Method and Device for Monitoring a Pressure Container System

Abstract

A device for monitoring the use of a pressure container system of a piece of equipment, such as a motor vehicle, is designed to ascertain equipment-side usage data relating to previous use of the pressure container system. The device is additionally designed to compare the equipment-side usage data with equipment-external usage data relating to the previous use of the pressure container system and to initiate one or more measures relating to further use of the pressure container system on the basis of the comparison.

Claims

1-15. (canceled)

16. A device for monitoring the use of a pressure container system of an equipment, wherein the device is configured to: determine equipment-side usage data in relation to previous use of the pressure container system; compare the equipment-side usage data with equipment-external usage data in relation to the previous use of the pressure container system, wherein the equipment-side usage data and the equipment-external usage data indicate: a maximum pressure, a minimum pressure and/or a maximum pressure gradient caused during the previous use of the pressure container system; and/or a maximum and/or minimum temperature occurring during the previous use of the pressure container system; and initiate one or more measures in relation to further use of the pressure container system depending on the comparison.

17. The device according to claim 16, wherein the device is configured to: initiate the one or more measures in relation to the further use of the pressure container system if the comparison shows that the previous use of the pressure container system indicated by the equipment-side usage data deviates from the previous use of the pressure container system indicated by the equipment-external usage data.

18. The device according to claim 16, wherein the device is configured to: determine on the basis of the comparison of the equipment-side usage data with the equipment-external usage data whether the equipment-side usage data have been changed and/or manipulated; and initiate the one or more measures relating to the further use of the pressure container system if it is determined that the equipment-side usage data have been changed and/or manipulated.

19. The device according to claim 16, wherein the one or more measures in relation to the further use of the pressure container system include: blocking and/or preventing the further use of the pressure container system; issuing a notice to a maintenance service and/or to an official body and/or to a user of the equipment indicating that, prior to the further use of the pressure container system, a review of the previous use of the pressure container system and/or maintenance of the pressure container system is required; and/or locating the pressure container system to allow a review of the previous use of the pressure container system and/or maintenance of the pressure container system.

20. The device according to claim 16, wherein the device is configured to: determine on the basis of the equipment-side usage data and/or on the basis of the equipment-external usage data whether nominal use of the pressure container system has been reached or exceeded by the previous use of the pressure container system; and initiate the one or more measures relating to the continued use of the pressure container system if it is determined that the previous use of the pressure container system has reached or exceeded the nominal use of the pressure container system.

21. The device according to claim 20, wherein the nominal use includes: a nominal number of usage cycles of the pressure container system; a nominal service life of the pressure container system; a nominal pressure and/or a nominal pressure gradient during the use of the pressure container system; and/or a nominal temperature during the use of the pressure container system.

22. The device according to claim 16, wherein the equipment-side usage data and/or the equipment-external usage data indicate: a total number to date of cycles of use of the pressure container system; and/or a previous service life of the pressure container system.

23. The device according to claim 16, wherein the device is configured to: obtain the equipment-external usage data from an external unit arranged outside the equipment; and/or store the data on an external unit arranged outside the equipment.

24. The device according to claim 16, wherein the equipment-external usage data are protected from manipulation and/or modification by one or more security methods.

25. The device according to claim 16, wherein the device is configured to: obtain the equipment-side usage data from a memory unit of the equipment; and/or store the data in a memory unit of the equipment.

26. The device according to claim 16, wherein the pressure container system is designed to be used during operation of the equipment, and wherein the device is configured to: determine operating data relating to the operation of the equipment; and compare the equipment-side usage data and/or the equipment-external usage data with the operating data in order to check whether the equipment-side usage data and/or the equipment-external usage data have been manipulated and/or changed.

27. The device according to claim 26, wherein the operating data indicate: an operating power of the equipment; or an operating time of the equipment.

28. The device according to claim 16, wherein the device is configured to: determine current data in relation to a current use of the pressure container system on the basis of sensor data from one or more sensors of the pressure container system; and send the current data to an external unit outside the equipment to enable the external unit to update the equipment-external usage data; and/or update the equipment-side usage data on the basis of the current data.

29. The device according to claim 16, wherein the pressure container system comprises one or more pressure containers for storing a fuel, or the equipment comprises an energy converter which is set up to generate electrical energy for the operation of the equipment from fuel from the pressure container system, and/or the equipment is a motor vehicle.

30. A method for monitoring the use of a pressure container system of an equipment, the method comprising: determining equipment-side usage data in relation to previous use of the pressure container system; comparing the equipment-side usage data with equipment-external usage data in relation to the previous use of the pressure container system, wherein the equipment-side usage data and the equipment-external usage data indicate: a maximum pressure, a minimum pressure and/or a maximum pressure gradient caused during the previous use of the pressure container system; and/or a maximum and/or minimum temperature occurring during the previous use of the pressure container system; and initiating one or more measures in relation to further use of the pressure container system depending on the comparison.

31. The method according to claim 30, wherein the one or more measures are initiated if the comparison shows that the previous use of the pressure container system indicated by the equipment-side usage data deviates from the previous use of the pressure container system indicated by the equipment-external usage data.

32. The method according to claim 30, further comprising: determining, based on the comparison of the equipment-side usage data with the equipment-external usage data, whether the equipment-side usage data have been changed and/or manipulated; and initiating the one or more measures relating to the further use of the pressure container system if it is determined that the equipment-side usage data have been changed and/or manipulated.

33. The method according to claim 30, wherein initiating the one or more measures in relation to the further use of the pressure container system comprises: blocking and/or preventing the further use of the pressure container system; issuing a notice to a maintenance service and/or to an official body and/or to a user of the equipment indicating that, prior to the further use of the pressure container system, a review of the previous use of the pressure container system and/or maintenance of the pressure container system is required; and/or locating the pressure container system to allow a review of the previous use of the pressure container system and/or maintenance of the pressure container system.

34. The method according to claim 30, further comprising: determining, based on the equipment-side usage data and/or on the equipment-external usage data, whether nominal use of the pressure container system has been reached or exceeded by the previous use of the pressure container system; and initiating the one or more measures relating to the further use of the pressure container system if it is determined that the nominal use of the pressure container system has been reached or exceed by the previous use of the pressure container system.

35. The method according to claim 34, wherein the nominal use includes: a nominal number of usage cycles of the pressure container system; a nominal service life of the pressure container system; a nominal pressure and/or a nominal pressure gradient during the use of the pressure container system; and/or a nominal temperature during the use of the pressure container system.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0037] The invention is described in more detail below on the basis of exemplary embodiments. In the figures

[0038] FIG. 1 shows an exemplary pressure container system;

[0039] FIG. 2 shows an exemplary system for monitoring a pressure container system of a vehicle; and

[0040] FIG. 3 shows a flowchart of an exemplary method for monitoring a pressure container system.

DETAILED DESCRIPTION OF THE DRAWINGS

[0041] As explained at the beginning, this document deals with the reliable and safe monitoring of the use of a pressure container system. In this context, FIG. 1 shows an exemplary pressure container system 100 with a pressure container 110, which can be used to produce fuel (in particular hydrogen, or H.sub.2) for an energy converter (for example for a fuel cell or for a fuel cell stack) 101. The pressure container 110 is connected to the energy converter 101 via a line 112. The pressure container 110 may have an opening at an end piece 111 through which the fuel from the pressure container 110 can be passed (for example via a valve 115 to the line 112). The pressure container 110 can be refueled with fuel via a refueling access 102.

[0042] The pressure container system 100 is typically designed for a specific nominal usage. The nominal usage can be defined here: [0043] a certain nominal number of cycles (i.e. cycles with one refueling phase and one fuel withdrawal phase each) of the pressure container 110 of the pressure container system 100; [0044] a certain minimum or maximum nominal pressure of the fuel in the pressure container 110, which the pressure should not fall below or exceed; [0045] a certain minimum or maximum nominal temperature of the fuel in the pressure container 110, which the temperature should not fall below or exceed; and/or [0046] a certain nominal service life of one or more components, in particular the pressure container 110, the pressure container system 100, which should not be exceeded.

[0047] FIG. 2 shows an exemplary system 200, which has at least one vehicle 210 with a pressure container system 100. The vehicle 210 comprises a monitoring device 212 which is equipped to determine and/or monitor the actual and/or previous use of the pressure container system 100. The pressure container system 100 may, for example, as shown in FIG. 1, comprise at least one pressure sensor 114, which is, for example, set up to acquire sensor data in relation to the internal pressure in the pressure container 110 and/or in relation to the pressure in the line 112. The monitoring device 212 may be set up to determine the number of cycles of the pressure container 110 on the basis of the sensor data of the pressure sensor 114.

[0048] In particular, the monitoring device 212 may be set up to determine usage data 215 in relation to the actual use of the pressure container system 100 (for example, on the basis of the sensor data of one or more sensors 114 of the pressure container system 100). The usage data can indicate, for example, [0049] the actual number of cycles of the pressure container 110; [0050] the actual maximum pressure to which the pressure container 110 was exposed; [0051] the actual minimum pressure to which the pressure container 110 was exposed; [0052] the actual maximum temperature to which the pressure container 110 was exposed; [0053] the actual minimum temperature to which the pressure container 110 was exposed; and/or [0054] the previous service life of one or more components, in particular of the pressure container 110, of the pressure container system 100.

[0055] The usage data 215 in relation to the actual (cumulative) use of the pressure container system 100 may be stored in a memory unit 211 of the vehicle 200.

[0056] The monitoring device 212 may be set up to determine, on the basis of the usage data 215, whether the nominal use of the pressure container system 100 has been reached or exceeded. Furthermore, the monitoring device 212 may be set up to initiate one or more protective or safety measures if it is determined that the nominal use of the pressure container system 100 has been reached or exceeded. Exemplary measures are: [0057] blocking the use and/or operation of the pressure container system 100; or [0058] issuing a notice to a user of the pressure container system 100 (for example via a user interface 214 of the vehicle 210).

[0059] The pressure container system 100 can then be checked by a (certified) maintenance service and replaced if appropriate. Following the maintenance, the pressure container system 100 can then be unblocked.

[0060] The local monitoring of the use of a pressure container system 100 in a vehicle 210 carries the risk that the locally stored usage data 215 may be manipulated to avoid blocking the pressure container system 100. This can lead to an increased risk of the selection of the pressure container system 100 and the vehicle 210.

[0061] The vehicle 210 may have a communication unit 213 which is designed to establish a (possibly wireless) communication link 202 to a vehicle-external unit 201 (for example to a backend server or to an external database). The monitoring device 212 of the vehicle 210 may be set up to send data 204 in relation to the actual use of the pressure container system 100 via the communication link 202 to the external unit 201. If necessary, the usage data 215 can be sent to the external unit 201.

[0062] The external unit 201 may be set up to determine and store external usage data 215 in relation to the actual use of the pressure container system 100 on the basis of the provided data in relation to the actual use of the pressure container system 100. The external usage data 215 can correspond to the (local) usage data 205 stored in the memory unit 211 of the vehicle 100 (as long as no manipulation of the local usage data 205 has taken place).

[0063] The external unit 201 may be designed to protect the external usage data 215 from unauthorized access and/or manipulation. This can be achieved, for example, by using a blockchain-based database.

[0064] The monitoring device 212 of the vehicle 210 may be set up to compare the external usage data 205 with the local usage data 215 in the context of the monitoring of the pressure container system 100. In particular, it can be checked whether the external usage data 205 differ from the local usage data 215 or not. If a deviation of the external usage data 205 from the local usage data 215 is detected, a protection and/or safety measure may be initiated, in particular if the external usage data 205 indicate that the nominal use of the pressure container system 100 has been reached or exceeded.

[0065] Alternatively or in addition to the comparison of the local usage data 205 with the external usage data 215, the monitoring device 212 may be set up to check the plausibility of the local usage data 205, in particular on the basis of the sensor data of one or more vehicle sensors 216. Exemplary information items that can be used to check the plausibility of the local usage data 205 are:

[0066] The distance travelled by the vehicle 210, in particular the mileage of the odometer of the vehicle 210. The distance travelled can be compared, for example, with the number of cycles of the pressure container system 100 indicated by the local usage data 215. An insufficient number of cycles compared to the distance travelled may indicate a manipulation of the local usage data 215.

[0067] The time between two consecutive cycles of the pressure container 110, and/or the time interval between two refueling operations.

[0068] By taking into account additional information to check the plausibility of the local usage data 215, the reliability of the use of the pressure container system 100 can be further increased.

[0069] In other words, a control unit 212 is described which is designed to check whether a design parameter (i.e., a nominal use) of a relevant component 110, 112 of the pressure container system 100 has been exceeded or not. If an exceedance is detected, blocking and/or decommissioning of the system 100 can be initiated. The block can be maintained until the relevant component 110, 112 of the system 100 has been tested and replaced, if appropriate.

[0070] To ensure that the history of a component 110, 112 of the system 100 is not manipulated or that a block of the system 100 is not lifted without a service measure, a comparison is carried out with usage data 205 from a security-related database 201, for example from a blockchain-based database. In this way, it can be prevented that a blocked component 110, 112 of the pressure container system 100 is put back into operation by manipulation. Thus a database 201 (if appropriate, a blockchain-based database) can be used to monitor the refueling cycle counter for the pressure container 110 of a pressure container system 100.

[0071] In the context of the comparison the following may be carried out: [0072] a comparison of the stored periods of use and the date of the system time of the vehicle 210; [0073] a notification and counting of each cycle of the pressure container system 100 and a comparison of the counter states in the vehicle 210 or in the database 201; [0074] a notification and, if appropriate, counting of exceedances of design-relevant physical state variables, such as temperature, pressure, density, mass flow and/or pressure gradient.

[0075] Possible measures in the event of a detected exceedance of one or more design values and/or in the event of a suspicion of manipulation are: [0076] blocking the system 100; [0077] issuing a notification to the owner and/or proprietor of the system 100; [0078] locating the system 100; [0079] issuing a message to a maintenance service for the maintenance of the system 100; or [0080] issuing a notification to an official body and/or to the police.

[0081] Alternatively or in addition, the database 201 can be used to detect whether the recording of the relevant events by the system 100 has been manipulated. For example, an implausible use of the system 100, such as an unusually long time without a recorded refueling cycle, may possibly cause a notification and/or a check of the situation by comparing it with one or more other system usage data items.

[0082] FIG. 3 shows a flow diagram of an exemplary (possibly computer-implemented) method 300 for monitoring the use of a pressure container system 100 of an equipment 210, in particular a motor vehicle.

[0083] The method 300 includes the determination 301 of equipment-side usage data 215 in relation to the previous use of the pressure container system 100. The equipment-side usage data 215 can be stored locally in a memory unit 211 of the equipment 210. The equipment-side usage data 215 can describe in a cumulative manner the previous use of the pressure container system 100 (since commissioning).

[0084] Furthermore, the method 300 includes the comparison of 302 of the equipment-side usage data 215 with equipment-external usage data 205 in relation to the previous use of the pressure container system 100. The equipment-external usage data 205 may be stored on an external unit 201 (in particular on a database) outside the equipment 210. The equipment-external usage data 205 can describe in a cumulative manner the previous use of the pressure container system 100 (since commissioning).

[0085] Normally, the equipment-side usage data 215 should indicate or have the same information with regard to the previous use of the pressure container system 100 as the equipment-external usage data 205. However, due to a manipulation of the equipment-side usage data 215, there may be a deviation between the equipment-side usage data 215 and the equipment-external usage data 205.

[0086] The method 300 also includes effecting 303 one or more measures in relation to the continued use of the pressure container system 100 depending on the comparison. The one or more measures can be effected in particular if the comparison results in a deviation between the equipment-side usage data 215 and the equipment-external usage data 205. As a measure, for example, the further use of the pressure container system 100 can then be blocked or prevented. This enables reliable monitoring of the use of the pressure container system 100.

[0087] The present disclosure is not limited to the exemplary embodiments indicated. In particular, it should be noted that the description and the figures are intended only to illustrate the principle of the proposed methods, devices and systems.

REFERENCE CHARACTER LIST

[0088] 100 pressure container arrangement [0089] 101 energy converter [0090] 102 refueling access [0091] 110 pressure container [0092] 111 end piece [0093] 112 line [0094] 114 pressure sensor [0095] 115 valve [0096] 200 system for monitoring a pressure container system [0097] 201 external unit (database) [0098] 202 communication connection [0099] 204 data relating to the use of the pressure container system [0100] 205 external usage data [0101] 210 motor vehicle [0102] 211 memory unit [0103] 212 monitoring device [0104] 213 communication unit [0105] 214 user interface [0106] 215 local usage data [0107] 216 vehicle sensor [0108] 300 method for monitoring a pressure container system [0109] 301-303 steps of the method