WO2025256595A1 - 储能系统的保护方法、装置、储能系统、设备和存储介质 - Google Patents

储能系统的保护方法、装置、储能系统、设备和存储介质

Info

Publication number
WO2025256595A1
WO2025256595A1 PCT/CN2025/100705 CN2025100705W WO2025256595A1 WO 2025256595 A1 WO2025256595 A1 WO 2025256595A1 CN 2025100705 W CN2025100705 W CN 2025100705W WO 2025256595 A1 WO2025256595 A1 WO 2025256595A1
Authority
WO
WIPO (PCT)
Prior art keywords
energy storage
communication
battery management
controller
state
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
PCT/CN2025/100705
Other languages
English (en)
French (fr)
Inventor
庄春雨
王胜
钱璐
霍永胜
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Contemporary Amperex Technology Co Ltd
Contemporary Amperex Future Energy Research Institute Shanghai Ltd
Original Assignee
Contemporary Amperex Technology Co Ltd
Contemporary Amperex Future Energy Research Institute Shanghai Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Contemporary Amperex Technology Co Ltd, Contemporary Amperex Future Energy Research Institute Shanghai Ltd filed Critical Contemporary Amperex Technology Co Ltd
Publication of WO2025256595A1 publication Critical patent/WO2025256595A1/zh
Pending legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
    • H02J—ELECTRIC POWER NETWORKS; CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY
    • H02J15/00—Systems for storing electric energy specially adapted for power networks
    • H—ELECTRICITY
    • H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
    • H02J—ELECTRIC POWER NETWORKS; CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY
    • H02J7/00—Circuit arrangements for charging or discharging batteries or for supplying loads from batteries

Definitions

  • This application relates to the field of new energy technology, specifically to a protection method, device, energy storage system, equipment, and storage medium for an energy storage system.
  • Energy storage systems are playing an increasingly important role. With the rapid development of renewable energy and the transformation of power grids, energy storage systems are widely used in grid dispatching, power stability, and energy management. Energy storage systems are equipped with various controllers, which are interconnected via communication links, enabling functions such as data acquisition and system control.
  • this application provides a protection method, apparatus, energy storage system, equipment, and storage medium for an energy storage system, which can reduce the risk of information loss and improve the stability and reliability of the energy storage system.
  • this application provides a protection method for an energy storage system.
  • the method includes: acquiring a first communication status from the monitoring backend to the system controller, a first communication status from each battery management controller to the monitoring backend, and a first communication status from each battery management controller to the monitoring backend via the system controller; if at least one first communication status indicates that there is a communication fault in the energy storage system, then executing a processing action corresponding to the communication fault; wherein the processing action includes shutdown and maintaining the current state.
  • two communication paths are set up: one from the battery management controller to the monitoring backend, and the other from the battery management controller to the monitoring backend via the system controller.
  • the redundant communication paths can improve communication reliability and reduce the risk of information loss. Furthermore, if a communication failure occurs, actions such as shutdown or maintaining the current state can be taken based on the communication failure, thereby improving the reliability and stability of the energy storage system.
  • the corresponding processing action for the communication failure is executed, including: if the first communication state from the monitoring backend to the system controller is normal, and if the first communication state from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication states from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure, then the energy storage system is shut down.
  • shutting down the energy storage system when the downlink communication path from the monitoring backend to the system controller is normal, but both uplink communication paths from the battery management controller to the monitoring backend are abnormal can reduce the risk of information loss and help improve the stability and reliability of the energy storage system.
  • the corresponding processing action for the communication failure is executed, including: if the first communication state from the monitoring backend to the system controller is a communication failure, and if the first communication state from each battery management controller to the monitoring backend, and/or the first communication state from each battery management controller via the corresponding module controller and system controller to the monitoring backend is normal, then the current state of the energy storage system is maintained.
  • the risk caused by erroneous processing actions in the energy storage system can be reduced, and on the other hand, unnecessary downtime can be reduced, helping to minimize system downtime and improve system availability and operating efficiency.
  • the method further includes: if multiple first communication states are all normal, then for each energy storage submodule in the energy storage system, obtaining the second communication state between the battery management controller and each battery management unit; performing statistical processing on the second communication states to obtain the number of communication failures; and performing corresponding processing actions based on the number of communication failures, wherein the processing actions further include outputting warning information.
  • detecting the information loss risk of energy storage submodules when there is no risk of overall information loss can effectively prevent energy storage system failures and shutdowns caused by the loss of information from a single or multiple energy storage submodules, which helps improve the reliability and stability of the energy storage system.
  • corresponding processing actions are performed based on the number of communication failures, including: if the number of communication failures corresponding to any energy storage submodule is greater than a first threshold, or the total number of communication failures corresponding to multiple energy storage submodules is greater than a second threshold, then the energy storage system is shut down.
  • the technical solution of this application embodiment can respond promptly to the loss of information from a single electrical cabinet, which helps prevent potential safety risks, such as electrical failures and overheating caused by the loss of information from one or more electrical cabinets.
  • corresponding processing actions are performed based on the number of communication failures, including: if the number of communication failures corresponding to each energy storage submodule is less than or equal to a first quantity threshold, then obtaining the switching status of the bus switch and the fire protection status of each energy storage submodule; and controlling the energy storage system to shut down when the switch status is closed or the fire protection status is activated.
  • a first quantity threshold if the number of communication failures corresponding to each energy storage submodule is less than or equal to a first quantity threshold, then obtaining the switching status of the bus switch and the fire protection status of each energy storage submodule; and controlling the energy storage system to shut down when the switch status is closed or the fire protection status is activated.
  • the method further includes: when the switch state is in the open position and the fire suppression state is not activated, performing state-of-charge statistics on the target energy storage submodule with communication failure to obtain the minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, then controlling the energy storage system to shut down.
  • the switch state is in the open position and the fire suppression state is not activated, performing state-of-charge statistics on the target energy storage submodule with communication failure to obtain the minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, then controlling the energy storage system to shut down.
  • the state of charge (SOC) statistics of a target energy storage submodule with a communication failure are performed to obtain the minimum SOC. This includes: for the target energy storage submodule, if the battery management controller has a communication failure with the first battery management unit in the target energy storage submodule, the SOC statistics of the battery cells corresponding to the first battery management unit are performed, and the statistically obtained first SOC is determined as the minimum SOC.
  • SOC state of charge
  • the method further includes: for the target energy storage submodule, if the battery management controller fails to communicate with the second battery management unit (excluding the first battery management unit) in the energy storage submodule, then performing state-of-charge (SOC) statistics on the battery cells corresponding to the second SOC to obtain a second SOC; if the difference between the first SOC and the second SOC is greater than a preset difference, then updating the second SOC to the minimum SOC.
  • SOC state-of-charge
  • the method further includes: if the minimum state of charge is greater than or equal to a preset charge threshold, calculating the safe discharge duration corresponding to the minimum state of charge, and performing corresponding processing actions based on the safe discharge duration.
  • the minimum state of charge can be updated according to newly occurring communication faults, thereby taking corresponding processing actions to improve the safety of the energy storage system.
  • corresponding processing actions are performed based on the safe discharge duration, including: after calculating the safe discharge duration, obtaining the discharged duration; if the discharged duration exceeds the safe discharge duration, controlling the energy storage system to shut down.
  • controlling the energy storage system to shut down after exceeding the safe discharge duration helps ensure the safe operation of the energy storage system, preventing overheating, overvoltage, and other problems from occurring in faulty energy storage submodules during discharge, thereby improving the safety of the energy storage system.
  • the method further includes: determining a warning duration based on the safe discharge duration; if the discharged duration is longer than the warning duration but shorter than the safe discharge duration, then outputting a warning message.
  • this application also provides a protection device for an energy storage system, the device comprising:
  • the first state acquisition module is used to acquire the first communication status from the monitoring backend to the system controller in the energy storage system, as well as from each battery management controller to the monitoring backend and from each battery management controller to the monitoring backend via the system controller.
  • the first protection module is used to execute the corresponding processing action if a communication failure exists in at least one first communication state; wherein the processing action includes stopping operation and maintaining the current state.
  • this application also provides an energy storage system, which includes a monitoring backend, a system controller, multiple energy storage sub-modules, a battery management controller and a module controller corresponding to each energy storage sub-module, and the battery management controller and the module controller are connected in a one-to-one communication manner;
  • the monitoring backend is connected in communication with the system controller and each battery management controller, and the system controller is also connected in communication with each module controller;
  • the battery management controller is used to obtain the status information of the corresponding energy storage sub-module;
  • the module controller is used to control the corresponding energy storage sub-module;
  • the monitoring backend is used to perform status monitoring; and the system controller is used to execute the method described in any one of the first aspects.
  • this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the method of any one of the first aspects.
  • this application also provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the method of any one of the first aspects.
  • this application also provides a computer program product, including a computer program that, when executed by a processor, implements the method of any one of the first aspects.
  • Figure 1a is a schematic diagram of the structure of an energy storage system according to an embodiment of this application.
  • Figure 1b is a schematic diagram of the structure of an energy storage submodule according to an embodiment of this application.
  • FIG. 2 is a flowchart illustrating a protection method for an energy storage system according to an embodiment of this application
  • Figure 3 is a schematic flowchart of a method for protecting against communication failures in an energy storage submodule according to an embodiment of this application.
  • Figure 4 is a flowchart illustrating the steps of performing processing actions based on the number of communication failures according to an embodiment of this application;
  • Figure 5 is a flowchart illustrating the steps of updating the minimum state of charge according to an embodiment of this application.
  • Figure 6 is a flowchart illustrating the steps of performing processing actions according to the safe discharge duration according to an embodiment of this application
  • Figure 7 is a flowchart illustrating the steps of outputting warning information based on the warning duration according to an embodiment of this application.
  • Figure 8 is a structural block diagram of a protection device for an energy storage system according to an embodiment of this application.
  • Figure 9 is a structural block diagram of a protection device for an energy storage system according to an embodiment of this application.
  • Figure 10 is an internal structural diagram of a computer device according to an embodiment of this application.
  • the term "and/or” is merely a description of the relationship between related objects, indicating that three relationships can exist.
  • a and/or B can represent: A existing alone, A and B existing simultaneously, and B existing alone.
  • the character "/" in this document generally indicates that the preceding and following related objects have an "or" relationship.
  • multiple refers to two or more (including two), similarly, “multiple sets” refers to two or more (including two sets), and “multiple pieces” refers to two or more (including two pieces).
  • This application provides a protection scheme for an energy storage system. First, it acquires the first communication status from the monitoring backend to the system controller, the first communication status from each battery management controller to the monitoring backend, and the first communication status from each battery management controller via the system controller to the monitoring backend. If multiple first communication statuses indicate a communication failure in the energy storage system, it executes actions such as shutting down the energy storage system or maintaining its current state. In this scheme, two communication paths are established: one from the battery management controller to the monitoring backend, and another from the battery management controller via the system controller to the monitoring backend. This redundant communication path improves communication reliability and reduces the risk of information loss. Furthermore, if a communication failure occurs, actions such as shutting down the system or maintaining its current state can be taken based on the communication failure, thereby improving the reliability and stability of the energy storage system.
  • the energy storage system protection method provided in this application embodiment can be applied to the energy storage system shown in Figure 1a.
  • the energy storage system includes a monitoring backend 101, a system controller (Valve Base Controller, VBC) 102, multiple energy storage sub-modules 103, a battery management controller (BMC) 104 and a sub-module controller (SMC) 105 corresponding to each energy storage sub-module (SM) 103.
  • the battery management controller 104 and the sub-module controller 105 are connected in a one-to-one communication manner.
  • the monitoring backend 101 is connected to the system controller 102 and each battery management controller 104, and the system controller 102 is also connected to each sub-module controller 105.
  • the battery management controller 104 is used to obtain the status information of the corresponding energy storage sub-module 103.
  • the sub-module controller 105 is used to control the corresponding energy storage sub-module 103.
  • the monitoring backend 101 is used for status monitoring.
  • the system controller 102 is used to obtain the communication status of each communication path in the energy storage system and execute corresponding processing actions according to the communication status.
  • the energy storage system includes multiple energy storage sub-modules 103.
  • Each energy storage sub-module 103 may be composed of multiple electrical cabinets connected in series and/or in parallel.
  • Each electrical cabinet may be composed of multiple electrical boxes connected in series and/or in parallel.
  • Each electrical box may be composed of multiple batteries connected in series and/or in parallel, as shown in Figure 1b.
  • the energy storage system also includes a battery management controller 104 corresponding to the energy storage submodule 103.
  • the battery management controller 104 can collect the status information of the corresponding energy storage submodule 103 and is responsible for detecting the battery's status, performance, and health status.
  • the aforementioned status information may include voltage, current, temperature, state of charge/discharge, state of charge (SOC), state of health (SOH), etc.
  • the energy storage system also includes module controllers 105 that are communicatively connected to the battery management controller 104.
  • the battery management controller 104 can transmit the collected status information to the module controllers 105, and the module controllers 105 can also transmit control commands to the battery management controller 104, thereby controlling the corresponding energy storage sub-modules 103. For example, controlling the energy storage sub-modules 103 to enter or leave the energy storage system, and also controlling the charging and discharging of the energy storage sub-modules 103.
  • the energy storage system also includes a system controller 102 and a monitoring backend 101.
  • the system controller 102 is communicatively connected to multiple module controllers 105 and the monitoring backend 101, respectively.
  • the monitoring backend 101 is also communicatively connected to multiple battery management controllers 104.
  • the system controller 102 can obtain status information collected by the battery management controllers 104 through the module controllers 105 and transmit the status information to the monitoring backend 101.
  • the system controller 102 can also obtain status information collected by the battery management controllers 104 through the monitoring backend 101.
  • the system controller 102 can send control commands to the module controllers 105 based on the status information, thereby controlling each energy storage submodule 103.
  • the system controller 102 can determine the communication status of each communication path and take corresponding actions when a communication failure occurs.
  • the monitoring backend 101 can monitor the status of the system controller 102 through communication with the system controller 102, and can also monitor the status of the battery management controllers 104 through communication with them.
  • the monitoring backend 101 is mainly used for monitoring status.
  • the monitoring backend 101 and the system controller 102 can be integrated as two components into a single hardware device.
  • the battery management controller 104 when the module controller 105 is omitted, the battery management controller 104 is connected to both the monitoring backend 101 and the system controller 102.
  • the energy storage system includes an energy storage submodule 103, with the battery management controller 104 replacing the module controller 105. It should be noted that the direct connection of the battery management controller 104 to the system controller 102 is not limited to the above example and can be configured according to actual conditions.
  • fiber optic communication is used between the monitoring backend 101, the system controller 102, the battery management controller 104, and the module controller 105.
  • the energy storage system further includes multiple Battery Management Units (BMUs), each corresponding to a battery cabinet.
  • BMUs Battery Management Units
  • the battery management controller 104 corresponding to each energy storage submodule 103 is communicatively connected to the battery management unit corresponding to each battery cabinet within that submodule 103.
  • the battery management unit can collect the status information of the battery cabinet and transmit the collected information to the battery management controller 104.
  • the energy storage system further includes a bus switch and a bypass switch.
  • the bus switch enables the connection between the battery and external devices of the energy storage system, and the bypass switch enables the activation and deactivation of the energy storage submodule 103.
  • the energy storage system includes a monitoring backend, a system controller, multiple energy storage sub-modules, a battery management controller and a module controller corresponding to each energy storage sub-module; the battery management controller acquires the status information of the corresponding energy storage sub-module; the module controller controls the corresponding energy storage sub-module; the monitoring backend performs status monitoring; the system controller acquires the communication status of each communication path in the energy storage system and executes corresponding processing actions according to the communication status.
  • This solution sets up two communication paths: one from the battery management controller to the monitoring backend, and the other from the battery management controller through the corresponding module controller and system controller to the monitoring backend.
  • the redundant communication paths can improve communication reliability, reduce the risk of information loss, and improve the stability and reliability of the energy storage system.
  • a protection method for an energy storage system is provided, taking the system controller in FIG1a as an example for illustration.
  • the method may include the following steps:
  • Step 201 Obtain the first communication status from the monitoring backend to the system controller in the energy storage system, the first communication status from each battery management controller to the monitoring backend, and the first communication status from each battery management controller to the monitoring backend via the system controller.
  • the first communication state is used to characterize whether the two parties in the communication connection are communicating normally or experiencing a communication failure.
  • the monitoring backend can detect whether communication between the module controller and the system controller, as well as between the module controller and the corresponding battery management controller, is normal or faulty.
  • the battery management controller can also detect whether communication between the module controller and the system controller, as well as between the module controller and the corresponding battery management controller, is normal or faulty.
  • the above method for detecting whether communication is normal or faulty can be to send a communication request to the communication target. If the request is sent successfully, communication is considered normal; if the request fails, communication is considered faulty.
  • the monitoring backend, module controller, and battery management controller can send detection results to the system controller. If the system controller successfully receives the detection results from the monitoring backend, module controller, and battery management controller, it determines the first communication status from the monitoring backend to the system controller, from each battery management controller to the monitoring backend, and from each battery management controller through the corresponding module controller and the system controller to the monitoring backend.
  • the first communication status is determined based on the failure to receive the result: from the monitoring backend to the system controller, from each battery management controller to the monitoring backend, and from each battery management controller through the corresponding module controller and system controller to the monitoring backend.
  • the system controller does not receive the detection results directly from the module controller, but receives the detection results from the monitoring backend, and receives the detection results from the battery management controller and the module controller through the monitoring backend, it can be determined that there is a communication failure between the module controller and the system controller.
  • the module controller if the module controller is omitted, if the system controller successfully receives the detection results sent by the monitoring backend and the battery management controller, then the first communication state from the monitoring backend to the system controller, and from each battery management controller to the monitoring backend, and from each battery management controller through the system controller to the monitoring backend is determined based on the received detection results.
  • Step 202 If at least one first communication status indicates that there is a communication fault in the energy storage system, then the corresponding processing action for the communication fault is executed.
  • the actions taken include shutting down operations and maintaining the current state.
  • At least one communication failure may exist in multiple first communication states. For example, there may be a communication failure between the monitoring backend and the system controller, a communication failure between at least one battery management controller and the monitoring backend, a communication failure between at least one battery management controller and its corresponding module controller, a communication failure between at least one module controller and the system controller, a communication failure between the system controller and the monitoring backend, and so on. It should be noted that communication failures are not limited to the above situations. In practical applications, combinations of the above failures or situations other than those mentioned above may also occur.
  • the system controller can perform different actions based on different communication failures. For example, based on one type of communication failure, it can send a shutdown control command to each module controller. Upon receiving the shutdown control command, each module controller will shut down the corresponding energy storage submodule, thus controlling the energy storage system to shut down. Alternatively, if it determines that the current state of the energy storage system should be maintained based on one type of communication failure, no control command will be sent.
  • the first communication status from the monitoring backend to the system controller, the first communication status from each battery management controller to the monitoring backend, and the first communication status from each battery management controller to the monitoring backend via the system controller are obtained in the energy storage system. If at least one first communication status indicates a communication fault in the energy storage system, the corresponding processing action for the communication fault is executed.
  • two communication paths are set: one from the battery management controller to the monitoring backend and the other from the battery management controller to the monitoring backend via the system controller.
  • the redundant communication paths can improve communication reliability and reduce the risk of information loss. Furthermore, if a communication fault occurs, processing actions such as shutdown or maintaining the current state can be taken according to the communication fault, thereby improving the reliability and stability of the energy storage system.
  • the step "if at least one first communication state indicates that there is a communication failure in the energy storage system, then perform the corresponding processing action for the communication failure" in the above embodiments may include: when the first communication state from the monitoring backend to the system controller is normal, if the first communication state from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication states from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure, then control the energy storage system to shut down.
  • the system controller can determine whether communication between the monitoring backend and the system controller is normal or faulty based on multiple first communication states. If communication between the monitoring backend and the system controller is normal, it can then determine whether communication between the battery management controller and the monitoring backend is normal or faulty, and further determine whether communication between the battery management controller and the corresponding module controller and system controller is normal or faulty.
  • the system controller will shut down the energy storage system.
  • shutting down the energy storage system when the downlink communication path from the monitoring backend to the system controller is normal, but both uplink communication paths from the battery management controller to the monitoring backend are abnormal, can reduce the risk of information loss and help improve the stability and reliability of the energy storage system.
  • the step "if at least one first communication state indicates that there is a communication failure in the energy storage system, then perform the corresponding processing action for the communication failure" in the above embodiments may include: if the first communication state from the monitoring backend to the system controller is a communication failure, and/or the first communication state from each battery management controller to the monitoring backend via the corresponding module controller and system controller to the monitoring backend is a normal communication state, then maintain the current state of the energy storage system.
  • the system controller can determine whether communication between the monitoring backend and the system controller is normal or faulty based on multiple first communication states. If a communication fault is determined between the monitoring backend and the system controller, it can then determine whether communication between the battery management controller and the monitoring backend is normal or faulty, and further determine whether communication between the battery management controller and the corresponding module controller and system controller is normal or faulty.
  • the system controller disables the information loss protection function to maintain the current state of the energy storage system.
  • the technical solution of this application embodiment can, on the one hand, reduce the risk of erroneous processing actions in the energy storage system, and on the other hand, reduce unnecessary downtime, helping to minimize system downtime and improve system availability and operating efficiency.
  • Each energy storage submodule includes multiple battery cells.
  • Each submodule corresponds to a battery management controller, and each battery cell corresponds to a battery management unit (BMU).
  • the battery management controller communicates with multiple BMUs.
  • the second communication status between the battery management controller and each BMU can be determined first, i.e., whether the communication between the battery management controller and each BMU is normal or faulty.
  • Step 302 Perform statistical processing on the second communication state to obtain the number of communication failures.
  • the second communication status between the battery management controller and each battery management unit is statistically analyzed to obtain the number of communication faults corresponding to each energy storage submodule.
  • the number of communication failures is determined to be 0; if the battery management controller communicates normally with two of the battery management units but fails to communicate with the third battery management unit, then the number of communication failures is determined to be 1.
  • Step 303 Perform corresponding processing actions based on the number of communication failures, including outputting early warning information.
  • Different actions are taken depending on the number of communication failures. For example, if the number of communication failures is 0, the current state is maintained; if the number of communication failures n is greater than a and less than b, an early warning message is output; if the number of communication failures is greater than b, the energy storage submodule or energy storage system is shut down, where a is less than b.
  • warning message can be displayed by illuminating an alarm light or by emitting an audible warning. It should be noted that the method of outputting warning messages is not limited to the examples above; other methods can be used in practical applications.
  • the second communication state between the battery management controller and each battery management unit is obtained; the second communication states are statistically processed to obtain the number of communication failures; and corresponding processing actions are executed according to the number of communication failures, wherein the processing actions also include outputting early warning information.
  • the risk of information loss of energy storage submodules is detected, which can effectively prevent energy storage system failures and shutdowns caused by the loss of information from one or more energy storage submodules, which helps to improve the reliability and stability of the energy storage system.
  • the step "execute corresponding processing actions according to the number of communication failures" in the above embodiments may include: if the number of communication failures corresponding to any energy storage submodule is greater than a first number threshold, or the total number of communication failures corresponding to multiple energy storage submodules is greater than a second number threshold, then control the energy storage system to shut down.
  • the energy storage system In the process of detecting whether there is a risk of information loss in the energy storage submodule, if it is determined that the number of communication failures corresponding to one or more energy storage submodules is greater than the first number threshold, it indicates that there are many communication failures between the battery management controller and the battery management unit in a single energy storage submodule, which may affect the overall reliability and stability of the energy storage system. In this case, the energy storage system is shut down.
  • the total number of communication failures can be calculated by summing the number of communication failures corresponding to multiple energy storage submodules. If the total number of communication failures exceeds a second threshold, it indicates that there are many communication failures between the battery management controller and the battery management unit in the energy storage system, which may affect the overall reliability and stability of the energy storage system. In this case, the energy storage system should be shut down.
  • the first and second quantity thresholds can be set according to the actual situation.
  • the second quantity threshold can be equal to or greater than the first quantity threshold.
  • the energy storage system is shut down.
  • the technical solution of this application embodiment can respond promptly to the loss of information from a single electrical cabinet, which helps prevent potential safety risks, such as electrical faults and overheating caused by the loss of information from one or more electrical cabinets.
  • the step "perform corresponding processing actions according to the number of communication failures" in the above embodiments may include:
  • Step 401 If the number of communication faults corresponding to each energy storage submodule is less than or equal to the first quantity threshold, then obtain the switching status of the bus switch and the fire protection status of each energy storage submodule.
  • the number of communication failures corresponding to each energy storage submodule is less than or equal to the first number threshold, it indicates that the number of communication failures between the battery management controller and the battery management unit in a single energy storage submodule is within an acceptable range. Then, the switching status of the bus switch and the fire protection status of each energy storage submodule are obtained.
  • the function of the aforementioned bus switch is to control the connection between the energy storage system and external devices.
  • the bus switch When the bus switch is in the closed position, it indicates that the energy storage system is connected to the external devices, and when the bus switch is in the open position, it indicates that the connection between the energy storage system and the external devices is disconnected.
  • the above fire status indicates whether the fire protection module corresponding to the energy storage submodule is activated. If the fire protection status is activated, it means that the fire protection module corresponding to the energy storage submodule is activated; if the fire protection status is not activated, it means that the fire protection module corresponding to the energy storage submodule is not activated.
  • Step 402 When the switch is in the closed position or the fire protection system is in the activated position, control the energy storage system to shut down.
  • the combiner switch If the combiner switch is in the closed position, it indicates that the energy storage system is connected to external devices despite a certain number of communication failures. In this situation, the stability of the energy storage system is easily affected, which in turn affects the safety of the external devices. Therefore, the energy storage system should be shut down. Understandably, shutdown prevents the battery from continuing to provide power in the event of a communication failure leading to the loss of cabinet information, thereby preventing potential safety issues or unforeseen operational risks.
  • Fire suppression module activation refers to emergency measures taken in response to potential fires or thermal runaway in energy storage submodules. If the fire suppression status of at least one energy storage submodule is activated, it indicates a possible battery overheating, short circuit, or other hazardous situation. Shutting down the energy storage system can prevent the battery pack from continuing to discharge, thus avoiding the spread of fire or further escalation of the danger.
  • Step 403 When the switch is in the open position and the fire protection status is not activated, perform state of charge statistics on the target energy storage submodule with communication failure to obtain the minimum state of charge.
  • the bus switch If the bus switch is in the open position, it indicates that although there are a certain number of communication faults in the energy storage system, the energy storage system is not connected to external devices. In this case, corresponding actions can be taken based on the state of charge (SBC). Therefore, the SBC of the faulty target energy storage submodules can be statistically analyzed first, and then the minimum SBC can be determined based on the SBCs of multiple target energy storage submodules.
  • SBC state of charge
  • the state of charge of target energy storage submodule 1 is SOC1
  • the state of charge of target energy storage submodule 2 is SOC2
  • the state of charge of target energy storage submodule 3 is SOC3.
  • SOC1 is the smallest, so the smallest state of charge is determined to be SOC1.
  • Step 404 If the minimum state of charge is less than the preset state of charge threshold, then control the energy storage system to shut down.
  • the minimum state of charge is compared with the preset state of charge threshold. If the minimum state of charge is greater than or equal to the preset state of charge threshold, it indicates that even if the target energy storage submodule corresponding to the minimum state of charge continues to self-discharge, the risk of over-discharge is relatively low. Therefore, the current state of the energy storage system can be maintained.
  • the target energy storage submodule corresponding to the minimum state of charge continues to self-discharge, which poses a high risk of over-discharge and may even lead to damage or other safety issues, affecting the reliability of the energy storage system. Therefore, the energy storage system is shut down.
  • the switch status of the combiner switch and the fire protection status of each energy storage submodule are obtained; if the switch status is closed or the fire protection status is activated, the energy storage system is shut down; if the switch status is open and the fire protection status is not activated, the state of charge of the target energy storage submodule with communication faults is statistically analyzed to obtain the minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, the energy storage system is shut down.
  • the step "to perform state of charge statistics on the target energy storage submodule with communication failure and obtain the minimum state of charge" in the above embodiments may include: for the target energy storage submodule, if the battery management controller has a communication failure with the first battery management unit in the target energy storage submodule, then perform state of charge statistics on the battery cells corresponding to the first battery management unit, and determine the first state of charge as the minimum state of charge.
  • the battery management controller fails to communicate with one of the battery management units but communicates normally with other battery management units, then the state of charge (SOC) statistics are performed on the battery cells corresponding to the battery management unit with the communication failure, and the first SOC statistics is determined as the minimum SOC.
  • SOC state of charge
  • the minimum state of charge and the time of occurrence of the communication failure are stored.
  • the embodiments of this application may further include the following steps:
  • the preset period can be set hourly or daily, depending on the actual situation.
  • the first state of charge is determined to be the minimum state of charge.
  • the updated minimum state of charge and the time of occurrence of the new communication failure are stored.
  • the safe discharge duration can be calculated based on the self-discharge amount and the MSC. For example, the safe discharge duration can be obtained by dividing the MSC by the self-discharge amount.
  • the step "performing corresponding processing actions according to the safe discharge duration" in the above embodiments includes:
  • Step 601 After calculating the safe discharge duration, obtain the discharged duration.
  • the time from the occurrence of the communication failure to the current time can be determined as the discharged duration.
  • the safe discharge duration needs to be recalculated based on the updated minimum state of charge, and the discharged duration needs to be re-determined based on the occurrence time of the new communication failure and the current time.
  • Step 602 If the discharge duration exceeds the safe discharge duration, then control the energy storage system to shut down.
  • discharge duration exceeds the safe discharge duration, it indicates that over-discharge may have occurred, and the energy storage system should be shut down.
  • time protection logic can be added to prevent the energy storage system from shutting down due to system time errors. If a significant error is detected in the generator controller time (such as a jump in year, month, day, etc.), the shutdown function caused by exceeding the safe discharge time is disabled, the safe discharge time is no longer calculated, the time before the system time error is latched, and the shutdown function is re-enabled after the monitoring background sends a signal that the system time is normal.
  • the already discharged duration is obtained; if the already discharged duration exceeds the safe discharge duration, the energy storage system is shut down.
  • controlling the energy storage system to shut down after exceeding the safe discharge duration helps ensure the safe operation of the energy storage system, preventing overheating and overvoltage problems in faulty energy storage submodules during discharge, and improving the safety of the energy storage system.
  • the embodiments of this application may further include the following steps:
  • Step 701 Determine the warning duration based on the safe discharge duration.
  • the warning duration can be determined according to a preset ratio and the safe discharge duration, or it can be determined according to a reserved duration. For example, if the safe discharge duration is 30 days and the preset ratio is 90%, then the warning duration is determined to be 27 days; or, if the reserved duration is 1 day, then the warning duration is determined to be 29 days.
  • the method for determining the warning duration is not limited to the above example, and other methods can also be used.
  • Step 702 If the discharge duration is greater than the warning duration but less than the safe discharge duration, then output the warning information.
  • a warning message will be output. For example, if the discharged duration is 28 days, which is greater than the warning duration of 27 days but less than the safe discharge duration of 30 days, the alarm light will illuminate.
  • the warning duration is determined based on the safe discharge duration; if the discharged duration is longer than the warning duration but shorter than the safe discharge duration, a warning message is output.
  • a warning can be issued to the energy storage system, reminding relevant operators to pay attention and reducing the risk of over-discharge.
  • a protection method for an energy storage system is provided. Taking the system controller in Figure 1a as an example, the method may include the following steps:
  • Step 1 Obtain the first communication status from the monitoring backend to the system controller in the energy storage system, the first communication status from each battery management controller to the monitoring backend, and the first communication status from each battery management controller to the monitoring backend via the corresponding module controller and system controller.
  • Step 2 If the first communication status from the monitoring backend to the system controller is normal, and if the first communication status from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication statuses from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure, then the energy storage system shall be shut down.
  • Step 3 If the first communication status from the monitoring backend to the system controller is a communication failure, and/or the first communication status from each battery management controller to the monitoring backend via the corresponding module controller and system controller to the monitoring backend is a normal communication status, then the current state of the energy storage system shall be maintained.
  • Step 4 If multiple first communication states are all normal, then for each energy storage submodule in the energy storage system, obtain the second communication state between the battery management controller and each battery management unit; perform statistical processing on the second communication states to obtain the number of communication failures.
  • Step 5 If the number of communication failures corresponding to any energy storage submodule is greater than the first threshold, or the total number of communication failures corresponding to multiple energy storage submodules is greater than the second threshold, then control the energy storage system to shut down.
  • Step 6 If the number of communication faults corresponding to each energy storage submodule is less than or equal to the first quantity threshold, then obtain the switching status of the bus switch and the fire protection status of each energy storage submodule.
  • Step 7 When the switch is in the closed position or the fire protection system is in the activated position, shut down the energy storage system.
  • Step 8 When the switch is in the open position and the fire alarm is not activated, for a target energy storage submodule with a communication failure, if the battery management controller fails to communicate with the first battery management unit in the target energy storage submodule, then the state of charge (SOC) of the battery cells corresponding to the first battery management unit is statistically analyzed, and the statistically analyzed first SOC is determined as the minimum SOC; if the battery management controller fails to communicate with the second battery management unit in the energy storage submodule other than the first battery management unit, then the SOC of the battery cells corresponding to the second battery management unit is statistically analyzed to obtain the second SOC; if the difference between the first SOC and the second SOC is greater than a preset difference, then the second SOC is updated to the minimum SOC.
  • SOC state of charge
  • Step 9 If the minimum state of charge is less than the preset charge threshold, then control the energy storage system to shut down.
  • Step 10 If the minimum state of charge is greater than or equal to the preset state of charge threshold, calculate the safe discharge duration corresponding to the minimum state of charge.
  • Step 11 Determine the warning duration based on the safe discharge duration; if the discharged duration is longer than the warning duration but shorter than the safe discharge duration, then output the warning information.
  • Step 12 If the discharge duration exceeds the safe discharge duration, then control the energy storage system to shut down.
  • two communication paths are set up: one from the battery management controller to the monitoring backend, and the other from the battery management controller to the monitoring backend via the corresponding module controller and system controller.
  • the redundant communication paths can improve communication reliability and reduce the risk of information loss.
  • actions such as shutdown or maintaining the current state can be taken based on the communication failure. In this way, the system downtime can be minimized, the availability and operating efficiency of the energy storage system can be improved, and the reliability and stability of the energy storage system can be enhanced, preventing potential safety risks.
  • steps in the flowchart above are shown sequentially as indicated by the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowchart above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages in other steps.
  • this application also provides a protection device for an energy storage system for implementing the protection method for the energy storage system described above.
  • the solution provided by this device is similar to the solution described in the above method; therefore, the specific limitations in one or more embodiments of the protection device for the energy storage system provided below can be found in the limitations of the protection method for the energy storage system described above, and will not be repeated here.
  • a protection device for an energy storage system comprising:
  • the first state acquisition module 801 is used to acquire the first communication state from the monitoring backend to the system controller in the energy storage system, the first communication state from each battery management controller to the monitoring backend, and the first communication state from each battery management controller to the monitoring backend via the system controller.
  • the first protection module 802 is used to execute the corresponding processing action if at least one first communication status indicates that there is a communication failure in the energy storage system; wherein the processing action includes shutdown and maintaining the current status.
  • the first protection module 802 is specifically used to control the energy storage system to shut down when the first communication state from the monitoring backend to the system controller is normal, and at least one of the first communication states from any battery management controller to the monitoring backend is a communication failure, and at least one of the first communication states from any battery management controller to the corresponding module controller, from any module controller to the system controller, and from the system controller to the monitoring backend is a communication failure.
  • the first protection module 802 is specifically used to maintain the current state of the energy storage system if the first communication status from each battery management controller to the monitoring backend and/or the first communication status from each battery management controller to the monitoring backend via the corresponding module controller and system controller is normal, in the case of a communication failure in the first communication status from the monitoring backend to the system controller.
  • the device further includes:
  • the second state acquisition module 803 is used to acquire the second communication state between the battery management controller and each battery management unit for each energy storage submodule in the energy storage system if multiple first communication states are all normal.
  • the quantity statistics module 804 is used to perform statistical processing on the second communication state to obtain the number of communication failures
  • the second protection module 805 is used to perform corresponding processing actions based on the number of communication failures, including outputting early warning information.
  • the second protection module 805 is specifically used to control the energy storage system to shut down if the number of communication faults corresponding to any energy storage submodule is greater than a first quantity threshold, or the total number of communication faults corresponding to multiple energy storage submodules is greater than a second quantity threshold.
  • the second protection module 805 is specifically used to obtain the switching status of the bus switch and the fire protection status of each energy storage submodule if the number of communication faults corresponding to each energy storage submodule is less than or equal to a first quantity threshold; and to control the energy storage system to shut down when the switching status is closed or the fire protection status is activated.
  • the second protection module 805 is further configured to perform state of charge statistics on the target energy storage submodule with communication failure when the switch state is open and the fire protection state is not activated, and obtain the minimum state of charge; if the minimum state of charge is less than a preset state of charge threshold, then control the energy storage system to shut down.
  • the second protection module 805 is specifically used to perform state of charge statistics on the battery cells corresponding to the first battery management unit if the communication between the battery management controller and the first battery management unit in the target energy storage submodule fails, and to determine the first state of charge as the minimum state of charge.
  • the second protection module 805 is specifically used to perform state of charge statistics on the battery cells corresponding to the second battery management unit to obtain the second state of charge if the battery management controller fails to communicate with the second battery management unit in the energy storage submodule other than the first battery management unit.
  • the second state of charge is updated to the minimum state of charge.
  • the second protection module 805 is further configured to calculate the safe discharge duration corresponding to the minimum state of charge if the minimum state of charge is greater than or equal to a preset state of charge threshold, and to perform corresponding processing actions based on the safe discharge duration.
  • the second protection module 805 is further configured to obtain the discharged duration after calculating the safe discharge duration; if the discharged duration is longer than the safe discharge duration, then control the energy storage system to shut down.
  • the second protection module 805 is further configured to determine the warning duration based on the safe discharge duration; if the discharge duration is longer than the warning duration but shorter than the safe discharge duration, then the warning information is output.
  • the various modules in the protection device of the aforementioned energy storage system can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of the electronic device in hardware form or independent of it, or stored in the memory of the electronic device in software form, so that the processor can call and execute the operations corresponding to each module.
  • a computer device which can be a system controller in an energy storage system, and its internal structure diagram is shown in Figure 10.
  • the computer device includes a processor, a memory, an input/output interface, a communication interface, a display unit, and an input device.
  • the processor, memory, and input/output interface are connected via a system bus, and the communication interface, display unit, and input device are connected to the system bus via the input/output interface.
  • the processor of the computer device provides computing and control capabilities.
  • the memory of the computer device includes a non-volatile storage medium and internal memory.
  • the non-volatile storage medium stores an operating system and computer programs.
  • the internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium.
  • the input/output interface of the computer device is used for exchanging information between the processor and external devices.
  • the communication interface of the computer device is used for wired or wireless communication with external terminals; wireless communication can be achieved through WIFI, mobile cellular networks, NFC (Near Field Communication), or other technologies.
  • the computer program When executed by the processor, it implements a protection method for an energy storage system.
  • the display unit of the computer device is used to form a visually visible image and can be a display screen, a projection device, or a virtual reality imaging device.
  • the display screen can be an LCD screen or an e-ink screen.
  • the input device of the computer device can be a touch layer covering the display screen, or buttons, trackballs, or touchpads set on the casing of the computer device, or external keyboards, touchpads, or mice, etc.
  • FIG. 10 is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied.
  • Specific computer devices may include more or fewer components than those shown in the figure, or may combine certain components, or may have different component arrangements.
  • a non-transitory computer-readable storage medium including instructions is also provided, such as a memory including instructions that can be executed by a processor of an electronic device to perform the above-described method.
  • the non-transitory computer-readable storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device, etc.
  • a computer program product which, when executed by a processor, can implement the above-described methods.
  • the computer program product includes one or more computer instructions. When these computer instructions are loaded and executed on a computer, some or all of the above-described methods can be implemented, wholly or partially, according to the processes or functions described in the embodiments of this application.
  • Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc.
  • ROM read-only memory
  • MRAM magnetic random access memory
  • FRAM ferroelectric random access memory
  • PCM phase change memory
  • Volatile memory can include random access memory (RAM) or external cache memory, etc.
  • RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM).
  • SRAM Static Random Access Memory
  • DRAM Dynamic Random Access Memory
  • the databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases.
  • the processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

Landscapes

  • Engineering & Computer Science (AREA)
  • Power Engineering (AREA)
  • Charge And Discharge Circuits For Batteries Or The Like (AREA)

Abstract

本申请涉及一种储能系统的保护方法、装置、储能系统、设备和存储介质。所述方法包括：获取储能系统中监控后台到系统控制器的第一通信状态，各电池管理控制器到所述监控后台的第一通信状态，以及各所述电池管理控制器经所述系统控制器到所述监控后台的第一通信状态；若至少一个个所述第一通信状态指示所述储能系统存在通信故障，则执行所述通信故障对应的处理动作；其中，所述处理动作包括停运和维持当前状态。采用本申请能够降低信息丢失的风险，提高储能系统的稳定性和可靠性。

Description

储能系统的保护方法、装置、储能系统、设备和存储介质 相关申请
本申请要求2024年06月12日申请的，申请号为2024107583847，名称为“储能系统的保护方法、装置、储能系统、设备和存储介质”的中国专利申请的优先权，在此将其全文引入作为参考。
技术领域
本申请涉及新能源技术领域，具体涉及一种储能系统的保护方法、装置、储能系统、设备和存储介质。
 背景技术
在当今的能源领域，储能系统发挥着越来越重要的作用。随着可再生能源的快速发展和电力网络的变革，储能系统被广泛应用于电网调度、电力稳定性和能源管理等方面。储能系统中设置有多种控制器，控制器之间设置有通信链路，可以实现数据采集以及系统控制等功能。
在控制器之间出现通信故障的情况下，会导致信息丢失，对储能系统造成严重影响，带来多种安全隐患。
 发明内容
基于上述问题，本申请提供一种储能系统的保护方法、装置、储能系统、设备和存储介质，能够降低信息丢失的风险，提高储能系统的稳定性和可靠性。
第一方面，本申请提供了一种储能系统的保护方法，该方法包括：获取储能系统中监控后台到系统控制器的第一通信状态，各电池管理控制器到监控后台的第一通信状态，以及各电池管理控制器经系统控制器到监控后台的第一通信状态；若至少一个第一通信状态指示储能系统存在通信故障，则执行通信故障对应的处理动作；其中，处理动作包括停运和维持当前状态。
本申请实施例的技术方案中，设置了电池管理控制器到监控后台以及电池管理控制器经系统控制器到监控后台两条通信路径，冗余设置的通信路径可以提高通信可靠性，降低信息丢失风险；并且，如果出现通信故障，也可以根据通信故障采取停运或维持当前状态等处理动作，从而提高储能系统的可靠性和稳定性。
在一些实施例中，若至少一个第一通信状态指示储能系统存在通信故障，则执行通信故障对应的处理动作，包括：在监控后台到系统控制器的第一通信状态为通信正常的情况下，若任一电池管理控制器到监控后台的第一通信状态为通信故障，且任一电池管理控制器到对应的模块控制器、任一模块控制器到系统控制器、系统控制器到监控后台的第一通信状态中至少一个为通信故障，则控制储能系统停运。本申请实施例的技术方案中，在监控后台到系统控制器的下行通信路径正常，电池管理控制器到监控后台的两条上行通信路径都异常的情况下，停运储能系统，可以降低信息丢失带来的风险，有助于提高储能系统的稳定性和可靠性。
在一些实施例中，若至少一个第一通信状态指示储能系统存在通信故障，执行通信故障对应的处理动作，包括：在监控后台到系统控制器的第一通信状态为通信故障的情况下，若各电池管理控制器到监控后台的第一通信状态，和/或，各电池管理控制器经对应的模块控制器、系统控制器到监控后台的第一通信状态为通信正常，则维持储能系统的当前状态。本申请实施例的技术方案中，一方面可以减小储能系统出现错误的处理动作带来的风险，另一方面可以减少不必要的停运，有助于最大限度的减少系统停运时间，提高系统的可用性和运行效率。
在一些实施例中，该方法还包括：若多个第一通信状态均为通信正常，则针对储能系统中的各储能子模块，获取电池管理控制器与各电池管理单元的第二通信状态；对第二通信状态进行统计处理，得到通信故障数量；根据通信故障数量执行对应的处理动作，其中，处理动作还包括输出预警信息。本申请实施例的技术方案中，在确定没有信息整体丢失风险的情况下，对储能子模块的信息丢失风险进行检测，可以有效防止由于单个或多个储能子模块信息丢失而导致的储能系统故障和停运，这有助于提高储能系统的可靠性和稳定性。
在一些实施例中，根据通信故障数量执行对应的处理动作，包括：若任一储能子模块对应的通信故障数量大于第一数量阈值，或多个储能子模块对应的总通信故障数量大于第二数量阈值，则控制储能系统停运。本申请实施例的技术方案中，可以及时响应单个电柜信息丢失的情况，这有助于预防潜在的安全风险，比如单个或多个电柜的信息丢失导致的电气故障、过热等问题。
在一些实施例中，根据通信故障数量执行对应的处理动作，包括：若各储能子模块对应的通信故障数量小于或等于第一数量阈值，则获取汇流开关的开关状态和各储能子模块的消防状态；在开关状态为合位，或者消防状态为启动的情况下，控制储能系统停运。本申请实施例的技术方案中，可以根据不同情况合理地判断是否停运储能系统，这有助于最大限度地减少系统停运时间，提高系统的可用性和运行效率。
在一些实施例中，该方法还包括：在开关状态为分位，且消防状态为未启动的情况下，对存在通信故障的目标储能子模块进行荷电状态统计，得到最小荷电状态；若最小荷电状态小于预设荷电阈值，则控制储能系统停运。本申请实施例的技术方案中，可以根据不同情况合理地判断是否停运储能系统，这有助于最大限度地减少系统停运时间，提高系统的可用性和运行效率。
在一些实施例中，对存在通信故障的目标储能子模块进行荷电状态统计，得到最小荷电状态，包括：对于目标储能子模块，若电池管理控制器与目标储能子模块中的第一电池管理单元通信故障，则对第一电池管理单元对应的电池单元进行荷电状态统计，并将统计出的第一荷电状态确定为最小荷电状态。本申请实施例的技术方案中，统计出最小荷电状态，可以根据最小荷电状态采取相应措施，降低过放风险，以及减少过放带来的其他问题。
在一些实施例中，该方法还包括：对于目标储能子模块，若电池管理控制器与储能子模块中除第一电池管理单元之外的第二电池管理单元通信故障，则对第二电池管理单元对应的电池单元进行荷电状态统计，得到第二荷电状态；若第一荷电状态与第二荷电状态的差值大于预设差值，则将第二荷电状态更新为最小荷电状态。本申请实施例的技术方案中，可以及时发现新出现的通信故障，并根据新出现的通信故障进行最小荷电状态的更新，这样，可以使储能系统的控制更符合实际情况，从而提高储能系统的安全性。
在一些实施例中，该方法还包括：若最小荷电状态大于或等于预设荷电阈值，则计算最小荷电状态对应的安全放电时长，并根据安全放电时长执行对应的处理动作。本申请实施例的技术方案中，可以根据新出现的通信故障进行最小荷电状态的更新，从而采取对应的处理动作，提高储能系统的安全性。
在一些实施例中，根据安全放电时长执行对应的处理动作，包括：在计算出安全放电时长后，获取已放电时长；若已放电时长大于安全放电时长，则控制储能系统停运。本申请实施例的技术方案中，在超出安全放电时长后控制储能系统停运，有助于保障储能系统的安全运行，可以防止出现故障的储能子模块在放电过程中发生过热、过电压等问题，提高储能系统的安全性。
在一些实施例中，该方法还包括：根据安全放电时长确定预警时长；若已放电时长大于预警时长且小于安全放电时长，则输出预警信息。本申请实施例的技术方案中，可以对储能系统进行预警，提醒相关操作人员关注，降低过放风险。
第二方面，本申请还提供了一种储能系统的保护装置，该装置包括：
第一状态获取模块，用于获取储能系统中监控后台到系统控制器，以及各电池管理控制器到监控后台、各电池管理控制器经系统控制器到监控后台的第一通信状态；
第一保护模块，用于若至少一个第一通信状态中存在通信故障，则执行通信故障对应的处理动作；其中，处理动作包括停运和维持当前状态。
第三方面，本申请还提供了一种储能系统，储能系统包括监控后台、系统控制器、多个储能子模块、与各储能子模块对应的电池管理控制器和模块控制器，电池管理控制器和模块控制器一一对应通信连接；监控后台分别与系统控制器和各电池管理控制器通信连接，系统控制器还分别与各模块控制器通信连接；电池管理控制器，用于获取对应的储能子模块的状态信息；模块控制器，用于控制对应的储能子模块；监控后台，用于进行状态监控；系统控制器，用于执行第一方面中任一项所述的方法。
第四方面，本申请还提供了一种计算机设备，包括存储器和处理器，存储器存储有计算机程序，处理器执行计算机程序时实现第一方面中任一项的方法。
第五方面，本申请还提供了一种计算机可读存储介质，其上存储有计算机程序，计算机程序被处理器执行时实现第一方面中任一项的方法。
第六方面，本申请还提供了一种计算机程序产品，包括计算机程序，该计算机程序被处理器执行时实现第一方面中任一项的方法。
 附图说明
通过阅读对下文可选实施方式的详细描述，各种其他的优点和益处对于本领域普通技术人员将变得清楚明了。附图仅用于示出可选实施方式的目的，而并不认为是对本申请的限制。而且在全部附图中，用相同的附图标号表示相同的部件。在附图中：
图1a为本申请一实施例的储能系统的结构示意图；
图1b为本申请一实施例的储能子模块的结构示意图；
图2是本申请一实施例的储能系统的保护方法的流程示意图；
图3是本申请一实施例的针对储能子模块的通信故障进行保护的流程示意图；
图4是本申请一实施例的根据通信故障数量执行处理动作步骤的流程示意图；
图5是本申请一实施例的更新最小荷电状态步骤的流程示意图；
图6是本申请一实施例的根据安全放电时长执行处理动作步骤的流程示意图；
图7是本申请一实施例的根据预警时长输出预警信息步骤的流程示意图；
图8是本申请一实施例的储能系统的保护装置的结构框图；
图9是本申请一实施例的储能系统的保护装置的结构框图；
图10是本申请一实施例的计算机设备的内部结构图。
 具体实施方式
下面将结合附图对本申请技术方案的实施例进行详细的描述。以下实施例仅用于更加清楚地说明本申请的技术方案，因此只作为示例，而不能以此来限制本申请的保护范围。
除非另有定义，本文所使用的所有的技术和科学术语与属于本申请的技术领域的技术人员通常理解的含义相同；本文中所使用的术语只是为了描述具体的实施例的目的，不是旨在于限制本申请；本申请的说明书和权利要求书及上述附图说明中的术语“包括”和“具有”以及它们的任何变形，意图在于覆盖不排他的包含。
在本申请实施例的描述中，技术术语“第一”“第二”等仅用于区别不同对象，而不能理解为指示或暗示相对重要性或者隐含指明所指示的技术特征的数量、特定顺序或主次关系。在本申请实施例的描述中，“多个”的含义是两个以上，除非另有明确具体的限定。
在本文中提及“实施例”意味着，结合实施例描述的特定特征、结构或特性可以包含在本申请的至少一个实施例中。在说明书中的各个位置出现该短语并不一定均是指相同的实施例，也不是与其它实施例互斥的独立的或备选的实施例。本领域技术人员显式地和隐式地理解的是，本文所描述的实施例可以与其它实施例相结合。
在本申请实施例的描述中，术语“和/或”仅仅是一种描述关联对象的关联关系，表示可以存在三种关系，例如A和/或B，可以表示：单独存在A，同时存在A和B，单独存在B这三种情况。另外，本文中字符“/”，一般表示前后关联对象是一种“或”的关系。
在本申请实施例的描述中，术语“多个”指的是两个以上(包括两个)，同理，“多组”指的是两组以上(包括两组)，“多片”指的是两片以上(包括两片)。
在本申请实施例的描述中，除非另有明确的规定和限定，技术术语“安装”“相连”“连接”“固定”等术语应做广义理解，例如，可以是固定连接，也可以是可拆卸连接，或成一体；也可以是机械连接，也可以是电连接；可以是直接相连，也可以通过中间媒介间接相连，可以是两个元件内部的连通或两个元件的相互作用关系。对于本领域的普通技术人员而言，可以根据具体情况理解上述术语在本申请实施例中的具体含义。
在当今的能源领域，储能系统发挥着越来越重要的作用。随着可再生能源的快速发展和电力网络的变革，储能系统被广泛应用于电网调度、电力稳定性和能源管理等方面。储能系统中设置有多种控制器，控制器之间设置有通信链路，可以实现数据采集以及系统控制等功能。在控制器之间出现通信故障的情况下，会导致信息丢失，对储能系统造成严重影响，带来多种安全隐患。
本申请实施例提供了一种储能系统保护方案，先获取储能系统中监控后台到系统控制器的第一通信状态，各电池管理控制器到监控后台的第一通信状态，以及各电池管理控制器经系统控制器到监控后台的第一通信状态。如果多个第一通信状态指示储能系统存在通信故障，则执行控制储能系统停运或者维持当前状态等处理动作。在该方案中，设置了电池管理控制器到监控后台以及电池管理控制器经系统控制器到监控后台两条通信路径，冗余设置的通信路径可以提高通信可靠性，降低信息丢失风险；并且，如果出现通信故障，也可以根据通信故障采取停运或维持当前状态等处理动作，从而提高储能系统的可靠性和稳定性。
本申请实施例提供的储能系统保护方法，可以应用到图1a所示的储能系统中。该储能系统包括监控后台101、系统控制器(Valve Base Controller，VBC)102、多个储能子模块103、与各储能子模块(Sub-Module，SM)103对应的电池管理控制器(Battery Management Controller，BMC)104和模块控制器(Sub-Module Controller，SMC)105，电池管理控制器104和模块控制器105一一对应通信连接；监控后台101分别与系统控制器102和各电池管理控制器104通信连接，系统控制器102还分别与各模块控制器105通信连接；电池管理控制器104，用于获取对应的储能子模块103的状态信息；模块控制器105，用于控制对应的储能子模块103；监控后台101，用于进行状态监控；系统控制器102，用于获取储能系统中各通信路径的通信状态，并根据通信状态执行相应的处理动作。
本申请实施例中，储能系统包括多个储能子模块103，各储能子模块103可以由多个电柜串联和/或并联组成，各电柜可以由多个电箱串联和/或并联组成，各电箱可以由多个电池串联和/或并联组成，如图1b所示。
储能系统还包括与储能子模块103对应的电池管理控制器104，电池管理控制器104可以采集对应的储能子模块103的状态信息，负责检测电池的状态、性能和健康状态等。上述状态信息可以包括电压、电流、温度、充放电状态、荷电状态(State OfCharge，SOC)、健康状态(State ofHealth，SOH)等等。
储能系统还包括与电池管理控制器104一一对应通信连接的模块控制器105。电池管理控制器104可以将采集到的状态信息传输至模块控制器105，模块控制器105也可以将控制指令传输至电池管理控制器104，从而控制对应的储能子模块103。例如，控制储能子模块103投入储能系统或者切出储能系统，还可以控制储能子模块103充电、放电等。
储能系统还包括系统控制器102和监控后台101，系统控制器102分别与多个模块控制器105和监控后台101通信连接，监控后台101还与多个电池管理控制器104通信连接。系统控制器102可以通过模块控制器105获取电池管理控制器104采集的状态信息，并将状态信息传输到监控后台101。系统控制器102也可以通过监控后台101获取电池管理控制器104采集的状态信息。系统控制器102可以根据状态信息向模块控制器105发送控制指令，从而控制各储能子模块103。系统控制器102可以确定各通信路径的通信状态，并在出现通信故障时采取相应的处理动作。监控后台101可以通过与系统控制器102的通信监控系统控制器102的状态，还可以通过与电池管理控制器104的通信监控电池管理控制器104的状态。监控后台101主要用于监控状态，在一些实施例中，监控后台101和系统控制器102可以作为两个组件集成为一个硬件设备。
在一些实施例中，在省略模块控制器105的情况下，电池管理控制器104分别与监控后台101和系统控制器102连接。例如，储能系统包括一个储能子模块103，由电池管理控制器104替代模块控制器105。需要说明的是，电池管理控制器104直接与系统控制器102连接的情况不限于上述示例，可以根据实际情况设置。
在一些实施例中，监控后台101、系统控制器102、电池管理控制器104和模块控制器105之间采用光纤通信。
在一些实施例中，储能系统还包括多个电池管理单元(Battery Management Unit，BMU)，电池管理单元与电柜一一对应，每个储能子模块103对应的电池管理控制器104与该储能子模块103中各电柜对应的电池管理单元通信连接。电池管理单元可以采集电柜的状态信息，并将采集到的电柜信息传输至电池管理控制器104。
在一些实施例中，储能系统还包括汇流开关和旁路开关，汇流开关可以实现电池与储能系统外部设备的连接，旁路开关可以实现储能子模块103的投入和切出。
本申请实施例的技术方案中，储能系统包括监控后台、系统控制器、多个储能子模块、与各储能子模块对应的电池管理控制器和模块控制器；电池管理控制器获取对应的储能子模块的状态信息；模块控制器控制对应的储能子模块；监控后台进行状态监控；系统控制器获取储能系统中各通信路径的通信状态，并根据通信状态执行相应的处理动作。该方案设置了电池管理控制器到监控后台以及电池管理控制器经对应的模块控制器、系统控制器到监控后台两条通信路径，冗余设置的通信路径可以提高通信可靠性，降低信息丢失风险，提高储能系统的稳定性和可靠性。
[根据细则91更正 14.07.2025]
根据本申请的一些实施例，参照图2，提供了一种储能系统的保护方法，以应用于图1a中的系统控制器为例进行说明，该方法可以包括如下步骤：
步骤201，获取储能系统中监控后台到系统控制器的第一通信状态，各电池管理控制器到监控后台的第一通信状态，以及各电池管理控制器经系统控制器到监控后台的第一通信状态。
其中，第一通信状态用于表征通信连接的两者是通信正常还是通信故障。
监控后台可以检测其到系统控制器，以及到各电池管理控制器是通信正常还是通信故障。系统控制器可以检测其到监控后台，以及到各模块控制器是通信正常还是通信故障。模块控制器可以检测其到系统控制器，以及到对应的电池管理控制器是通信正常还是通信故障。电池管理控制器可以检测其到监控后台，以及到对应的模块控制器是通信正常还是通信故障。
上述检测通信正常还是通信故障，可以是向通信对象发送通信请求，如果发送成功，则确定通信正常；如果发送失败，则确定通信故障。
监控后台、模块控制器和电池管理控制可以向系统控制器发送检测结果。如果系统控制器成功接收到监控后台、模块控制器和电池管理控制器发送的检测结果，则根据接收到的检测结果确定从监控后台到系统控制器，以及从各电池管理控制器到监控后台、从各电池管理控制器经对应的模块控制器、系统控制器到监控后台的第一通信状态。
如果系统控制器未成功接收到监控后台、模块控制器和电池管理控制器中至少一个发送的检测结果，则根据未成功接收的情况确定从监控后台到系统控制器，以及从各电池管理控制器到监控后台、从各电池管理控制器经对应的模块控制器、系统控制器到监控后台的第一通信状态。
例如，系统控制器未接收到模块控制器直接发送的检测结果，但是，系统控制器接收到监控后台的检测结果，并通过监控后台接收到电池管理控制器的检测结果和模块控制器的检测结果，可以确定模块控制器到系统控制器通信故障。
在一些实施例中，在省略模块控制器的情况下，如果系统控制器成功接收到监控后台和电池管理控制器发送的检测结果，则根据接收到的检测结果确定从监控后台到系统控制器，以及从各电池管理控制器到监控后台、从各电池管理控制器经系统控制器到监控后台的第一通信状态。
需要说明的是，检测和确定通信状态的方式不限于上述示例，在实际应用中，还可以采用其他方式。
步骤202，若至少一个第一通信状态指示储能系统存在通信故障，则执行通信故障对应的处理动作。
其中，处理动作包括停运和维持当前状态。
多个第一通信状态中可能存在至少一种通信故障，比如，监控后台到系统控制器通信故障，至少一个电池管理控制器到监控后台通信故障，至少一个电池管理控制器到对应的模块控制器通信故障，至少一个模块控制器到系统控制器通信故障，系统控制器到监控后台通信故障，等等。需要说明的是，通信故障不限于上述情况，在实际应用中，还可能出现上述故障的组合情况，或者上述通信故障之外的情况。
系统控制器可以根据不同的通信故障，执行不同的处理动作。例如，根据其中一种通信故障向各模块控制器发送停运控制指令，各模块控制器接收到停运控制指令后，控制对应的储能子模块停运，则可以实现控制储能系统停运。或者，根据其中一种通信故障确定维持储能系统的当前状态，则不发送控制指令。
上述实施例中，获取储能系统中监控后台到系统控制器的第一通信状态，各电池管理控制器到监控后台的第一通信状态，以及各电池管理控制器经系统控制器到监控后台的第一通信状态；若至少一个第一通信状态指示储能系统存在通信故障，则执行通信故障对应的处理动作。本申请实施例的技术方案中，设置了电池管理控制器到监控后台以及电池管理控制器经系统控制器到监控后台两条通信路径，冗余设置的通信路径可以提高通信可靠性，降低信息丢失风险；并且，如果出现通信故障，也可以根据通信故障采取停运或维持当前状态等处理动作，从而提高储能系统的可靠性和稳定性。
根据本申请的一些实施例，上述实施例中的步骤“若至少一个第一通信状态指示储能系统存在通信故障，则执行通信故障对应的处理动作”，可以包括：在监控后台到系统控制器的第一通信状态为通信正常的情况下，若任一电池管理控制器到监控后台的第一通信状态为通信故障，且任一电池管理控制器到对应的模块控制器、任一模块控制器到系统控制器、系统控制器到监控后台的第一通信状态中至少一个为通信故障，则控制储能系统停运。
系统控制器可以根据多个第一通信状态，确定监控后台到系统控制器是通信正常还是通信故障。在确定监控后台到系统控制器通信正常的情况下，确定电池管理控制器到监控后台是通信正常还是通信故障，以及电池管理控制器经对应的模块控制器、系统控制器到监控后台是通信正常还是通信故障。
如果电池管理控制器到监控后台通信故障，并且，电池管理控制器到对应的模块控制器通信故障，则确定监控后台到系统控制器的下行通信路径正常，但是电池管理控制器到监控后台的两条上行通信路径异常。在这种情况下，系统控制器控制储能系统停运。
如果电池管理控制器到监控后台通信故障，并且，模块控制器到系统控制器通信故障，则确定监控后台到系统控制器的下行通信路径正常，但是电池管理控制器到监控后台的两条上行通信路径都异常。在这种情况下，系统控制器控制储能系统停运。
如果电池管理控制器到监控后台通信故障，并且，系统控制器到监控后台通信故障，则确定监控后台到系统控制器的下行通信路径正常，但是电池管理控制器到监控后台的两条上行通信路径都异常。在这种情况下，系统控制器控制储能系统停运。
上述实施例中，在监控后台到系统控制器的第一通信状态为通信正常的情况下，若任一电池管理控制器到监控后台的第一通信状态为通信故障，且任一电池管理控制器到对应的模块控制器、任一模块控制器到系统控制器、系统控制器到监控后台的第一通信状态中至少一个为通信故障，则控制储能系统停运。本申请实施例的技术方案中，在监控后台到系统控制器的下行通信路径正常，电池管理控制器到监控后台的两条上行通信路径都异常的情况下，停运储能系统，可以降低信息丢失带来的风险，有助于提高储能系统的稳定性和可靠性。
据本申请的一些实施例，上述实施例中的步骤“若至少一个第一通信状态指示储能系统存在通信故障，则执行通信故障对应的处理动作”，可以包括：在监控后台到系统控制器的第一通信状态为通信故障的情况下，若各电池管理控制器到监控后台的第一通信状态，和/或，各电池管理控制器经对应的模块控制器、系统控制器到监控后台的第一通信状态为通信正常，则维持储能系统的当前状态。
系统控制器可以根据多个第一通信状态，确定监控后台到系统控制器是通信正常还是通信故障。在确定监控后台到系统控制器通信故障的情况下，确定电池管理控制器到监控后台是通信正常还是通信故障，以及电池管理控制器经对应的模块控制器、系统控制器到监控后台是通信正常还是通信故障。
如果电池管理控制器到监控后台通信正常，并且，各电池管理控制器到对应的模块控制器通信正常，各模块控制器到系统控制器通信正常，系统控制器到监控后台通信正常，则确定电池管理控制器到监控后台的两条上行通信路径均正常，但是监控后台到系统控制器的下行通信路径异常。在这种情况下，可能因监控后台到系统控制器通信故障导致数据同步延迟、数据丢失或数据错误，进而导致电池管理控制器存储的数据与监控后台或系统控制器存储的数据不一致，致使储能系统出现错误的处理动作或其他潜在问题，所以系统控制器关闭信息丢失保护功能，维持储能系统的当前状态。
上述实施例中，在监控后台到系统控制器的第一通信状态为通信故障的情况下，若各电池管理控制器到监控后台的第一通信状态，和/或，各电池管理控制器经对应的模块控制器、系统控制器到监控后台的第一通信状态为通信正常，则维持储能系统的当前状态。本申请实施例的技术方案中，一方面可以减小储能系统出现错误的处理动作带来的风险，另一方面可以减少不必要的停运，有助于最大限度的减少系统停运时间，提高系统的可用性和运行效率。
根据本申请的一些实施例，参照图3，还可以包括如下步骤：
步骤301，若多个第一通信状态均为通信正常，则针对储能系统中的各储能子模块，获取电池管理控制器与各电池管理单元的第二通信状态。
如果监控后台到系统控制器通信正常，并且，各电池管理控制器到监控后台通信正常，各电池管理控制器到对应的模块控制器通信正常，各模块控制器到系统控制器通信正常，系统控制器到监控后台通信正常，也就是说，监控后台到系统控制器的下行通信路径正常，电池管理控制器到监控后台上传信息的两条通信路径都正常，则储能系统信息整体丢失的风险较小。在这种情况下，针对储能系统中各储能子模块检测是否有信息丢失的风险。
每个储能子模块包括多个电池单元，储能子模块对应电池管理控制器，各电池单元对应电池管理单元，电池管理控制器与多个电池管理单元通信连接。在检测各储能子模块是否有信息丢失风险时，可以先确定电池管理控制器与各电池管理单元之间的第二通信状态，即确定电池管理控制器与各电池管理单元是通信正常还是通信故障。
步骤302，对第二通信状态进行统计处理，得到通信故障数量。
针对各储能子模块，对电池管理控制器与每个电池管理单元的第二通信状态进行统计，得到各储能子模块对应的通信故障数量。
例如，一个电池管理控制器与三个电池管理单元通信连接，如果电池管理控制器与三个电池管理单元均通信正常，则确定通信故障数量为0；如果电池管理控制器与其中两个电池管理单元通信正常，与另一个电池管理单元通信故障，则确定通信故障数量为1。
之后，对储能系统中多个储能子模块对应的通信故障数量进行统计，得到总通信故障数量。
步骤303，根据通信故障数量执行对应的处理动作，其中，处理动作还包括输出预警信息。
在通信故障数量不同的情况下，采取不同的处理动作。例如，在通信故障数量为0的情况下，维持当前状态；在通信故障数量n大于a小于b的情况下，输出预警信息；在通信故障数量大于b的情况下，控制储能子模块或储能系统停运，其中，a小于b。
上述输出预警信息可以是点亮报警灯，也可以是输出声音预警。需要说明的是，预警信息的输出方式不限于上述示例，在实际应用中，还可以采用其他方式。
上述实施例中，若多个第一通信状态均为通信正常，则针对储能系统中的各储能子模块，获取电池管理控制器与各电池管理单元的第二通信状态；对第二通信状态进行统计处理，得到通信故障数量；根据通信故障数量执行对应的处理动作，其中，处理动作还包括输出预警信息。本申请实施例的技术方案中，在确定没有信息整体丢失风险的情况下，对储能子模块的信息丢失风险进行检测，可以有效防止由于单个或多个储能子模块信息丢失而导致的储能系统故障和停运，这有助于提高储能系统的可靠性和稳定性。
根据本申请的一些实施例，上述实施例中的步骤“根据通信故障数量执行对应的处理动作”，可以包括：若任一储能子模块对应的通信故障数量大于第一数量阈值，或多个储能子模块对应的总通信故障数量大于第二数量阈值，则控制储能系统停运。
在检测储能子模块是否存在信息丢失风险的过程中，如果确定一个或多个储能子模块对应的通信故障数量大于第一数量阈值，表明单个储能子模块中电池管理控制器与电池管理单元之间的通信故障较多，可能会影响储能系统整体的可靠性和稳定性，则控制储能系统停运。
或者，对多个储能子模块对应的通信故障数量进行求和计算，得到总通信故障数量。如果总通信故障数量大于第二数量阈值，表明储能系统中电池管理控制器与电池管理单元之间的通信故障较多，可能会影响储能系统整体的可靠性和稳定性，则控制储能系统停运。
其中，上述第一数量阈值与第二数量阈值可以根据实际情况设置，第二数量阈值可以等于第一数量阈值，也可以大于第一数量阈值。
上述实施例中，若任一储能子模块对应的通信故障数量大于第一数量阈值，或多个储能子模块对应的总通信故障数量大于第二数量阈值，则控制储能系统停运。本申请实施例的技术方案中，可以及时响应单个电柜信息丢失的情况，这有助于预防潜在的安全风险，比如单个或多个电柜的信息丢失导致的电气故障、过热等问题。
根据本申请的一些实施例，参照图4，上述实施例中的步骤“根据通信故障数量执行对应的处理动作”，可以包括：
步骤401，若各储能子模块对应的通信故障数量小于或等于第一数量阈值，则获取汇流开关的开关状态和各储能子模块的消防状态。
在检测储能子模块是否存在信息丢失风险的过程中，如果每个储能子模块对应的通信故障数量都小于或等于第一数量阈值，表明单个储能子模块中电池管理控制器与电池管理单元之间的通信故障数量在可接受范围内，则获取汇流开关的开关状态和各储能子模块的消防状态。
上述汇流开关的作用是控制储能系统与外部设备之间的通断，汇流开关在合位表明将储能系统与外部设备连接，汇流开关在分位表明断开储能系统与外部设备的连接。
上述消防状态表明储能子模块对应的消防模块是否启动，如果消防状态为启动，表明储能子模块对应的消防模块启动；如果消防状态为未启动，表明储能子模块对应的消防模块未启动。
步骤402，在开关状态为合位，或者消防状态为启动的情况下，控制储能系统停运。
如果汇流开关的开关状态为合位，表明在储能系统中存在一定数量通信故障的情况下，储能系统与外部设备是连接的，在这种情况下，容易影响储能系统的稳定性，进而影响外部设备的安全，因此，控制储能系统停运。可以理解地，停运可以防止在通信故障导致电柜信息丢失的情况下，电池继续提供电能，进而防止潜在的安全问题或不可预见的操作风险。
消防模块启动是指针对储能子模块中可能发生的火灾或热失控情况而采取的应急措施。如果至少一个储能子模块的消防状态为启动，表明可能存在电池过热、短路或其他危险情况。停运储能系统可以阻止电池组继续放电，以避免火灾蔓延或危险进一步恶化。
步骤403，在开关状态为分位，且消防状态为未启动的情况下，对存在通信故障的目标储能子模块进行荷电状态统计，得到最小荷电状态。
如果汇流开关的开关状态为分位，表明虽然储能系统中存在一定数量通信故障，但是未将储能系统与外部设备连接，在这种情况下，可以根据荷电状态的情况执行相应处理动作。因此，可以先对存在故障的目标储能子模块进行荷电状态统计，然后根据多个目标储能子模块的荷电状态，确定最小荷电状态。
例如，目标储能子模块1的荷电状态为SOC1，目标储能子模块2的荷电状态为SOC2，目标储能子模块3的荷电状态为SOC3，其中，SOC1最小，则确定最小荷电状态为SOC1。
步骤404，若最小荷电状态小于预设荷电阈值，则控制储能系统停运。
在得到最小荷电状态后，将最小荷电状态与预设荷电阈值进行比较，如果最小荷电状态大于或等于预设荷电阈值，表明即使最小荷电状态对应的目标储能子模块继续自放电，过放的风险也比较低，因此，可以维持储能系统的当前状态。
如果最小荷电状态小于预设荷电阈值，表明最小荷电状态对应的目标储能子模块继续自放电，过放的风险较高，甚至会出现损坏等其他安全问题，影响储能系统的可靠性，因此，控制储能系统停运。
上述实施例中，若各储能子模块对应的通信故障数量小于或等于第一数量阈值，则获取汇流开关的开关状态和各储能子模块的消防状态；在开关状态为合位，或者消防状态为启动的情况下，控制储能系统停运；在开关状态为分位，且消防状态为未启动的情况下，对存在通信故障的目标储能子模块进行荷电状态统计，得到最小荷电状态；若最小荷电状态小于预设荷电阈值，则控制储能系统停运。本申请实施例的技术方案中，可以根据不同情况合理地判断是否停运储能系统，这有助于最大限度地减少系统停运时间，提高系统的可用性和运行效率。
根据本申请的一些实施例，上述实施例中的步骤“对存在通信故障的目标储能子模块进行荷电状态统计，得到最小荷电状态”，可以包括：对于目标储能子模块，若电池管理控制器与目标储能子模块中的第一电池管理单元通信故障，则对第一电池管理单元对应的电池单元进行荷电状态统计，并将统计出的第一荷电状态确定为最小荷电状态。
对于每个存在通信故障的目标储能子模块，如果电池管理控制器与其中一个电池管理单元通信故障，与其他电池管理单元都通信正常，则对这个通信故障的电池管理单元对应的电池单元进行荷电状态统计，并将统计出的第一荷电状态确定为最小荷电状态。
以电池单元为电柜，储能子模块包括三个电柜为例，如果电池管理控制器与电柜1对应的电池管理单元通信故障，则计算电柜1的荷电状态，并将电柜1的荷电状态确定为最小荷电状态。
在一些实施例中，确定最小荷电状态后，存储最小荷电状态和通信故障的发生时间。
上述实施例中，对于目标储能子模块，若电池管理控制器与目标储能子模块中的第一电池管理单元通信故障，则对第一电池管理单元对应的电池单元进行荷电状态统计，并将统计出的第一荷电状态确定为最小荷电状态。本申请实施例的技术方案中，统计出最小荷电状态，可以根据最小荷电状态采取相应措施，降低过放风险，以及减少过放带来的其他问题。
在上述实施例的基础上，参照图5，本申请实施例还可以包括如下步骤：
步骤501，对于目标储能子模块，若电池管理控制器与储能子模块中除第一电池管理单元之外的第二电池管理单元通信故障，则对第二电池管理单元对应的电池单元进行荷电状态统计，得到第二荷电状态。
在实际应用中，可以按照预设周期进行荷电状态统计，如果出现电池管理控制器与储能子模块中除第一电池管理单元之外的第二电池管理单元通信故障，则对第二电池管理单元对应的电池单元进行荷电状态统计，得到第二荷电状态。
以电池单元为电柜，储能子模块包括三个电柜为例，电池管理控制器与电柜1对应的电池管理单元通信故障，对电柜1的荷电状态进行荷电状态进行统计，得到第一荷电状态。后续按照预设周期进行荷电状态统计，发现电池管理控制器与电柜2对应的电池管理单元通信故障，则对电柜2的荷电状态进行统计，得到第二荷电状态。
上述预设周期可以使每小时、每天，可以根据实际情况设置。
步骤502，若第一荷电状态与第二荷电状态的差值大于预设差值，则将第二荷电状态更新为最小荷电状态。
如果第二荷电状态大于第一荷电状态，则确定第一荷电状态仍是最小荷电状态。
如果第二荷电状态小于第一荷电状态，则计算第一荷电状态与第二荷电状态的差值。如果该差值小于或等于预设差值，表明两个电柜的荷电状态差异较小，无需更新最小荷电状态。如果该差值大于预设差值，表明第二荷电状态与第一荷电状态相比更小，且差异较大。在这种情况下，采用第二荷电状态替换第一荷电状态作为最小荷电状态。
在一些实施例中，更新最小荷电状态后，存储更新后的最小荷电状态以及新通信故障的发生时间。
步骤503，若最小荷电状态大于或等于预设荷电阈值，则计算最小荷电状态对应的安全放电时长，并根据安全放电时长执行对应的处理动作。
如果最小荷电状态大于或等于预设荷电阈值，表明即使最小荷电状态对应的目标储能子模块继续自放电，过放的风险也比较低。在这种情况下，可以根据自放电量和最小荷电状态计算安全放电时长。例如，用最小荷电状态除以自放电量得到安全放电时长。
之后，可以根据已存储的通信故障的发生时间和安全放电时长，计算出截止放电时间。在截止放电时间之前，可以维持储能系统的当前状态；在到达截止放电时间时，可以输出预警信息，也可以控制储能系统停运。
上述实施例中，对于目标储能子模块，若电池管理控制器与储能子模块中除第一电池管理单元之外的第二电池管理单元通信故障，则对第二电池管理单元对应的电池单元进行荷电状态统计，得到第二荷电状态；若第一荷电状态与第二荷电状态的差值大于预设差值，则将第二荷电状态更新为最小荷电状态；若最小荷电状态大于或等于预设荷电阈值，则计算最小荷电状态对应的安全放电时长，并根据安全放电时长执行对应的处理动作。本申请实施例的技术方案中，可以及时发现新出现的通信故障，并根据新出现的通信故障进行最小荷电状态的更新，这样，可以使储能系统的控制更符合实际情况，从而提高储能系统的安全性。
根据本申请的一些实施例，参照图6，上述实施例中的步骤“根据安全放电时长执行对应的处理动作”，包括：
步骤601，在计算出安全放电时长后，获取已放电时长。
在计算出安全放电时长后，可以将通信故障的发生时间到当前时间的时长确定为已放电时长。
在一些实施例中，在对最小荷电状态进行更新后，需要根据更新后的最小荷电状态重新计算安全放电时长，并根据新通信故障的发生时间和当前时间重新确定已放电时长。
步骤602，若已放电时长大于安全放电时长，则控制储能系统停运。
如果已放电时长大于安全放电时长，表明可能已出现过放的问题，则控制储能系统停运。
在一些实施例中，考虑到时间(年月日)可能存在错误或者跳变的情况，还可以增加时间保护逻辑，防止因系统时间错误导致的储能系统停运。若检测到发控制器时间发生较大错误(如年月日跳变等)，则关闭因已放电时长超过安全放电时长而导致停运功能，不再计算安全放电时长，锁存系统时间错误前的时间，等待监控后台下发系统时间正常的信号后，重新开启停运功能。
上述实施例中，在计算出安全放电时长后，获取已放电时长；若已放电时长大于安全放电时长，则控制储能系统停运。本申请实施例的技术方案中，在超出安全放电时长后控制储能系统停运，有助于保障储能系统的安全运行，可以防止出现故障的储能子模块在放电过程中发生过热、过电压等问题，提高储能系统的安全性。
在上述实施例的基础上，参照图7，本申请实施例还可以包括如下步骤：
步骤701，根据安全放电时长确定预警时长。
在计算出安全放电时长后，可以按照预设比例和安全放电时长确定预警时长，也可以按照预留时长确定预警时长。例如，安全放电时长为30天，预设比例为90％，则确定预警时长为27天；或者，预留时长为1天，则确定预警时长为29天。
需要说明的是，预警时长的确定方式不限于上述示例，还可以采用其他方式确定。
步骤702，若已放电时长大于预警时长且小于安全放电时长，则输出预警信息。
如果已放电时长大于预警时长但小于安全放电时长，则输出预警信息。例如，已放电时长为28天，大于预警时长27天，但小于安全放电时长30天，则点亮报警灯。
上述实施例中，根据安全放电时长确定预警时长；若已放电时长大于预警时长且小于安全放电时长，则输出预警信息。本申请实施例的技术方案中，可以对储能系统进行预警，提醒相关操作人员关注，降低过放风险。
[根据细则91更正 14.07.2025]
根据本申请的一些实施例，提供了一种储能系统的保护方法，以应用于图1a中的系统控制器为例进行说明，该方法可以包括如下步骤：
步骤1，获取储能系统中监控后台到系统控制器的第一通信状态，各电池管理控制器到监控后台的第一通信状态，以及各电池管理控制器经对应的模块控制器、系统控制器到监控后台的第一通信状态。
步骤2，在监控后台到系统控制器的第一通信状态为通信正常的情况下，若任一电池管理控制器到监控后台的第一通信状态为通信故障，且任一电池管理控制器到对应的模块控制器、任一模块控制器到系统控制器、系统控制器到监控后台的第一通信状态中至少一个为通信故障，则控制储能系统停运。
步骤3，在监控后台到系统控制器的第一通信状态为通信故障的情况下，若各电池管理控制器到监控后台的第一通信状态，和/或，各电池管理控制器经对应的模块控制器、系统控制器到监控后台的第一通信状态为通信正常，则维持储能系统的当前状态。
步骤4，若多个第一通信状态均为通信正常，则针对储能系统中的各储能子模块，获取电池管理控制器与各电池管理单元的第二通信状态；对第二通信状态进行统计处理，得到通信故障数量。
步骤5，若任一储能子模块对应的通信故障数量大于第一数量阈值，或多个储能子模块对应的总通信故障数量大于第二数量阈值，则控制储能系统停运。
步骤6，若各储能子模块对应的通信故障数量小于或等于第一数量阈值，则获取汇流开关的开关状态和各储能子模块的消防状态。
步骤7，在开关状态为合位，或者消防状态为启动的情况下，控制储能系统停运。
步骤8，在开关状态为分位，且消防状态为未启动的情况下，对于存在通信故障的目标储能子模块，若电池管理控制器与目标储能子模块中的第一电池管理单元通信故障，则对第一电池管理单元对应的电池单元进行荷电状态统计，并将统计出的第一荷电状态确定为最小荷电状态；若电池管理控制器与储能子模块中除第一电池管理单元之外的第二电池管理单元通信故障，则对第二电池管理单元对应的电池单元进行荷电状态统计，得到第二荷电状态；若第一荷电状态与第二荷电状态的差值大于预设差值，则将第二荷电状态更新为最小荷电状态。
步骤9，若最小荷电状态小于预设荷电阈值，则控制储能系统停运。
步骤10，若最小荷电状态大于或等于预设荷电阈值，则计算最小荷电状态对应的安全放电时长。
步骤11，根据安全放电时长确定预警时长；若已放电时长大于预警时长且小于安全放电时长，则输出预警信息。
步骤12，若已放电时长大于安全放电时长，则控制储能系统停运。
上述实施例中，设置了电池管理控制器到监控后台以及电池管理控制器经对应的模块控制器、系统控制器到监控后台两条通信路径，冗余设置的通信路径可以提高通信可靠性，降低信息丢失风险；并且，不论是出现整体通信故障，还是单个储能子模块的通信故障，都可以根据通信故障采取停运或维持当前状态等处理动作，这样，可以最大限度地减少系统停运时间，提高储能系统的可用性和运行效率，并且，可以提高储能系统的可靠性和稳定性，预防潜在的安全风险。
应该理解的是，虽然上述流程图中的各个步骤按照箭头的指示依次显示，但是这些步骤并不是必然按照箭头指示的顺序依次执行。除非本文中有明确的说明，这些步骤的执行并没有严格的顺序限制，这些步骤可以以其它的顺序执行。而且，上述流程图中的至少一部分步骤可以包括多个步骤或者多个阶段，这些步骤或者阶段并不必然是在同一时刻执行完成，而是可以在不同的时刻执行，这些步骤或者阶段的执行顺序也不必然是依次进行，而是可以与其它步骤或者其它步骤中的步骤或者阶段的至少一部分轮流或者交替地执行。
基于同样的发明构思，本申请实施例还提供了一种用于实现上述所涉及的储能系统的保护方法的储能系统的保护装置。该装置所提供的解决问题的实现方案与上述方法中所记载的实现方案相似，故下面所提供的一个或多个储能系统的保护装置实施例中的具体限定可以参见上文中对于储能系统的保护方法的限定，在此不再赘述。
根据本申请的一些实施例，参照图8，提供了一种储能系统的保护装置，该装置包括：
第一状态获取模块801，用于获取储能系统中监控后台到系统控制器的第一通信状态，各电池管理控制器到监控后台的第一通信状态，以及各电池管理控制器经系统控制器到监控后台的第一通信状态；
第一保护模块802，用于若至少一个第一通信状态指示储能系统存在通信故障，则执行通信故障对应的处理动作；其中，处理动作包括停运和维持当前状态。
在一些实施例中，第一保护模块802，具体用于在监控后台到系统控制器的第一通信状态为通信正常的情况下，若任一电池管理控制器到监控后台的第一通信状态为通信故障，且任一电池管理控制器到对应的模块控制器、任一模块控制器到系统控制器、系统控制器到监控后台的第一通信状态中至少一个为通信故障，则控制储能系统停运。
在一些实施例中，第一保护模块802，具体用于在监控后台到系统控制器的第一通信状态为通信故障的情况下，若各电池管理控制器到监控后台的第一通信状态，和/或，各电池管理控制器经对应的模块控制器、系统控制器到监控后台的第一通信状态为通信正常，则维持储能系统的当前状态。
在一些实施例中，参照图9，该装置还包括：
第二状态获取模块803，用于若多个第一通信状态均为通信正常，则针对储能系统中的各储能子模块，获取电池管理控制器与各电池管理单元的第二通信状态；
数量统计模块804，用于对第二通信状态进行统计处理，得到通信故障数量；
第二保护模块805，用于根据通信故障数量执行对应的处理动作，其中，处理动作还包括输出预警信息。
在一些实施例中，第二保护模块805，具体用于若任一储能子模块对应的通信故障数量大于第一数量阈值，或多个储能子模块对应的总通信故障数量大于第二数量阈值，则控制储能系统停运。
在一些实施例中，第二保护模块805，具体用于若各储能子模块对应的通信故障数量小于或等于第一数量阈值，则获取汇流开关的开关状态和各储能子模块的消防状态；在开关状态为合位，或者消防状态为启动的情况下，控制储能系统停运。
在一些实施例中，第二保护模块805，还用于在开关状态为分位，且消防状态为未启动的情况下，对存在通信故障的目标储能子模块进行荷电状态统计，得到最小荷电状态；若最小荷电状态小于预设荷电阈值，则控制储能系统停运。
在一些实施例中，第二保护模块805，具体用于对于目标储能子模块，若电池管理控制器与目标储能子模块中的第一电池管理单元通信故障，则对第一电池管理单元对应的电池单元进行荷电状态统计，并将统计出的第一荷电状态确定为最小荷电状态。
在一些实施例中，第二保护模块805，具体用于对于目标储能子模块，若电池管理控制器与储能子模块中除第一电池管理单元之外的第二电池管理单元通信故障，则对第二电池管理单元对应的电池单元进行荷电状态统计，得到第二荷电状态；
若第一荷电状态与第二荷电状态的差值大于预设差值，则将第二荷电状态更新为最小荷电状态。
在一些实施例中，第二保护模块805，还用于若最小荷电状态大于或等于预设荷电阈值，则计算最小荷电状态对应的安全放电时长，并根据安全放电时长执行对应的处理动作。
在一些实施例中，第二保护模块805，还用于在计算出安全放电时长后，获取已放电时长；若已放电时长大于安全放电时长，则控制储能系统停运。
在一些实施例中，第二保护模块805，还用于根据安全放电时长确定预警时长；若已放电时长大于预警时长且小于安全放电时长，则输出预警信息。
上述储能系统的保护装置中的各个模块可全部或部分通过软件、硬件及其组合来实现。上述各模块可以硬件形式内嵌于或独立于电子设备中的处理器中，也可以以软件形式存储于电子设备中的存储器中，以便于处理器调用执行以上各个模块对应的操作。
根据本申请的一些实施例，提供了一种计算机设备，该计算机设备可以是储能系统中的系统控制器，其内部结构图可以如图10所示。该计算机设备包括处理器、存储器、输入/输出接口、通信接口、显示单元和输入装置。其中，处理器、存储器和输入/输出接口通过系统总线连接，通信接口、显示单元和输入装置通过输入/输出接口连接到系统总线。其中，该计算机设备的处理器用于提供计算和控制能力。该计算机设备的存储器包括非易失性存储介质和内存储器。该非易失性存储介质存储有操作系统和计算机程序。该内存储器为非易失性存储介质中的操作系统和计算机程序的运行提供环境。该计算机设备的输入/输出接口用于处理器与外部设备之间交换信息。该计算机设备的通信接口用于与外部的终端进行有线或无线方式的通信，无线方式可通过WIFI、移动蜂窝网络、NFC(近场通信)或其他技术实现。该计算机程序被处理器执行时以实现一种储能系统的保护方法。该计算机设备的显示单元用于形成视觉可见的画面，可以是显示屏、投影装置或虚拟现实成像装置。显示屏可以是液晶显示屏或者电子墨水显示屏，该计算机设备的输入装置可以是显示屏上覆盖的触摸层，也可以是计算机设备外壳上设置的按键、轨迹球或触控板，还可以是外接的键盘、触控板或鼠标等。
本领域技术人员可以理解，图10中示出的结构，仅仅是与本申请方案相关的部分结构的框图，并不构成对本申请方案所应用于其上的计算机设备的限定，具体的计算机设备可以包括比图中所示更多或更少的部件，或者组合某些部件，或者具有不同的部件布置。
根据本申请的一些实施例，还提供了一种包括指令的非临时性计算机可读存储介质，例如包括指令的存储器，上述指令可由电子设备的处理器执行以完成上述方法。例如，所述非临时性计算机可读存储介质可以是ROM、随机存取存储器(RAM)、CD-ROM、磁带、软盘和光数据存储设备等。
根据本申请的一些实施例，还提供了一种计算机程序产品，该计算机程序被处理器执行时，可以实现上述方法。该计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行这些计算机指令时，可以全部或部分地按照本申请实施例所述的流程或功能实现上述方法中的部分或者全部。
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分流程，是可以通过计算机程序来指令相关的硬件来完成，所述的计算机程序可存储于一非易失性计算机可读取存储介质中，该计算机程序在执行时，可包括如上述各方法的实施例的流程。其中，本申请所提供的各实施例中所使用的对存储器、数据库或其它介质的任何引用，均可包括非易失性和易失性存储器中的至少一种。非易失性存储器可包括只读存储器(Read-Only Memory，ROM)、磁带、软盘、闪存、光存储器、高密度嵌入式非易失性存储器、阻变存储器(ReRAM)、磁变存储器(Magnetoresistive Random Access Memory，MRAM)、铁电存储器(Ferroelectric Random Access Memory，FRAM)、相变存储器(Phase Change Memory，PCM)、石墨烯存储器等。易失性存储器可包括随机存取存储器(Random Access Memory，RAM)或外部高速缓冲存储器等。作为说明而非局限，RAM可以是多种形式，比如静态随机存取存储器(Static Random Access Memory，SRAM)或动态随机存取存储器(Dynamic Random Access Memory，DRAM)等。本申请所提供的各实施例中所涉及的数据库可包括关系型数据库和非关系型数据库中至少一种。非关系型数据库可包括基于区块链的分布式数据库等，不限于此。本申请所提供的各实施例中所涉及的处理器可为通用处理器、中央处理器、图形处理器、数字信号处理器、可编程逻辑器、基于量子计算的数据处理逻辑器等，不限于此。
以上所述实施例的各技术特征可以进行任意的组合，为使描述简洁，未对上述实施例中的各个技术特征所有可能的组合都进行描述，然而，只要这些技术特征的组合不存在矛盾，都应当认为是本说明书记载的范围。
以上所述实施例仅表达了本申请的几种实施方式，便于具体和详细地理解本申请的技术方案，但并不能因此而理解为对发明专利保护范围的限制。应当指出的是，对于本领域的普通技术人员来说，在不脱离本申请构思的前提下，还可以做出若干变形和改进，这些都属于本申请的保护范围。应当理解，本领域技术人员在本申请提供的技术方案的基础上，通过合乎逻辑的分析、推理或者有限的试验得到的技术方案，均在本申请所述附权利要求的保护范围内。因此，本申请专利的保护范围应以所附权利要求的内容为准，说明书及附图可以用于解释权利要求的内容。

Claims (17)

  1. 一种储能系统的保护方法，其中，所述方法包括：
    获取储能系统中监控后台到系统控制器的第一通信状态，各电池管理控制器到所述监控后台的第一通信状态，以及各所述电池管理控制器经所述系统控制器到所述监控后台的第一通信状态；
    若至少一个所述第一通信状态指示所述储能系统存在通信故障，则执行所述通信故障对应的处理动作；其中，所述处理动作包括停运和维持当前状态。
  2. 根据权利要求1所述的方法，其中，所述若至少一个所述第一通信状态指示所述储能系统存在通信故障，则执行所述通信故障对应的处理动作，包括：
    在所述监控后台到所述系统控制器的第一通信状态为通信正常的情况下，若任一所述电池管理控制器到所述监控后台的第一通信状态为通信故障，且任一所述电池管理控制器到对应的模块控制器、任一所述模块控制器到所述系统控制器、所述系统控制器到所述监控后台的第一通信状态中至少一个为通信故障，则控制所述储能系统停运。
  3. 根据权利要求1所述的方法，其中，所述若至少一个所述第一通信状态指示所述储能系统存在通信故障，执行所述通信故障对应的处理动作，包括：
    在所述监控后台到所述系统控制器的第一通信状态为通信故障的情况下，若各所述电池管理控制器到所述监控后台的第一通信状态，和/或，各所述电池管理控制器经对应的模块控制器、所述系统控制器到所述监控后台的第一通信状态为通信正常，则维持所述储能系统的当前状态。
  4. 根据权利要求1-3任一项所述的方法，其中，所述方法还包括：
    若多个所述第一通信状态均为通信正常，则针对所述储能系统中的各储能子模块，获取所述电池管理控制器与各电池管理单元的第二通信状态；
    对所述第二通信状态进行统计处理，得到通信故障数量；
    根据所述通信故障数量执行对应的处理动作，其中，所述处理动作还包括输出预警信息。
  5. 根据权利要求4所述的方法，其中，所述根据所述通信故障数量执行对应的处理动作，包括：
    若任一所述储能子模块对应的通信故障数量大于第一数量阈值，或多个所述储能子模块对应的总通信故障数量大于第二数量阈值，则控制所述储能系统停运。
  6. 根据权利要求5所述的方法，其中，所述根据所述通信故障数量执行对应的处理动作，包括：
    若各所述储能子模块对应的通信故障数量小于或等于所述第一数量阈值，则获取汇流开关的开关状态和各所述储能子模块的消防状态；
    在所述开关状态为合位，或者所述消防状态为启动的情况下，控制所述储能系统停运。
  7. 根据权利要求6所述的方法，其中，所述方法还包括：
    在所述开关状态为分位，且所述消防状态为未启动的情况下，对存在通信故障的目标储能子模块进行荷电状态统计，得到最小荷电状态；
    若所述最小荷电状态小于预设荷电阈值，则控制所述储能系统停运。
  8. 根据权利要求7所述的方法，其中，所述对存在通信故障的目标储能子模块进行荷电状态统计，得到最小荷电状态，包括：
    对于所述目标储能子模块，若所述电池管理控制器与所述目标储能子模块中的第一电池管理单元通信故障，则对所述第一电池管理单元对应的电池单元进行荷电状态统计，并将统计出的第一荷电状态确定为所述最小荷电状态。
  9. 根据权利要求8所述的方法，其中，所述方法还包括：
    对于所述目标储能子模块，若所述电池管理控制器与所述储能子模块中除所述第一电池管理单元之外的第二电池管理单元通信故障，则对所述第二电池管理单元对应的电池单元进行荷电状态统计，得到第二荷电状态；
    若所述第一荷电状态与所述第二荷电状态的差值大于预设差值，则将所述第二荷电状态更新为所述最小荷电状态。
  10. 根据权利要求7所述的方法，其中，所述方法还包括：
    若所述最小荷电状态大于或等于所述预设荷电阈值，则计算所述最小荷电状态对应的安全放电时长，并根据所述安全放电时长执行对应的处理动作。
  11. 根据权利要求10所述的方法，其中，所述根据所述安全放电时长执行对应的处理动作，包括：
    在计算出所述安全放电时长后，获取已放电时长；
    若所述已放电时长大于所述安全放电时长，则控制所述储能系统停运。
  12. 根据权利要求11所述的方法，其中，所述方法还包括：
    根据所述安全放电时长确定预警时长；
    若所述已放电时长大于所述预警时长且小于所述安全放电时长，则输出预警信息。
  13. 一种储能系统的保护装置，其中，所述装置包括：
    第一状态获取模块，用于获取储能系统中监控后台到系统控制器的第一通信状态，各电池管理控制器到所述监控后台的第一通信状态，以及各所述电池管理控制器经所述系统控制器到所述监控后台的第一通信状态；
    第一保护模块，用于若至少一个所述第一通信状态指示所述储能系统存在通信故障，则执行所述通信故障对应的处理动作；其中，所述处理动作包括停运和维持当前状态。
  14. 一种储能系统，其中，所述储能系统包括监控后台、系统控制器、多个储能子模块、与各所述储能子模块对应的电池管理控制器和模块控制器，所述电池管理控制器和所述模块控制器一一对应通信连接；所述监控后台分别与所述系统控制器和各所述电池管理控制器通信连接，所述系统控制器还分别与各所述模块控制器通信连接；
    所述电池管理控制器，用于获取对应的储能子模块的状态信息；
    所述模块控制器，用于控制对应的储能子模块；
    所述监控后台，用于进行状态监控；
    所述系统控制器，用于执行权利要求1至12中任一项所述的方法。
  15. 一种计算机设备，包括存储器和处理器，所述存储器存储有计算机程序，其中，所述处理器执行所述计算机程序时实现权利要求1至12中任一项所述的方法。
  16. 一种计算机可读存储介质，其上存储有计算机程序，其中，所述计算机程序被处理器执行时实现权利要求1至12中任一项所述的方法。
  17. 一种计算机程序产品，包括计算机程序，其中，该计算机程序被处理器执行时实现权利要求1至12中任一项所述的方法。
PCT/CN2025/100705 2024-06-12 2025-06-12 储能系统的保护方法、装置、储能系统、设备和存储介质 Pending WO2025256595A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202410758384.7A CN121124261A (zh) 2024-06-12 2024-06-12 储能系统的保护方法、装置、储能系统、设备和存储介质
CN202410758384.7 2024-06-12

Publications (1)

Publication Number Publication Date
WO2025256595A1 true WO2025256595A1 (zh) 2025-12-18

Family

ID=97948802

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2025/100705 Pending WO2025256595A1 (zh) 2024-06-12 2025-06-12 储能系统的保护方法、装置、储能系统、设备和存储介质

Country Status (2)

Country Link
CN (1) CN121124261A (zh)
WO (1) WO2025256595A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP4712305A1 (en) * 2024-08-19 2026-03-18 Schneider Electric IT Corporation Remote battery management

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN121863637A (zh) * 2026-03-10 2026-04-14 宁德时代润智软件科技有限公司 储能装置的状态显示控制方法、装置、控制器、系统、介质及产品

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20210015503A (ko) * 2019-08-02 2021-02-10 현진이앤에스 주식회사 에너지저장시스템의 배터리 다중 보호 방법
CN115173514A (zh) * 2022-07-19 2022-10-11 武汉船舶通信研究所（中国船舶重工集团公司第七二二研究所） 一种储能电池管理系统、方法及应用
CN116505111A (zh) * 2023-06-14 2023-07-28 中国长江三峡集团有限公司 储能系统
CN116614327A (zh) * 2023-05-17 2023-08-18 深蓝汽车科技有限公司 一种电池管理系统控制方法、装置、电子设备及存储介质
CN117459368A (zh) * 2022-07-19 2024-01-26 阿特斯储能科技有限公司 用于储能系统的控制方法
CN117991711A (zh) * 2024-04-07 2024-05-07 西安为光能源科技有限公司 一种储能系统中心管理系统、方法及储能系统

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20210015503A (ko) * 2019-08-02 2021-02-10 현진이앤에스 주식회사 에너지저장시스템의 배터리 다중 보호 방법
CN115173514A (zh) * 2022-07-19 2022-10-11 武汉船舶通信研究所（中国船舶重工集团公司第七二二研究所） 一种储能电池管理系统、方法及应用
CN117459368A (zh) * 2022-07-19 2024-01-26 阿特斯储能科技有限公司 用于储能系统的控制方法
CN116614327A (zh) * 2023-05-17 2023-08-18 深蓝汽车科技有限公司 一种电池管理系统控制方法、装置、电子设备及存储介质
CN116505111A (zh) * 2023-06-14 2023-07-28 中国长江三峡集团有限公司 储能系统
CN117991711A (zh) * 2024-04-07 2024-05-07 西安为光能源科技有限公司 一种储能系统中心管理系统、方法及储能系统

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP4712305A1 (en) * 2024-08-19 2026-03-18 Schneider Electric IT Corporation Remote battery management

Also Published As

Publication number Publication date
CN121124261A (zh) 2025-12-12

Similar Documents

Publication Publication Date Title
CN121124261A (zh) 储能系统的保护方法、装置、储能系统、设备和存储介质
US10054646B2 (en) High reliability power supply configuration and testing
WO2025025727A1 (zh) 储能电池管理系统仿真测试方法及仿真测试平台
WO2024124973A1 (zh) 故障处理系统、方法、通信设备和计算机存储介质
CN107153591B (zh) 一种存储器供电架构的检测方法及装置
US20250237690A1 (en) Insulation state detection method, system, and apparatus, storage medium, and program product
WO2024183555A1 (zh) 储能设备故障排除方法、装置、计算机设备、介质和系统
CN115173514B (zh) 一种储能电池管理系统、方法及应用
CN118448764A (zh) 电池管理系统消防监控方法、装置、电子设备及存储介质
JP4556946B2 (ja) 潮流計算方法及びその装置
CN115842316A (zh) 储能设备运行控制方法、装置、系统及储能设备
CN117613819B (zh) 基于可编程控制器的抽水蓄能发变机组的程序跳闸方法
CN114461491B (zh) 核蒸汽供应系统功能检测方法、装置、计算机设备和介质
CN116260209A (zh) Soc显示方法、可插拔式电源系统、设备和存储介质
CN207301792U (zh) 一种直流控制系统和稳控系统之间的接口测试系统
CN105811505A (zh) 具有保护预警功能的电池及具有该电池的电子设备
CN120749728B (zh) 供电异常处理方法、装置、储能系统、控制器及存储介质
CN115858222B (zh) 一种虚拟机故障处理方法、系统及电子设备
CN120262695B (zh) 环网柜控制方法、装置、设备及存储介质
CN119009219B (zh) 消防防护系统及其控制方法
WO2026065701A1 (zh) 用于储能系统的消防控制方法、存储介质及消防控制系统
JP2025536671A (ja) エネルギー貯蔵システム及びエネルギー貯蔵システムの制御方法
EP4585944A1 (en) Apparatus and method for diagnosing battery state
CN117674027B (zh) 抽水蓄能电站发变组保护方法、系统和装置
KR20250161857A (ko) 배터리 시스템 제어 장치 및 방법

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 25821300

Country of ref document: EP

Kind code of ref document: A1