Security concept for integrating a battery into an inverter

• US 9,866,023 B2
• Filed: 06/09/2015
• Issued: 01/09/2018
• Est. Priority Date: 12/10/2012
• Status: Active Grant

• Current Assignee: SMA Solar Technology AG
• Original Assignee: SMA Solar Technology AG
• Inventors: Ellerkamp, Florian, Bukvic-Schaefer, Aleksandra-Sasa, Rigbers, Klaus, Allert, Claus
• Primary Examiner(s): Fureman, Jared
• Assistant Examiner(s): Pacheco, Rafael
• Application Number:
  US14/734,354
• Publication Number:
  US 20150288185A1
• Time in Patent Office: 945 Days
• CPC Class Codes: H02J 13/00016 using a wired telecommunication network or a data transmission bus
• CPC Class Codes: H02J 2300/20 The dispersed energy generation being of renewable origin
• CPC Class Codes: H02J 2300/24 of photovoltaic origin
• CPC Class Codes: H02J 3/06 Controlling transfer of power between connected networks; Controlling sharing of load between connected networks
• CPC Class Codes: H02J 3/32 using batteries with converting means
• CPC Class Codes: H02J 3/381 Dispersed generators
• CPC Class Codes: H02J 3/46 Controlling of the sharing of output between the generators, converters, or transformers
• CPC Class Codes: H02J 7/35 with light sensitive cells
• CPC Class Codes: Y02E 10/56 Power conversion systems, e.g. maximum power point trackers
• CPC Class Codes: Y02E 40/70 Smart grids as climate change mitigation technology in the energy generation sector
• CPC Class Codes: Y02E 60/00 Enabling technologies; Technologies with a potential or indirect contribution to GHG emissions mitigation
• CPC Class Codes: Y02E 70/30 Systems combining energy storage with energy generation of non-fossil origin
• CPC Class Codes: Y04S 10/123 the energy generation units being or involving renewable energy sources
• CPC Class Codes: Y04S 10/14 Energy storage units
• CPC Class Codes: Y04S 40/124 using wired telecommunication networks or data transmission busses

Abstract

An inverter apparatus includes an input stage receiving DC electric power from a DC power generator for loading a DC voltage link, a DC/AC converter connected to the DC voltage link and feeding AC electric power into a power grid. The apparatus further includes a bidirectional connection for loading a battery out of the DC voltage link and for loading the DC voltage link out of the battery, and a controller operating the DC/AC converter and the bidirectional connection. The controller receives present values of relevant parameters of the battery including working data at least related to a state of charge and safety data indicating a safety state of the battery from a battery monitoring unit. The controller, in operating the bidirectional connection, considers the working data and is commanded by the safety data.

Claims

1. An inverter apparatus comprising:

a DC voltage link,

an input stage coupled to the DC voltage link and configured to receive DC electric power from a DC power generator for loading the DC voltage link,

a DC/AC converter coupled to the DC voltage link and configured to feed AC electric power into a power grid,

a bidirectional connection configured to couple a battery to the DC voltage link (6), to load the battery out of the DC voltage link in a first direction, and to load the DC voltage link out of the battery in a second, opposite direction, and

a controller configured to operate the DC/AC converter and, dependent on present values of relevant parameters of the battery, to selectively operate the bidirectional connection in the first direction or the second direction,

wherein the controller is coupled to an interface configured to receive the present values of the relevant parameters of the battery from a battery monitoring unit associated with the battery,

wherein the relevant parameters of the battery issued by the battery monitoring unit and received by the interface include working data related to at least a state of charge of the battery and safety data indicating a safety state of the battery,

wherein the controller is configured to consider the working data in operating the bidirectional connection,

wherein the controller is configured to be commanded by the safety data (20) in operating the bidirectional connection,

wherein the interface comprises separate interface units configured to receive the working data and the safety data, respectively, and

wherein the controller is configured to receive the safety data as a safety signal that indicates a safety of the battery only when a signal level of the safety signal is within a predetermined safety level range and/or when a signal repetition frequency of the safety signal is within a predetermined safety frequency range.

2. The inverter apparatus of claim 1, wherein the interface units for the working data and the safety data are different.

3. The inverter apparatus of claim 1, wherein the interface unit for the working data comprises a CAN-bus interface unit and/or wherein the interface unit for the safety data is configured to receive a hardware signal.

4. The inverter apparatus of claim 1, wherein the controller is configured to transmit, via the interface, the safety signal to the battery monitoring unit.

5. The inverter apparatus of claim 4, wherein the controller is configured to transmit the safety signal at a signal level outside the predetermined safety level range and/or at a signal repetition frequency outside the predetermined safety frequency range.

6. The inverter apparatus of claim 1, wherein the controller comprises different controller units for processing the working data and the safety data.

7. The inverter apparatus of claim 6, wherein the controller unit for the working data comprises a freely programmable controller unit and that the controller unit for the safety data comprises a fixedly programmed controller unit.

8. The inverter apparatus of claim 7, wherein the controller unit for the working data comprises a digital signal processor (DSP) and that the controller unit for the safety data comprises a field programmable gate array (FPGA).

9. The inverter apparatus of claim 1, wherein the working data comprises battery and battery monitoring unit identification data at least during start-up of the battery monitoring unit or when requested by the controller.

10. The inverter apparatus of claim 9, wherein the battery and battery monitoring unit identification data include battery monitoring unit software version information.

11. The inverter apparatus of claim 9, wherein the controller only operates the bidirectional connection for loading the battery out of the DC voltage link or for loading the DC voltage link out of the battery, if the battery and battery monitoring unit identification data indicate compatibility of the battery and the battery monitoring unit with the inverter apparatus.

12. The inverter apparatus of claim 1, wherein the bidirectional connection comprises a bidirectional DC/DC converter operated by the controller.

13. The inverter apparatus of claim 1, wherein the bidirectional connection comprises at least one electrical cut-off switch and at least one mechanical cut-off switch operated by the controller.

14. The inverter apparatus of claim 13, wherein the at least one mechanical cut-off switch operated by the controller comprises an AC print relay.

15. The inverter apparatus of claim 1, wherein the battery is arranged within a housing enclosing the inverter apparatus.

16. The inverter apparatus of claim 15, wherein the battery is part of an interchangeable battery module including the battery monitoring unit.

17. A method of operating an inverter apparatus that comprises:

a DC voltage link,

an input stage coupled to the DC voltage link,

a DC/AC converter coupled to the DC voltage link, and

a bidirectional connection coupled to the DC voltage link,

the method comprising;

connecting a DC power generator to the input stage and loading the DC voltage link with DC electric power received from the DC power generator;

operating the DC/AC converter to feed AC electric power into a power grid;

connecting a battery to the DC voltage link via the bidirectional connection; and

dependent on present values of relevant parameters of the battery, operating the bidirectional connection to load the battery out of the DC voltage link, or to load the DC voltage link out of the battery;

receiving the present values of the relevant parameters of the battery from a battery monitoring unit associated with the battery, wherein the received relevant parameters of the battery include working data related to at least a state of charge of the battery and safety data indicating a safety state of the battery;

considering the working data in operating the bidirectional connection;

following commands by the safety data in operating the bidirectional connection;

receiving the working data and the safety data via separate interface units; and

receiving the safety data as a safety signal that indicates safety of the battery only when a signal level of the safety signal is within a predetermined safety level range and/or when a signal repetition frequency of the safety signal is within a predetermined safety frequency range.

18. The method of claim 17, wherein the working data and the safety data are received via different interface units.

19. The method of claim 17, further comprising transmitting the safety signal to the battery monitoring unit.

20. The method of claim 19, wherein transmitting the safety signal is performed at a signal level outside the predetermined safety level range and/or at a signal repetition frequency outside the predetermined safety frequency range.

21. The method of claim 17, wherein the working data and the safety data are processed in different controller units.

22. The method of claim 17, wherein the bidirectional connection is only operated for loading the battery out of the DC voltage link or for loading the DC voltage link out of the battery, if battery and battery monitoring unit identification data included in that the working data indicate compatibility of the battery and the battery monitoring unit.