the power storage device and the voltage on the load side;
An FCDC control device that acquires a failure signal that detects a failure of the FC voltage converter and outputs a first cutoff signal that shuts down the operation of the FC voltage converter according to the acquisition;
An FC cutoff signal line for transmitting the first cutoff signal to the FC voltage converter;
A digital communication line connected to the FC cutoff signal line, wherein a second cutoff signal having the same content as the first cutoff signal is transmitted to a predetermined control device;
A load control device to which a simultaneous cutoff signal line is connected, acquires a second cutoff signal transmitted by the simultaneous cutoff signal line, and shuts off the operation of the load according to the acquisition ;
A fuel cell system comprising: A fuel cell connected to the load;
An FC voltage converter that is provided between the fuel cell and the load and performs voltage conversion between the voltage between the terminals of the fuel cell and the voltage on the load side;
A power storage device provided in a discharge path from the fuel cell to the load and connected in parallel with the fuel cell;
A battery voltage converter provided between the power storage device and the load, and performing voltage conversion between the voltage between the terminals of the power storage device and the voltage on the load side;
An FCDC control device that acquires a failure signal that detects a failure of the FC voltage converter and outputs a first cutoff signal that shuts down the operation of the FC voltage converter according to the acquisition;
An FC cutoff signal line for transmitting the first cutoff signal to the FC voltage converter;
A digital communication line connected to the FC cutoff signal line, wherein a second cutoff signal having the same content as the first cutoff signal is transmitted to a predetermined control device;
An integrated control device to which a simultaneous cutoff signal line is connected, acquires a second cutoff signal transmitted by the simultaneous cutoff signal line, and transmits a third cutoff signal that cuts off the operation of the load according to the acquisition;
A load control device that acquires a third cutoff signal transmitted from the integrated control device and shuts down the operation of the load according to the acquisition;
A fuel cell system comprising: A fuel cell connected to the load;
An FC voltage converter that is provided between the fuel cell and the load and performs voltage conversion between the voltage between the terminals of the fuel cell and the voltage on the load side;
A power storage device provided in a discharge path from the fuel cell to the load and connected in parallel with the fuel cell;
A battery voltage converter provided between the power storage device and the load, and performing voltage conversion between the voltage between the terminals of the power storage device and the voltage on the load side;
An FCDC control device that acquires a failure signal that detects a failure of the FC voltage converter and outputs a first cutoff signal that shuts down the operation of the FC voltage converter according to the acquisition;
An FC cutoff signal line for transmitting the first cutoff signal to the FC voltage converter;
A digital communication line connected to the FC cutoff signal line, wherein a second cutoff signal having the same content as the first cutoff signal is transmitted to a predetermined control device;
The simultaneous cutoff signal line is connected, the second cutoff signal transmitted by the simultaneous cutoff signal line is acquired as an interrupt signal, and the third cutoff signal that shuts down the operation of the load is output according to the acquisition of the interrupt signal and transmitted. An integrated control device,
A load control device that acquires a third cutoff signal transmitted from the integrated control device and shuts down the operation of the load according to the acquisition;
A fuel cell system comprising: The fuel cell system according to claim 3 , wherein
A load control device for controlling the operation of the load;
An integrated control device that is connected to the FCDC control device and the load control device by an internal bus and controls the operation of the fuel cell system as a whole;
With
The FCDC control device
According to the acquisition of the failure signal for detecting the failure of the FC voltage converter, a first cutoff signal for shutting down the operation of the FC voltage converter is output, and when the failure signal disappears, the output of the first cutoff signal is canceled,
The integrated control unit
Receiving means for receiving information from the FCDC control device that the FC voltage converter has output the first cutoff signal and that the output of the first cutoff signal has been canceled;
A command generation unit that generates a command signal for the load control device based on information about the first cutoff signal received by the receiving unit;
A transmission means for transmitting the generated command signal to the load control device via the internal bus;
A fuel cell system comprising: The fuel cell system according to claim 5 , wherein
The fuel cell system characterized in that the receiving means is an input buffer circuit having an input terminal for receiving a second cutoff signal transmitted by the simultaneous cutoff signal line and an output terminal connected to the command generator. The fuel cell system according to claim 5, wherein
The fuel cell system, wherein the receiving means is an internal bus connecting the FCDC control device and the integrated control device. The fuel cell system according to claim 6, wherein
The command generator
Generate a return command signal to return the load operation from the shut-off state to the drivable state,
A fuel cell system comprising a cutoff signal stop circuit for stopping transmission to the load control device using the generated return command output signal for the second cutoff signal transmitted to the load control device. The fuel cell system according to claim 8 , wherein
The integrated control unit
A feedback signal line that feeds back a status signal of a connection portion provided in the load control device to receive the transmission of the second cutoff signal to the integrated control device;
A disconnection test signal for requesting a response signal is output to the FCDC control device via an internal bus between the integrated control device and the FCDC control device, and the FCDC control device transmits the connection signal and the feedback signal line to the integrated control device. A disconnection determination unit that determines the presence or absence of disconnection of the path from the FCDC control device to the connection unit, depending on the presence or absence of a return response signal;
A fuel cell system comprising:

Images