SAFETY MANAGEMENT OF A PROPULSION SYSTEM WITH A FUEL CELL

Abstract

A safety management system for an aircraft, or a propulsion system thereof including a fuel cell assembly and a combustion engine, may include various sensors and controllers configured to execute a safety action. At least one sensor is configured to detect at least one operating parameter of the propulsion system, and a controller is configured to determine that the at least one operating parameter has achieved a safety threshold and to execute a safety action when the at least one operating parameter has achieved the safety threshold. The safety action is configured to control operation of the fuel cell assembly and to control operation of the combustion engine.

Description

FIELD

The present disclosure relates to a safety management system of a propulsion system including a fuel cell and a method of operating the same.

BACKGROUND

A gas turbine engine generally includes a turbomachine and a rotor assembly. Gas turbine engines, such as turbofan engines, may be used for aircraft propulsion. In the case of a turbofan engine, the turbomachine includes a compressor section, a combustion section, and a turbine section in serial flow order, and the rotor assembly is configured as a fan assembly.

During operation, air is compressed in the compressor and mixed with fuel and ignited in the combustion section for generating combustion gases which flow downstream through the turbine section. The turbine section extracts energy therefrom for rotating the compressor section and fan assembly to power the gas turbine engine and propel an aircraft incorporating such a gas turbine engine in flight.

Fuel and combustion gases can present safety concerns in the combustion section when damage or unintended operation events occur. For example, mechanical failure or leakage can lead to unsafe levels of hazardous gases or unintended combustion. Safe detection and management of such combustor section events must be provided.

BRIEF DESCRIPTION OF THE DRAWINGS

A full and enabling disclosure of the present disclosure, including the best mode thereof, directed to one of ordinary skill in the art, is set forth in the specification, which makes reference to the appended figures, in which:

FIG. 1 is a cross-sectional view of a gas turbine engine in accordance with an exemplary aspect of the present disclosure.

FIG. 2 is a perspective view of an integrated fuel cell and combustor assembly in accordance with the present disclosure.

FIG. 3 is a schematic, axial view of the exemplary integrated fuel cell and combustor assembly of FIG. 2.

FIG. 4 is a schematic view of a fuel cell of a fuel cell assembly in accordance with an exemplary aspect of the present disclosure as may be incorporated into the exemplary integrated fuel cell and combustor assembly of FIG. 2.

FIG. 5 is a schematic diagram of a gas turbine engine including an integrated fuel cell and combustor assembly in accordance with an exemplary aspect of the present disclosure.

FIG. 6 is a schematic view of a vehicle and propulsion system in accordance with an exemplary aspect of the present disclosure.

FIG. 7 is a schematic diagram of a safety management system for a gas turbine engine in accordance with an exemplary aspect of the present disclosure.

FIG. 8 is a flow diagram of a method of operation of a safety management system for a gas turbine engine in accordance with an exemplary aspect of the present disclosure.

FIG. 9 is a flow diagram of a method of operation of a safety management system for a gas turbine engine in accordance with another exemplary aspect of the present disclosure.

DETAILED DESCRIPTION

Reference will now be made in detail to present embodiments of the disclosure, one or more examples of which are illustrated in the accompanying drawings. The detailed description uses numerical and letter designations to refer to features in the drawings. Like or similar designations in the drawings and description have been used to refer to like or similar parts of the disclosure.

The word “exemplary” is used herein to mean “serving as an example, instance, or illustration.” Any implementation described herein as “exemplary” is not necessarily to be construed as preferred or advantageous over other implementations. Additionally, unless specifically identified otherwise, all embodiments described herein should be considered exemplary.

For purposes of the description hereinafter, the terms “upper”, “lower”, “right”, “left”, “vertical”, “horizontal”, “top”, “bottom”, “lateral”, “longitudinal”, and derivatives thereof shall relate to the embodiments as they are oriented in the drawing figures. However, it is to be understood that the embodiments may assume various alternative variations, except where expressly specified to the contrary. It is also to be understood that the specific devices illustrated in the attached drawings, and described in the following specification, are simply exemplary embodiments of the disclosure. Hence, specific dimensions and other physical characteristics related to the embodiments disclosed herein are not to be considered as limiting.

As used herein, the terms “first”, “second”, and “third” may be used interchangeably to distinguish one component from another and are not intended to signify location or importance of the individual components.

The terms “forward” and “aft” refer to relative positions within a gas turbine engine or vehicle, and refer to the normal operational attitude of the gas turbine engine or vehicle. For example, with regard to a gas turbine engine, forward refers to a position closer to an engine inlet and aft refers to a position closer to an engine nozzle or exhaust.

The terms “upstream” and “downstream” refer to the relative direction with respect to fluid flow in a fluid pathway. For example, “upstream” refers to the direction from which the fluid flows, and “downstream” refers to the direction to which the fluid flows.

The terms “coupled,” “fixed,” “attached to,” and the like refer to both direct coupling, fixing, or attaching, as well as indirect coupling, fixing, or attaching through one or more intermediate components or features, unless otherwise specified herein.

The singular forms “a”, “an”, and “the” include plural references unless the context clearly dictates otherwise.

The term “at least one of” in the context of, e.g., “at least one of A, B, and C” or “at least one of A, B, or C” refers to only A, only B, only C, or any combination of A, B, and C.

Approximating language, as used herein throughout the specification and claims, is applied to modify any quantitative representation that could permissibly vary without resulting in a change in the basic function to which it is related. Accordingly, a value modified by a term or terms, such as “about”, “approximately”, and “substantially”, are not to be limited to the precise value specified. In at least some instances, the approximating language may correspond to the precision of an instrument for measuring the value, or the precision of the methods or machines for constructing or manufacturing the components and/or systems. For example, the approximating language may refer to being within a 1, 2, 4, 10, 15, or 20 percent margin. These approximating margins may apply to a single value, either or both endpoints defining numerical ranges, and/or the margin for ranges between endpoints.

Here and throughout the specification and claims, range limitations are combined and interchanged, such ranges are identified and include all the sub-ranges contained therein unless context or language indicates otherwise. For example, all ranges disclosed herein are inclusive of the endpoints, and the endpoints are independently combinable with each other.

A “third stream” as used herein means a non-primary air stream capable of increasing fluid energy to produce a minority of total propulsion system thrust. A pressure ratio of the third stream may be higher than that of the primary propulsion stream (e.g., a bypass or propeller driven propulsion stream). The thrust may be produced through a dedicated nozzle or through mixing of an airflow through the third stream with a primary propulsion stream or a core air stream, e.g., into a common nozzle.

In certain exemplary embodiments an operating temperature of the airflow through the third stream may be less than a maximum compressor discharge temperature for the engine, and more specifically may be less than 350 degrees Fahrenheit (such as less than 300 degrees Fahrenheit, such as less than 250 degrees Fahrenheit, such as less than 200 degrees Fahrenheit, and at least as great as an ambient temperature). In certain exemplary embodiments these operating temperatures may facilitate heat transfer to or from the airflow through the third stream and a separate fluid stream. Further, in certain exemplary embodiments, the airflow through the third stream may contribute less than 50% of the total engine thrust (and at least, e.g., 2% of the total engine thrust) at a takeoff condition, or more particularly while operating at a rated takeoff power at sea level, static flight speed, 86 degree Fahrenheit ambient temperature operating conditions.

Furthermore in certain exemplary embodiments, aspects of the airflow through the third stream (e.g., airstream, mixing, or exhaust properties), and thereby the aforementioned exemplary percent contribution to total thrust, may passively adjust during engine operation or be modified purposefully through use of engine control features (such as fuel flow, electric machine power, variable stators, variable inlet guide vanes, valves, variable exhaust geometry, or fluidic features) to adjust or optimize overall system performance across a broad range of potential operating conditions.

The term “turbomachine” or “turbomachinery” refers to a machine including one or more compressors, a heat generating section (e.g., a combustion section), and one or more turbines that together generate a torque output.

The term “combustion engine” refers to turbomachinery components used in generation of a torque output through forces imparted by combustion reactions. The combustion engine may be described independently of other propulsion or power generation components such as electrical or fuel cell components.

The term “gas turbine engine” refers to an engine having a turbomachine as all or a portion of its power source. Example gas turbine engines include turbofan engines, turboprop engines, turbojet engines, turboshaft engines, etc., as well as hybrid-electric versions of one or more of these engines.

The terms “low” and “high”, or their respective comparative degrees (e.g., -er, where applicable), when used with a compressor, a turbine, a shaft, or spool components, etc. each refer to relative speeds within an engine unless otherwise specified. For example, a “low turbine” or “low speed turbine” defines a component configured to operate at a rotational speed, such as a maximum allowable rotational speed, lower than a “high turbine” or “high speed turbine” at the engine.

A system and method are provided for operating a propulsion system for an aircraft. The propulsion system includes a fuel cell assembly comprising a fuel cell, the fuel cell defining an outlet positioned to remove output products from the fuel cell. The propulsion system further includes a combustion engine, such as a turbomachine, the turbomachine including a combustion section configured to receive a flow of aviation fuel from an aircraft fuel supply of the aircraft and further configured to receive the output products from the fuel cell. The system and method are generally configured to determine if at least one operating parameter has achieved a safety threshold and execute a safety action when the at least one operating parameter has achieved the safety threshold. The safety threshold may be indicative of one or more safety hazards to the propulsion system, including fire, mechanical damage, or hazardous gas leakage. Following determination that the safety threshold has been achieved, the safety action is configured to control operation of the fuel cell assembly and operation of the combustion engine to ensure safe handling of possible hazards.

A system and method of the present disclosure may generally result in a safe operation in emergency conditions by leveraging operational effects of a fuel cell assembly integrated into the combustor assembly. Controlling each of the combustion engine and the fuel cell assembly provides for effective management of such emergency conditions. For example, one of the combustion engine and the fuel cell assembly can be operated at increased load to account for a safety-necessitated reduction or shutdown of the other. This control can provide redundancy and safe continued operation in emergency events.

As will be discussed in more detail below, fuel cells are electro-chemical devices which can convert chemical energy from a fuel into electrical energy through an electro-chemical reaction of the fuel, such as hydrogen, with an oxidizer, such as oxygen contained in the atmospheric air. Fuel cell systems may advantageously be utilized as an energy supply system because fuel cell systems may be considered environmentally superior and highly efficient when compared to at least certain existing systems. To improve system efficiency and fuel utilization and reduce external water usage, the fuel cell system may include an anode recirculation loop. As a single fuel cell can only generate about 1V voltage, a plurality of fuel cells may be stacked together (which may be referred to as a fuel cell stack) to generate a desired voltage. Fuel cells may include Solid Oxide Fuel Cells (SOFC), Molten Carbonate Fuel Cells (MCFC), Phosphoric Acid Fuel Cells (PAFC), and Proton Exchange Membrane Fuel Cells (PEMFC), all generally named after their respective electrolytes.

Referring now to the drawings, wherein identical numerals indicate the same elements throughout the figures, FIG. 1 provides a schematic, cross-sectional view of an engine in accordance with an exemplary embodiment of the present disclosure. The engine may be incorporated into a vehicle. For example, the engine may be an aeronautical engine incorporated into an aircraft. Alternatively, however, the engine may be any other suitable type of engine for any other suitable vehicle.

For the embodiment depicted, the engine is configured as a high bypass turbofan engine 100. As shown in FIG. 1, the turbofan engine 100 defines an axial direction A (extending parallel to a centerline axis 101 provided for reference), a radial direction R, and a circumferential direction (extending about the axial direction A; not depicted in FIG. 1). In general, the turbofan engine 100 includes a fan section 102 and a turbomachine 104 disposed downstream from the fan section 102.

The exemplary turbomachine 104 depicted generally includes a substantially tubular outer casing 106 that defines an annular inlet 108. The outer casing 106 encases, in serial flow relationship, a compressor section including a booster or low pressure (LP) compressor 110 and a high pressure (HP) compressor 112; a combustion section 114; a turbine section including a high pressure (HP) turbine 116 and a low pressure (LP) turbine 118; and a jet exhaust nozzle section 120. The compressor section, combustion section 114, and turbine section together define at least in part a core air flowpath 121 extending from the annular inlet 108 to the jet nozzle exhaust section 120. The turbofan engine further includes one or more drive shafts. More specifically, the turbofan engine includes a high pressure (HP) shaft or spool 122 drivingly connecting the HP turbine 116 to the HP compressor 112, and a low pressure (LP) shaft or spool 124 drivingly connecting the LP turbine 118 to the LP compressor 110.

For the embodiment depicted, the fan section 102 includes a fan 126 having a plurality of fan blades 128 coupled to a disk 130 in a spaced apart manner. The plurality of fan blades 128 and disk 130 are together rotatable about the centerline axis 101 by the LP shaft 124. The disk 130 is covered by a rotatable front hub 132 aerodynamically contoured to promote an airflow through the plurality of fan blades 128. Further, an annular fan casing or outer nacelle 134 is provided, circumferentially surrounding the fan 126 and/or at least a portion of the turbomachine 104. The nacelle 134 is supported relative to the turbomachine 104 by a plurality of circumferentially-spaced outlet guide vanes 136. A downstream section 138 of the nacelle 134 extends over an outer portion of the turbomachine 104 so as to define a bypass airflow passage 140 therebetween.

In such a manner, it will be appreciated that turbofan engine 100 generally includes a first stream (e.g., core air flowpath 121) and a second stream (e.g., bypass airflow passage 140) extending parallel to the first stream. In certain exemplary embodiments, the turbofan engine 100 may further define a third stream extending, e.g., from the LP compressor 110 to the bypass airflow passage 140 or to ambient. With such a configuration, the LP compressor 110 may generally include a first compressor stage configured as a ducted mid-fan and downstream compressor stages. An inlet to the third stream may be positioned between the first compressor stage and the downstream compressor stages.

Referring still to FIG. 1, the turbofan engine 100 additionally includes an accessory gearbox 142 and a fuel delivery system 146. For the embodiment shown, the accessory gearbox 142 is located within the cowling/outer casing 106 of the turbomachine 104. Additionally, it will be appreciated that for the embodiment depicted schematically in FIG. 1, the accessory gearbox 142 is mechanically coupled to, and rotatable with, one or more shafts or spools of the turbomachine 104. For example, in the exemplary embodiment depicted, the accessory gearbox 142 is mechanically coupled to, and rotatable with, the HP shaft 122 through a suitable geartrain 144. The accessory gearbox 142 may provide power to one or more suitable accessory systems of the turbofan engine 100 during at least certain operations, and may further provide power back to the turbofan engine 100 during other operations. For example, the accessory gearbox 142 is, for the embodiment depicted, coupled to a starter motor/generator 152. The starter motor/generator may be configured to extract power from the accessory gearbox 142 and turbofan engine 100 during certain operation to generate electrical power, and may provide power back to the accessory gearbox 142 and turbofan engine 100 (e.g., to the HP shaft 122) during other operations to add mechanical work back to the turbofan engine 100 (e.g., for starting the turbofan engine 100).

Moreover, the fuel delivery system 146 generally includes a fuel source 148, such as a fuel tank, and one or more fuel delivery lines 150. The one or more fuel delivery lines 150 provide a fuel flow through the fuel delivery system 146 to the combustion section 114 of the turbomachine 104 of the turbofan engine 100. As will be discussed in more detail below, the combustion section 114 includes an integrated fuel cell and combustor assembly 200. The one or more fuel delivery lines 150, for the embodiment depicted, provide a flow of fuel to the integrated fuel cell and combustor assembly 200.

It will be appreciated, however, that the exemplary turbofan engine 100 depicted in FIG. 1 is provided by way of example only. In other exemplary embodiments, any other suitable gas turbine engine may be utilized with aspects of the present disclosure. For example, in other embodiments, the turbofan engine may be any other suitable gas turbine engine, such as a turboshaft engine, turboprop engine, turbojet engine, etc. In such a manner, it will further be appreciated that in other embodiments the gas turbine engine may have any other suitable configuration, such as any other suitable number or arrangement of shafts, compressors, turbines, fans, etc. Further, although the exemplary gas turbine engine depicted in FIG. 1 is shown schematically as a direct drive, fixed-pitch turbofan engine, in other embodiments, a gas turbine engine of the present disclosure may be a geared gas turbine engine (i.e., including a gearbox between the fan 126 and a shaft driving the fan, such as the LP shaft 124), may be a variable pitch gas turbine engine (i.e., including a fan 126 having a plurality of fan blades 128 rotatable about their respective pitch axes), etc. Moreover, although the exemplary turbofan engine 100 includes a ducted fan 126, in other exemplary aspects, the turbofan engine 100 may include an unducted fan 126 (or open rotor fan), without the nacelle 134. Further, although not depicted herein, in other embodiments the gas turbine engine may be any other suitable type of gas turbine engine, such as a nautical gas turbine engine.

Referring now to FIG. 2, illustrated schematically is a portion of the combustion section 114 including a portion of the integrated fuel cell and combustor assembly 200 used in the gas turbine engine 100 of FIG. 1 (described as a turbofan engine 100 above with respect to FIG. 1), according to an embodiment of the present disclosure.

As will be appreciated, the combustion section 114 includes a compressor diffuser nozzle 202 and extends between an upstream end and a downstream end generally along the axial direction A. The combustion section 114 is fluidly coupled to the compressor section at the upstream end via the compressor diffuser nozzle 202 and to the turbine section at the downstream end.

The integrated fuel cell and combustor assembly 200 generally includes a fuel cell assembly 204 (only partially depicted in FIG. 2; see also FIGS. 3 through 5) and a combustor 206. The combustor 206 includes an inner liner 208, an outer liner 210, a dome assembly 212, a cowl assembly 214, a swirler assembly 216, and a fuel flowline 218. The combustion section 114 generally includes an outer casing 220 outward of the combustor 206 along the radial direction R to enclose the combustor 206 and an inner casing 222 inward of the combustor 206 along the radial direction R. The inner casing 222 and inner liner 208 define an inner passageway 224 therebetween, and the outer casing 220 and outer liner 210 define an outer passageway 226 therebetween. The inner casing 222, the outer casing 220, and the dome assembly 212 together define at least in part a combustion chamber 228 of the combustor 206. As will be described in greater detail below, a purge gas inlet 225 may be provided for the inner passageway 224.

The dome assembly 212 is disposed proximate the upstream end of the combustion section 114 (i.e., closer to the upstream end than the downstream end) and includes an opening (not labeled) for receiving and holding the swirler assembly 216. The swirler assembly 216 also includes an opening for receiving and holding the fuel flowline 218. The fuel flowline 218 is further coupled to the fuel source 148 (see FIG. 1) disposed outside the outer casing 220 along the radial direction R and configured to receive the fuel from the fuel source 148. In such a manner, the fuel flowline 218 may be fluidly coupled to the one or more fuel delivery lines 150 described above with reference to FIG. 1.

The swirler assembly 216 can include a plurality of swirlers (not shown) configured to swirl the compressed fluid before injecting it into the combustion chamber 228 to generate combustion gas. The cowl assembly 214, in the embodiment depicted, is configured to hold the inner liner 208, the outer liner 210, the swirler assembly 216, and the dome assembly 212 together.

During operation, the compressor diffuser nozzle 202 is configured to direct a compressed fluid 230 from the compressor section to the combustor 206, where the compressed fluid 230 is configured to be mixed with fuel within the swirler assembly 216 and combusted within the combustion chamber 228 to generate combustion gasses. The combustion gasses are provided to the turbine section to drive one or more turbines of the turbine section (e.g., the high pressure turbine 116 and low pressure turbine 118).

During operation of the gas turbine engine 100 including the integrated fuel cell and combustor assembly 200, a flame within the combustion chamber 228 is maintained by a continuous flow of fuel and air. In order to provide for an ignition of the fuel and air, e.g., during a startup of the gas turbine engine 100, the integrated fuel cell and combustor assembly 200 further includes an ignitor 231. The ignitor 231 may provide a spark or initial flame to ignite a fuel and air mixture within the combustion chamber 228. In certain exemplary embodiments, the integrated fuel cell and combustor assembly 200 may additionally include a dedicated fuel cell ignitor 233 (depicted in phantom). In particular, for the embodiment of FIG. 2, the dedicated fuel cell ignitor 233 is positioned downstream of at least a portion of a fuel cell, and in particular of a fuel cell stack (described below). In such a manner, the dedicated fuel cell ignitor 233 may more effectively combust output products of the fuel cell.

As mentioned above and depicted schematically in FIG. 2, the integrated fuel cell and combustor assembly 200 further includes the fuel cell assembly 204. The exemplary fuel cell assembly 204 depicted includes a first fuel cell stack 232 and a second fuel cell stack 234. More specifically, the first fuel cell stack 232 is configured with the outer liner 210 and the second fuel cell stack 234 is configured with the inner liner 208. More specifically, still, the first fuel cell stack 232 is integrated with the outer liner 210 and the second fuel cell stack 234 is integrated with the inner liner 208. Operation of the fuel cell assembly 204, and more specifically of a fuel cell stack (e.g., first fuel cell stack 232 or second fuel cell stack 234) of the fuel cell assembly 204 will be described in more detail below. Also as described in more detail below, the purge gas inlet 225 may be provided in fluid communication with one or more of the first fuel cell stack 232 and the second fuel cell stack 234, for example providing airflow directly to at least one of the first fuel cell stack 232 and the second fuel cell stack 234.

For the embodiment depicted, the fuel cell assembly 204 is configured as a solid oxide fuel cell (“SOFC”) assembly, with the first fuel cell stack 232 configured as a first SOFC fuel cell stack and the second fuel cell stack 234 configured as a second SOFC fuel cell stack (each having a plurality of SOFC's). As will be appreciated, a SOFC is generally an electrochemical conversion device that produces electricity directly from oxidizing a fuel. In general, fuel cell assemblies, and in particular fuel cells, are characterized by an electrolyte material utilized. The SOFC's of the present disclosure may generally include a solid oxide or ceramic electrolyte. This class of fuel cells generally exhibit high combined heat and power efficiency, long-term stability, fuel flexibility, and low emissions.

Moreover, the exemplary fuel cell assembly 204 further includes a first power converter 236 and a second power converter 238. The first fuel cell stack 232 is in electrical communication with the first power converter 236 by a first plurality of power supply cables (not labeled), and the second fuel cell stack 234 is in electrical communication with the second power converter 238 by a second plurality of power supply cables (not labeled).

The first power converter 236 controls the electrical current drawn from the corresponding first fuel cell stack 232 and may convert the electrical power from a direct current (“DC”) power to either DC power at another voltage level or alternating current (“AC”) power. Similarly, the second power converter 238 controls the electrical current drawn from the second fuel cell stack 234 and may convert the electrical power from a DC power to either DC power at another voltage level or AC power. The first power converter 236, the second power converter 238, or both may be electrically coupled to an electric bus (such as the electric bus 326 described below).

The integrated fuel cell and combustor assembly 200 further includes a fuel cell controller 240 that is in operable communication with both of the first power converter 236 and second power converter 238 to, e.g., send and receive communications and signals therebetween. For example, the fuel cell controller 240 may send current or power setpoint signals to the first power converter 236 and second power converter 238, and may receive, e.g., a voltage or current feedback signal from the first power converter 236 and second power converter 238. The fuel cell controller 240 may be configured in the same manner as the controller 240 described below with reference to FIG. 5.

It will be appreciated that in at least certain exemplary embodiments the first fuel cell stack 232, the second fuel cell stack 234, or both may extend substantially 360 degrees in a circumferential direction C of the gas turbine engine (i.e., a direction extending about the centerline axis 101 of the gas turbine engine 100). For example, referring now to FIG. 3, a simplified cross-sectional view of the integrated fuel cell and combustor assembly 200 is depicted according to an exemplary embodiment of the present disclosure. Although only the first fuel cell stack 232 is depicted in FIG. 3 for simplicity, the second fuel cell stack 234 may be configured in a similar manner.

As shown, the first fuel cell stack 232 extends around the combustion chamber 228 in the circumferential direction C, completely encircling the combustion chamber 228 around the centerline axis 101 in the embodiment shown. More specifically, the first fuel cell stack 232 includes a plurality of fuel cells 242 arranged along the circumferential direction C. The fuel cells 242 that are visible in FIG. 3 can be a single ring of fuel cells 242, with fuel cells 242 stacked together along the axial direction A (see FIG. 2) to form the first fuel cell stack 232. In another instance, multiple additional rings of fuel cells 242 can be placed on top of each other to form the first fuel cell stack 232 that is elongated along the centerline axis 101.

As will be explained in more detail, below, with reference to FIG. 5, the fuel cells 242 in the first fuel cell stack 232 are positioned to receive discharged air 244 from, e.g., the compressor section and fuel 246 from the fuel delivery system 146. The fuel cells 242 generate electrical current using this air 244 and at least some of this fuel 246, and radially direct partially oxidized fuel 246 and unused portion of air 248 into the combustion chamber 228 toward the centerline axis 101. The integrated fuel cell and combustor assembly 200 combusts the partially oxidized fuel 246 and air 248 in the combustion chamber 228 into combustion gasses that are directed downstream into the turbine section to drive or assist with driving the one or more turbines therein.

Moreover, referring now to FIG. 4, a schematic illustration is provided as a perspective view of the first fuel cell stack 232 of the integrated fuel cell and combustor assembly 200 of FIG. 2. The second fuel cell stack 234 may be formed in a similar manner.

The first fuel cell stack 232 depicted includes a housing 250 having a combustion outlet side 252 and a side 254 that is opposite to the combustion outlet side 252, a fuel and air inlet side 256 and a side 258 that is opposite to the fuel and air inlet side 256, and sides 260, 262. The side 260, the side 258 and the side 254 are not visible in the perspective view of FIG. 4.

As will be appreciated, the first fuel cell stack 232 may include a plurality of fuel cells that are “stacked,” e.g., side-by-side from one end of the first fuel cell stack 232 (e.g., fuel and air inlet side 256) to another end of the first fuel cell stack 232 (e.g., side 258). As such, it will further be appreciated that the combustion outlet side 252 includes a plurality of combustion outlets 264, each from a fuel cell of the first fuel cell stack 232. During operation, combustion gas 266 (also referred to herein as “output products”) is directed from the combustion outlets 264 out of the housing 250. As described herein, the combustion gas 266 is generated using fuel and air that is not consumed by the fuel cells inside the housing 250 of the first fuel cell stack 232. The combustion gas 266 is provided to the combustion chamber 228 and burned during operation to generate combustion gasses used to generate thrust for the gas turbine engine 100 (and vehicle/aircraft incorporating the gas turbine engine 100).

The fuel and air inlet side 256 includes one or more fuel inlets 268 and one or more air inlets 270. Optionally, one or more of the inlets 268, 270 can be on another side of the housing 250. Each of the one or more fuel inlets 268 is fluidly coupled with a source of fuel for the first fuel cell stack 232, such as one or more pressurized containers of a hydrogen-containing gas or a fuel processing unit as described further below. Each of the one or more air inlets 270 is fluidly coupled with a source of air for the fuel cells, such as air that is discharged from a compressor section and/or an air processing unit as is also described further below. The one or more inlets 268, 270 separately receive the fuel and air from the external sources of fuel and air, and separately direct the fuel and air into the fuel cells.

In certain exemplary embodiments, the first fuel cell stack 232 of FIGS. 2 through 4 may be configured in a similar manner to one or more of the exemplary fuel cell systems (labeled 100) described in, e.g., U.S. Patent Application Publication No. 2020/0194799 A1, filed Dec. 17, 2018, that is incorporated by reference herein in its entirety. It will further be appreciated that the second fuel cell stack 234 of FIG. 2, may be configured in a similar manner as the first fuel cell stack 232, or alternatively may be configured in any other suitable manner.

Referring now to FIG. 5, operation of an integrated fuel cell and combustor assembly 200 in accordance with an exemplary embodiment of the present disclosure will be described. More specifically, FIG. 5 provides a schematic illustration of a gas turbine engine 100 and an integrated fuel cell and combustor assembly 200 according to an embodiment of the present disclosure. The gas turbine engine 100 and integrated fuel cell and combustor assembly 200 may, in certain exemplary embodiments, be configured in a similar manner as one or more of the exemplary embodiments of FIGS. 1 through 4.

Accordingly, it will be appreciated that the gas turbine engine 100 generally includes a fan section 102 having a fan 126, an LP compressor 110, an HP compressor 112, a combustion section 114, an HP turbine 116, and an LP turbine 118. The combustion section 114 generally includes the integrated fuel cell and combustor assembly 200 having a combustor 206 and a fuel cell assembly 204.

A propulsion system including the gas turbine engine 100 further includes a fuel delivery system 146. The fuel delivery system 146 generally includes a fuel source 148 and one or more fuel delivery lines 150. The fuel source 148 may include a supply of fuel (e.g., a hydrocarbon fuel, including, e.g., a carbon-neutral fuel or synthetic hydrocarbons) for the gas turbine engine 100. In addition, it will be appreciated that the fuel delivery system 146 also includes a fuel pump 272 and a flow divider 274, and the one or more fuel delivery lines 150 include a first fuel delivery line 150A, a second fuel delivery line 150B, and a third fuel delivery line 150C. The flow divider 274 divides the fuel flow from the fuel source 148 and fuel pump 272 into a first fuel flow through the first fuel delivery line 150A to the fuel cell assembly 204, a second fuel flow through the second fuel delivery line 150B also to the fuel cell assembly 204 (and in particular to an air processing unit, described below), and a third fuel flow through a third fuel delivery line 150C to the combustor 206. The flow divider 274 may include a series of valves (not shown) to facilitate such dividing of the fuel flow from the fuel source 148, or alternatively may be of a fixed geometry. Additionally, for the embodiment shown, the fuel delivery system 146 includes a first fuel valve 151A associated with the first fuel delivery line 150A (e.g., for controlling the first fuel flow), a second fuel valve 151B associated with the second fuel delivery line 150B (e.g., for controlling the second fuel flow), and a third fuel valve 151C associated with the third fuel delivery line 150C (e.g., for controlling the third fuel flow).

The gas turbine engine 100 further includes a compressor bleed system and an airflow delivery system. More specifically, the compressor bleed system includes an LP bleed air duct 276 and an associated LP bleed air valve 278, an HP bleed air duct 280 and an associated HP bleed air valve 282, an HP exit air duct 284 and an associated HP exit air valve 286.

The gas turbine engine 100 further includes an air stream supply duct 288 (in airflow communication with an airflow supply 290) and an associated air valve 292, which is also in airflow communication with the airflow delivery system for providing compressed airflow to the fuel cell assembly 204 of the integrated fuel cell and combustor assembly 200. The airflow supply may be, e.g., a second gas turbine engine configured to provide a cross-bleed air, an auxiliary power unit (APU) configured to provide a bleed air, a ram air turbine (RAT), etc. The airflow supply may be complimentary to the compressor bleed system if the compressor air source is inadequate or unavailable.

The compressor bleed system (and air stream supply duct 288) is in airflow communication with airflow delivery system for providing compressed airflow to the fuel cell assembly 204, as will be explained in more detail below.

Referring still to FIG. 5, the fuel cell assembly 204 of the integrated fuel cell and combustor assembly 200 includes a fuel cell stack 294, which may be configured in a similar manner as, e.g., the first fuel cell stack 232 described above. The fuel cell stack 294 is depicted schematically as a single fuel cell having a cathode side 296, an anode side 298, and an electrolyte 300 positioned therebetween. As will generally be appreciated, the electrolyte 300 may, during operation, conduct negative oxygen ions from the cathode side 296 to the anode side 298 to generate an electric current and electric power.

Briefly, it will be appreciated that the fuel cell assembly 204 further includes a fuel cell sensor 302 configured to sense data indicative of a fuel cell assembly operating parameter, such as a temperature of the fuel cell stack 294 (e.g., of the cathode side 296 or anode side 298 of the fuel cell), a pressure within the fuel cell stack 294 (e.g., of within the cathode side 296 or anode side 298 of the fuel cell), and/or a composition (e.g., a chemical composition) of the output products from the fuel cell assembly 204.

The anode side 298 may support electrochemical reactions that generate electricity. A fuel may be oxidized in the anode side 298 with oxygen ions received from the cathode side 296 via diffusion through the electrolyte 300. The reactions may create heat, steam, and electricity in the form of free electrons in the anode side 298, which may be used to supply power to an energy consuming device (such as the one or more additional electric devices 328 described below). The oxygen ions may be created via an oxygen reduction of a cathode oxidant using the electrons returning from the energy consuming device into the cathode side 296.

The cathode side 296 may be coupled to a source of the cathode oxidant, such as oxygen in the atmospheric air. The cathode oxidant is defined as the oxidant that is supplied to the cathode side 296 employed by the fuel cell system in generating electrical power. The cathode side 296 may be permeable to the oxygen ions received from the cathode oxidant.

The electrolyte 300 may be in communication with the anode side 298 and the cathode side 296. The electrolyte 300 may pass the oxygen ions from the cathode side 296 to the anode side 298, and may have little or no electrical conductivity, so as to prevent passage of the free electrons from the cathode side 296 to the anode side 298.

The anode side of a solid oxide fuel cell (such as the fuel cell stack 294) may be composed of a nickel/yttria-stabilized zirconia (Ni/YSZ) cermet. Nickel in the anode side serves as a catalyst for fuel oxidation and current conductor. During normal operation of the fuel cell stack 294, the operating temperature may be greater than or equal to about 700° C., and the nickel (Ni) in the anode remains in its reduced form due to the continuous supply of primarily hydrogen fuel gas.

The fuel cell stack 294 is disposed downstream of the LP compressor 110, the HP compressor 112, or both. Further, as will be appreciated from the description above with respect to FIG. 2, the fuel cell stack 294 may be coupled to or otherwise integrated with a liner of the combustor 206 (e.g., an inner liner 208 or an outer liner 210). In such a manner, the fuel cell stack 294 may also be arranged upstream of the combustion chamber 228 of the integrated fuel cell and combustor assembly 200, and further upstream of the HP turbine 116 and LP turbine 118.

As shown in FIG. 5, the fuel cell assembly 204 also includes a fuel processing unit 304 and an air processing unit 306. The fuel processing unit 304 may be any suitable structure for generating a hydrogen rich fuel stream. For example, the fuel processing unit 304 may include a fuel reformer or a catalytic partial oxidation convertor (CPO_x) for developing the hydrogen rich fuel stream for the fuel cell stack 294. The air processing unit 306 may be any suitable structure for raising the temperature of air that is provided thereto to a temperature high enough to enable fuel cell temperature control (e.g., about 600° C. to about 800° C.). For example, in the embodiment depicted, the air processing unit includes a preburner system, operating based on a fuel flow through the second fuel delivery line 150B, configured for raising the temperature of the air through combustion, e.g., during transient conditions such as startup, shutdown and abnormal situations.

In the exemplary embodiment depicted, the fuel processing unit 304 and air processing unit 306 are manifolded together within a housing 308 to provide conditioned air and fuel to the fuel cell stack 294.

It should be appreciated, however, that the fuel processing unit 304 may additionally or alternatively include any suitable type of fuel reformer, such as an autothermal reformer and steam reformer that may need an additional stream of steam inlet with higher hydrogen composition at the reformer outlet stream. Additionally, or alternatively, still, the fuel processing unit 304 may include a reformer integrated with the fuel cell stack 294. It should be appreciated that the fuel processing unit 304 may thus provide a reformed fuel using a fuel reformer as described herein. Similarly, it should be appreciated that the air processing unit 306 of FIG. 5 could alternatively be a heat exchanger or another device for raising the temperature of the air provided thereto to a temperature high enough to enable fuel cell temperature control (e.g., about 600° C. to about 800° C.).

As mentioned above, the compressor bleed system (and air stream supply duct 288) is in airflow communication with airflow delivery system for providing compressed airflow to the fuel cell assembly 204. The airflow delivery system includes an anode airflow duct 310 and an associated anode airflow valve 312 for providing an airflow to the fuel processing unit 304, a cathode airflow duct 314 and associated cathode airflow valve 316 for providing an airflow to the air processing unit 306, and a cathode bypass air duct 318 and an associated cathode bypass air valve 320 for providing an airflow directly to the fuel cell stack 294 (or rather to the cathode side 296 of the fuel cell(s)). The fuel delivery system 146 is configured to provide the first flow of fuel through the first fuel delivery line 150A to the fuel processing unit 304, and the second flow of fuel through the second fuel delivery line 150B to the air processing unit 306 (e.g., as fuel for a preburner system, if provided).

The fuel cell stack 294 outputs the power produced as a fuel cell power output 322. Further, the fuel cell stack 294 directs a cathode air discharge and an anode fuel discharge (neither labeled for clarity purposes) into the combustion chamber 228 of the combustor 206.

In operation, the air processing unit 306 is configured to heat/cool a portion of the compressed air, incoming through the cathode airflow duct 314, to generate a processed air to be directed into the fuel cell stack 294 to facilitate the functioning of the fuel cell stack 294. The air processing unit 306 receives the second flow of fuel from the second fuel delivery line 150B and may, e.g., combust such second flow of fuel to heat the air received to a desired temperature (e.g., about 600° C. to about 800° C.) to facilitate the functioning of the fuel cell stack 294. The air processed by the air processing unit 306 is directed into the fuel cell stack 294. In an embodiment of the disclosure, as is depicted, the cathode bypass air duct 318 and the air processed by the air processing unit 306 may combine into a combined air stream to be fed into a cathode 552 of the fuel cell stack 294.

Further, as shown in the embodiment of FIG. 5, the first flow of fuel through the first fuel delivery line 150A is directed to the fuel processing unit 304 for developing a hydrogen rich fuel stream (e.g., optimizing a hydrogen content of a fuel stream), to also be fed into the fuel cell stack 294. As will be appreciated, and as discussed below, the flow of air (processed air and bypass air) to the fuel cell stack 294 (e.g., the cathode side 296) and fuel from the fuel processing unit 304 to the fuel cell stack 294 (e.g., the anode side 298) may facilitate electrical power generation.

Because the inlet air for the fuel cell stack 294 may come solely from the upstream compressor section without any other separately controlled air source, it will be appreciated that the inlet air for the fuel cell stack 294 discharged from the compressor section is subject to the air temperature changes that occur at different flight stages. By way of illustrative example only, the air within a particular location in the compressor section of the gas turbine engine 100 may work at 200° C. during idle, 600° C. during take-off, 268° C. during cruise, etc. This type of temperature change to the inlet air directed to the fuel cell stack 294 may lead to significant thermal transient issues (or even thermal shock) to the ceramic materials of the fuel cell stack 294, which could range from cracking to failure.

Thus, by fluidly connecting the air processing unit 306 between the compressor section and the fuel cell stack 294, the air processing unit 306 may serve as a control device or system to maintain the air processed by the air processing unit 306 and directed into the fuel cell stack 294 within a desired operating temperature range (e.g., plus or minus 100° C., or preferably plus or minus 50° C., or plus or minus 20° C.). In operation, the temperature of the air that is provided to the fuel cell stack 294 can be controlled (relative to a temperature of the air discharged from the compressor section) by controlling the flow of fuel to the air processing unit 306. By increasing a fuel flow to the air processing unit 306, a temperature of the airflow to the fuel cell stack 294 may be increased. By decreasing the fuel flow to the air processing unit 306, a temperature of the airflow to the fuel cell stack 294 may be decreased. Optionally, no fuel can be delivered to the air processing unit 306 to prevent the air processing unit 306 from increasing and/or decreasing the temperature of the air that is discharged from the compressor section and directed into the air processing unit 306.

Moreover, as is depicted in phantom, the fuel cell assembly 204 further includes an airflow bypass duct 321 extending around the fuel cell 294 to allow a portion or all of an airflow conditioned by the air processing unit 306 (and combined with any bypass air through duct 318) to bypass the cathode side 296 of the fuel cell 294 and go directly to the combustion chamber 228. The airflow bypass duct 321 may be in thermal communication with the fuel cell 294. The fuel cell assembly further includes a fuel bypass duct 323 extending around the fuel cell 294 to allow a portion or all of a reformed fuel from the fuel processing unit 304 to bypass the anode side 298 of the fuel cell 294 and go directly to the combustion chamber 228.

As briefly mentioned above, the fuel cell stack 294 converts the anode fuel stream from the fuel processing unit 304 and air processed by the air processing unit 306 sent into the fuel cell stack 294 into electrical energy, the fuel cell power output 322, in the form of DC current. This fuel cell power output 322 is directed to a power convertor 324 in order to change the DC current into DC current or AC current that can be effectively utilized by one or more subsystems. In particular, for the embodiment depicted, the electrical power is provided from the power converter to an electric bus 326. The electric bus 326 may be an electric bus dedicated to the gas turbine engine 100, an electric bus of an aircraft incorporating the gas turbine engine 100, or a combination thereof. The electric bus 326 is in electric communication with one or more additional electrical devices 328, which may be adapted to draw an electric current from, or apply an electrical load to, the fuel cell stack 294. The one or more additional electrical devices 328 may be a power source, a power sink, or both. For example, the additional electrical devices 328 may be a power storage device (such as one or more batteries), an electric machine (an electric generator, an electric motor, or both), an electric propulsion device, etc. For example, the one or more additional electric devices 328 may include the starter motor/generator of the gas turbine engine 100.

Referring still to FIG. 5, the gas turbine engine 100 further includes a sensor 330. In the embodiment shown, the sensor 330 is configured to sense data indicative of a flame within the combustion section 114 of the gas turbine engine 100. The sensor 330 may be, for example, a temperature sensor configured to sense data indicative of an exit temperature of the combustion section 114, an inlet temperature of the turbine section, an exhaust gas temperature, or a combination thereof. Additionally, or alternatively, the sensor 330 may be any other suitable sensor, or any suitable combination of sensors, configured to sense one or more gas turbine engine operating conditions or parameters, including data indicative of a flame within the combustion section 114 of the gas turbine engine 100.

Moreover, as is further depicted schematically in FIG. 5, the propulsion system, an aircraft including the propulsion system, or both, includes a controller 240. For example, the controller 240 may be a standalone controller, a gas turbine engine controller (e.g., a full authority digital engine control, or FADEC, controller), an aircraft controller, supervisory controller for a propulsion system, a combination thereof, etc.

The controller 240 is operably connected to various the sensors, valves, etc. within at least one of the gas turbine engine 100 and the fuel delivery system 146. More specifically, for the exemplary aspect depicted, the controller 240 is operably connected to the valves of the compressor bleed system (valves 278, 282, 286), the airflow delivery system (valves 312, 316, 320), and the fuel delivery system 146 (flow divider 274, valves 151A, 151B, 151C), as well as the sensor 330 of the gas turbine engine 100 and the fuel cell sensor 302. As will be appreciated from the description below, the controller 240 may be in wired or wireless communication with these components. In this manner, the controller 240 may receive data from a variety of inputs (including the gas turbine engine sensor 330 and the fuel cell sensor 302), may make control decisions, and may provide data (e.g., instructions) to a variety of output (including the valves of the compressor bleed system to control an airflow bleed from the compressor section, the airflow delivery system to direct the airflow bled from the compressor section, and the fuel delivery system 146 to direct the fuel flow within the gas turbine engine 100).

Referring particularly to the operation of the controller 240, in at least certain embodiments, the controller 240 can include one or more computing device(s) 332. The computing device(s) 332 can include one or more processor(s) 332A and one or more memory device(s) 332B. The one or more processor(s) 332A can include any suitable processing device, such as a microprocessor, microcontroller, integrated circuit, logic device, and/or other suitable processing device. The one or more memory device(s) 332B can include one or more computer-readable media, including, but not limited to, non-transitory computer-readable media, RAM, ROM, hard drives, flash drives, and/or other memory devices.

The one or more memory device(s) 332B can store information accessible by the one or more processor(s) 332A, including computer-readable instructions 332C that can be executed by the one or more processor(s) 332A. The instructions 332C can be any set of instructions that when executed by the one or more processor(s) 332A, cause the one or more processor(s) 332A to perform operations. In some embodiments, the instructions 332C can be executed by the one or more processor(s) 332A to cause the one or more processor(s) 332A to perform operations, such as any of the operations and functions for which the controller 240 and/or the computing device(s) 332 are configured, the operations for operating a propulsion system (e.g., method 600), as described herein, and/or any other operations or functions of the one or more computing device(s) 332. The instructions 332C can be software written in any suitable programming language or can be implemented in hardware. Additionally, and/or alternatively, the instructions 332C can be executed in logically and/or virtually separate threads on processor(s) 332A. The memory device(s) 332B can further store data 332D that can be accessed by the processor(s) 332A. For example, the data 332D can include data indicative of power flows, data indicative of gas turbine engine 100/aircraft operating conditions, and/or any other data and/or information described herein.

The computing device(s) 332 also includes a network interface 332E configured to communicate, for example, with the other components of the gas turbine engine 100 (such as the valves of the compressor bleed system (valves 278, 282, 286), the airflow delivery system (valves 312, 316, 320), and the fuel delivery system 146 (flow divider 274, valves 151A, 151B, 151C), as well as the sensor 330 of the gas turbine engine 100 and the fuel cell sensor 302), the aircraft incorporating the gas turbine engine 100, etc. The network interface 332E can include any suitable components for interfacing with one or more network(s), including for example, transmitters, receivers, ports, controllers, antennas, and/or other suitable components. In such a manner, it will be appreciated that the network interface 332E may utilize any suitable combination of wired and wireless communications network(s).

The technology discussed herein makes reference to computer-based systems and actions taken by and information sent to and from computer-based systems. It will be appreciated that the inherent flexibility of computer-based systems allows for a great variety of possible configurations, combinations, and divisions of tasks and functionality between and among components. For instance, processes discussed herein can be implemented using a single computing device or multiple computing devices working in combination. Databases, memory, instructions, and applications can be implemented on a single system or distributed across multiple systems. Distributed components can operate sequentially or in parallel.

It will be appreciated that the gas turbine engine 100, the exemplary fuel delivery system 146, the exemplary integrated fuel cell and combustor assembly 200, and the exemplary fuel cell assembly 204 are provided by way of example only. In other embodiments, the integrated fuel cell and combustor assembly 200 and fuel cell assembly 204 may have any other suitable configuration. For example, in other exemplary embodiments, the fuel cell assembly 204 may include any other suitable fuel processing unit 304. Additionally, or alternatively, the fuel cell assembly 204 may not require a fuel processing unit 304, e.g., when the combustor of the gas turbine engine 100 is configured to burn hydrogen fuel and the fuel delivery assembly 146 is configured to provide hydrogen fuel to the integrated fuel cell and combustor assembly 200, and in particular to the fuel cell assembly 204.

As briefly mentioned above, the fuel cell assembly 204 may be in electrical communication with the electric bus 326, which may be an electric bus of the gas turbine engine 100, of an aircraft, or a combination thereof. Referring now briefly to FIG. 6, a schematic view is provided of an aircraft 400 in accordance with an embodiment of the present disclosure including one or more gas turbine engines 100 (labeled 100A and 100B), each with an integrated fuel cell and combustor assembly 200 (labeled 200A and 200B), and an aircraft electric bus 326 in electrical communication with the one or more gas turbine engines 100.

In particular, for the exemplary embodiment depicted, the aircraft 400 is provided including a fuselage 402, an empennage 404, a first wing 406, a second wing 408, and a propulsion system. The propulsion system generally includes a first gas turbine engine 100A coupled to, or integrated with, the first wing 406 and a second gas turbine engine 100B coupled to, or integrated with, the second wing 408. It will be appreciated, however, that in other embodiments, any other suitable number and or configuration of gas turbine engines 100 may be provided (e.g., fuselage-mounted, empennage-mounted, etc.).

The first gas turbine engine 100A generally includes a first integrated fuel cell and combustor assembly 200A and a first electric machine 410A. The first integrated fuel cell and combustor assembly 200A may generally include a first fuel cell assembly. The first electric machine 410A may be an embedded electric machine, an offset electric machine (e.g., rotatable with the gas turbine engine 100 through an accessory gearbox or suitable geartrain), etc. For example, in certain exemplary embodiments, the first electric machine 410A may be a starter motor/generator for the first gas turbine engine 100A.

Similarly, the second gas turbine engine 100B generally includes a second integrated fuel cell and combustor assembly 200B and a second electric machine 410B. The second integrated fuel cell and combustor assembly 200B may generally include a second fuel cell assembly. The second electric machine 410B may also be an embedded electric machine, an offset electric machine (e.g., rotatable with the gas turbine engine 100 through an accessory gearbox or suitable geartrain), etc. For example, in certain exemplary embodiments, the second electric machine 410B may be a starter motor/generator for the second gas turbine engine 100B.

In the embodiment of FIG. 6, the aircraft 400 additionally includes the electric bus 326 and a supervisory controller 412. Further, it will be appreciated that the aircraft 400 and/or propulsion system includes one or more electric devices 414 and an electric energy storage unit 416, each in electric communication with the electric bus 326. The electric devices 414 may represent one or more aircraft power loads (e.g., avionics systems, control systems, electric propulsors, etc.), one or more electric power sources (e.g., an auxiliary power unit), etc. The electric energy storage unit 416 may be, e.g., a battery pack or the like for storing electric power.

The electric bus 326 further electrically connects to the first electric machine 410A and first fuel cell assembly, as well as to the second electric machine 410B and second fuel cell assembly. The supervisory controller 412 may be configured in a similar manner as the controller 240 of FIG. 5 or may be in operative communication with a first gas turbine engine controller dedicated to the first gas turbine engine 100A and a second gas turbine engine controller dedicated to the second gas turbine engine 100B.

In such a manner, it will be appreciated that the supervisory controller 412 may be configured to receive data from a gas turbine engine sensor 330A of the first gas turbine engine 100A and from a gas turbine engine sensor 330B of the second gas turbine engine 100B, and may further be configured to send data (e.g., commands) to various control elements (such as valves) of the first and second gas turbine engines 100A, 100B.

Moreover, it will be appreciated that for the embodiment depicted, the aircraft 400 includes one or more aircraft sensor(s) 418 configured to sense data indicative of various flight operations of the aircraft 400, including, e.g., altitude, ambient temperature, ambient pressure, airflow speed, etc. The supervisory controller 412 is operably connected to these aircraft sensor(s) 418 to receive data from such aircraft sensor(s) 418.

In addition to receiving data from sensors 330A, 330B, 418 and sending data to control elements, the supervisory controller 412 is configured to control a flow of electric power through the electric bus 326. For example, the supervisory controller 412 may be configured to command and receive a desired power extraction from one or more of the electric machines (e.g., the first electric machine 410A and second electric machine 410B), one or more of the fuel cell assemblies (e.g., the first fuel cell assembly and second fuel cell assembly), or both, and provide all or a portion of the extracted electric power to other of the one or more of the electric machines (e.g., the first electric machine 410A and second electric machine 410B), one or more of the fuel cell assemblies (e.g., the first fuel cell assembly and second fuel cell assembly), or both. One or more of these actions may be taken in accordance with the logic outlined below.

Turning now to FIG. 7, a safety management system 500 is depicted in schematic form. The safety management system 500 depicted includes a fuel cell assembly 504, a combustion engine 506, and a controller 540. The fuel cell assembly 504 and the combustion engine 506 may form distinct portions of the gas turbine engine 100 of FIG. 1. For example, the fuel cell assembly 504 may be operably connected with the combustion engine 506 through a fuel cell combustion engine interface 517. As described in greater detail above with reference to FIGS. 2-4, the fuel cell assembly 504 and the combustion engine 506 may form an integrated component of the gas turbine engine 100, but nonetheless may still be defined and controlled separately based on independent operation capabilities.

It should be appreciated that the fuel cell assembly 504 schematically depicted in FIG. 7 may include any of the features described elsewhere herein with respect to other embodiments. As shown, the fuel cell assembly 504 includes a first fuel cell stack 532 and a second fuel cell stack 534. Various sensors may be provided, for example as described with reference to the fuel cell sensor 302 of FIG. 5. The embodiment of FIG. 7 depicts a first stack sensor 533 arranged within the first fuel cell stack 532 and a second stack sensor 535 arranged within the second fuel cell stack 534. The first stack sensor 533 and the second stack sensor 535 may be configured to detect one or more operating parameters of the respective first and second fuel cell stacks 532, 534. Further sensors may be provided for the fuel cell assembly 504 external to the fuel cell stacks 532, 534 but within the fuel cell assembly 504. For example, a first fuel cell assembly sensor 505 may be disposed proximate but external to the first fuel cell stack 532 and a second fuel cell assembly sensor 507 may be disposed proximate but external to the second fuel cell stack 534. Sensors may further be disposed external to the fuel cell assembly 504 for monitoring the fuel cell assembly 504 or its surrounding conditions. For example, a fuel cell assembly external sensor 503 may be provided.

In various embodiments, the fuel cell assembly sensors 503, 505, 507, 533, 535, may be configured in any of the ways described above with reference to the fuel cell sensor 302 in FIG. 5. For example, one or more of the fuel cell assembly sensors 503, 505, 507, 533, 535 may be configured to sense data indicative of a fuel cell assembly operating parameter, such as a temperature of the fuel cell stack 532, 534, a pressure within the fuel cell stack 532, 534, and/or a composition (e.g., a chemical composition) of the output products from the fuel cell assembly 504. Temperature or combustion detection may also be performed proximate but external to the fuel cell assembly 504, for example by the fuel cell assembly external sensor 503.

A fuel cell load 544 is depicted in FIG. 7 as operably connected to the fuel cell assembly 504, and may be connected through a fuel cell load control 545. The fuel cell load 544 may be any number of electrical or mechanical loads drawing energy from the fuel cell assembly 504. As described in greater detail below, the fuel cell load control 545 may be operable with a controller 540, for example to turn off, turn on, increase, or decrease a load on the fuel cell assembly 504.

A fuel cell controller 554 may also be provided. For example, the fuel cell controller 554 may be operable to control the fuel cell load control 545. The fuel cell controller 554 may also be provided to increase, decrease, turn on, or shut off output of the fuel cell 504. Output of the fuel cell 504 may be controlled by various mechanisms described in greater detail with reference to FIG. 5 above.

As also described with reference to FIG. 2, a purge gas inlet 525 may also be provided for the fuel cell assembly 504. For example, the purge gas inlet 525 may be supplied by a bypass airflow to supply air to the fuel cell assembly 504, including the first and second fuel cell stacks 532, 534. Purge gas may be selectively supplied to the fuel cell assembly, for example in case of emergency to reduce or shut down output of the fuel cell assembly 504. Other sources of purge gas may be provided as well, including bleed airflow from a compressor section, supercritical CO₂, reducing gas (4% H₂ and 96% N₂) and safety gas N₂.

Turning now to the depicted combustion engine 506 of FIG. 7, the combustion engine 506 includes a fan 526, an LP compressor 510, an HP compressor 512, a combustion section 514, an HP turbine 516, and an LP turbine 518. Each of these components may be configured as described in greater detail with reference to FIG. 5 above. A variety of sensors may also be provided, for example as described with reference to the gas turbine engine sensor 330 of FIG. 5. As shown in FIG. 7, the combustion engine 506 includes a turbomachine sensor 511. The turbomachine sensor 511 may be configured to measure various operating parameters of the turbomachine (see FIG. 1). For example, the turbomachine sensor 511 may be configured to detect a rotation speed, a temperature, a gas concentration, or a flow rate of or at one or more turbomachinery components.

The combustion section 514 of the combustion engine 506 depicted in FIG. 7 may also include one or more sensors. For example, a combustion section internal sensor 513 may be provided within the combustion section 514 and a combustion section external sensor 515 may be provided outside the combustion section 514. Each of the combustion section sensors 513, 515 may be configured to detect an operating parameter of the combustion section, such as a temperature, a gas concentration, or a flow rate.

The combustion engine 506 is depicted in FIG. 7 as connected to a combustion engine load 546. The combustion engine load 546 may generally include resistance to thrust or rotation of the engine. Additionally, the combustion engine load 546 may include an auxiliary load such as an electric generator. The combustion engine load 546 may be regulated, such as with a combustion engine load control 547. This combustion engine load control 547 may include any number of electronic or mechanical devices to turn on, turn off, reduce, or increase load on the combustion engine 506. Controlling of the combustion engine 506 may thus include control of various valves, actuators, etc. in a fuel delivery system, bleed air system, or variable geometry actuation system. Such control may be used regulate fuel or air flow into or out of a combustion engine, temperatures of the combustion engine, and other variables. As described in greater detail below, the combustion engine load control 547 may be operable through the controller 540. Although the combustion engine load 546 is depicted in connection with the LP turbine, it should be appreciated that the combustion engine load 546 may draw energy from the combustion engine 506 at various other locations and from various other components.

The combustion engine 506 of FIG. 7 also includes a combustion engine controller 556. The combustion engine controller 506 may be configured to operate the combustion engine load control 547 as described above. The combustion engine controller 556 may also be configured to regulate an output of the combustion engine 506, for example, by shutting off, turning on, increasing, or reducing output. Regulating output of the combustion engine 506 may be performed in various ways, such as regulating airflow or fuel flow through the combustion engine 506. Although the combustion engine controller 556 is depicted in connection with the combustion section 514, it should be appreciated that the combustion engine controller 556 may be operably connected to various components of the combustion engine 506.

FIG. 7 depicts another embodiment of a controller 540. For example, the controller 540 may be a standalone controller, a gas turbine engine controller (e.g., a full authority digital engine control, or FADEC, controller), an aircraft controller, supervisory controller for a propulsion system, a combination thereof, etc. The controller 540 may be operably connected to various other controllers. For example, the controller 540 may be operably connected with the fuel cell controller 554 and the combustion engine controller 556. In various embodiments, the controllers 540, 554, 556 may be wirelessly connected or connected with wired electrical connections, or may each be integrated into a single controller. It should be understood that the fuel cell controller 554 and the combustion engine controller 556 may also be configured to operate independently, either during normal operation or in case of disconnection from the controller 540.

In the depicted safety management system 500, the controller 540 is operably connected to various sensors, valves, etc. within, connected to, or in proximity to the fuel cell assembly 504 and the combustion engine 506. More specifically, for the exemplary aspect depicted, the controller 540 is operably connected to each of the fuel cell assembly sensors 503, 505, 507, 533, 535 and each of the combustion engine sensors 511, 513, 515. As will be appreciated from the description below, the controller 540 may be in wired or wireless communication with these components. For example, the controller 540 may communicate to each of the various sensors through the fuel cell controller 554 and the combustion engine controller 556. In this manner, the controller 540 may receive data from a variety of inputs (including the fuel cell controller 554 and its associated sensors and the combustion engine controller 556 and its associated sensors), may make control decisions, and may provide data (e.g., instructions) to a variety of outputs such as energy output from the combustion engine 506, energy output from the fuel cell assembly 504, the combustion engine load control 546, and the fuel cell load control 545 (further including the valves of the compressor bleed system to control an airflow bleed from the compressor section, the airflow delivery system to direct the airflow bled from the compressor section, and the fuel delivery system 146 to direct the fuel flow within the gas turbine engine 100 as described with reference to FIG. 5). It should also be appreciated that the controller 540 may also be directly connected to one or more of the inputs and outputs, for example, of the fuel cell controller 554 and/or the combustion engine controller 556.

Referring particularly to the operation of the controller 540, in at least certain embodiments, the controller 540 can include one or more computing device(s) 542. The computing device(s) 542 can include one or more processor(s) 542A and one or more memory device(s) 542B. The one or more processor(s) 542A can include any suitable processing device, such as a microprocessor, microcontroller, integrated circuit, logic device, and/or other suitable processing device. The one or more memory device(s) 542B can include one or more computer-readable media, including, but not limited to, non-transitory computer-readable media, RAM, ROM, hard drives, flash drives, and/or other memory devices.

The one or more memory device(s) 542B can store information accessible by the one or more processor(s) 542A, including computer-readable instructions 542C that can be executed by the one or more processor(s) 542A as described in greater detail with reference to FIG. 5 above. The memory device(s) 542B can further store data 542D that can be accessed by the processor(s) 542A as also described above.

The computing device(s) 542 also includes a network interface 542E configured to communicate, for example, with the fuel cell controller 554 and the combustion engine controller 556, as well as with other components of the gas turbine engine 100 (such as the valves of the compressor bleed system (valves 278, 282, 286), the airflow delivery system (valves 312, 316, 320), and the fuel delivery system 146 (flow divider 274, valves 151A, 151B, 151C), as well as the sensor 330 of the gas turbine engine 100 and the fuel cell sensor 302), and/or the aircraft incorporating the gas turbine engine 100, etc.

The schematic representation in FIG. 7 of the fuel cell combustion engine interface 517 may be representative of the integrated fuel cell and combustor assembly 200 as described with reference to FIG. 5 above. Although no direct control communication between the fuel cell assembly 504 and the combustion engine 506 is depicted in FIG. 7, it should be understood that control pathways as described in greater detail below may also travel across such a fuel cell combustion engine interface 517. For example, communication from the controller 540 may travel from its network interface 542E to the combustion engine controller 556, where the combustion engine controller 556 then relays communication, or transmits communication responsive to communication from the controller 540, to the fuel cell controller 554. Various network interfaces, wired or wireless, may also be configured between the combustion engine controller 556 and the fuel cell controller 554.

Turning now to FIG. 8, a flow diagram describing operation of a propulsion system for an aircraft, and more specifically a method 600 for operating a safety management system 500 for the aircraft and its propulsion system, is provided. As described with reference to FIG. 7, the safety management system 500 includes at least one sensor, for example any of the sensors described with reference to FIG. 7 above. As shown in a first process 601 of FIG. 8, these sensors may be configured to determine data indicative of at least one operating parameter of the propulsion system. It should be understood that the propulsion system as referred to herein is inclusive of at least the combustion engine 506 and the fuel cell assembly 504 (see FIG. 7). As described above, a processor, such as the processor(s) 542A or processor(s) of the fuel cell controller 554 or the combustion engine controller 556, is configured to make determinations based on inputs from the sensors (see FIG. 7). For example, the processor(s) 542A can be configured to determine if the at least one operating parameter has achieved a safety threshold in a second process 602.

For example, a fuel cell assembly sensor 503, 505, 507, 533, 535 may be configured to detect at least one first operating parameter, which may be a temperature or other suitable parameter, of the fuel cell assembly 504. Such a sensor may be used to determine a fuel cell safety event. A combustion engine sensor 511, 513, 515, may be configured to detect at least one second operating parameter, which may be a temperature or other suitable parameter, of the combustion engine 506. It should be understood that such sensors need not directly detect the corresponding operating parameter, but may instead perform an inference or calculation, or otherwise determine data indicative of the corresponding operating parameter. Such a sensor may be used to determine a combustion engine safety event.

In sub-processes 610 and 611, operating parameters may be independently determined for the combustion engine 506 and the fuel cell assembly 504. For example, one or more temperatures may be detected for each of the combustion engine 506 and the fuel cell assembly 504. It should be appreciated, however, that detection from a sensor of the fuel cell assembly 504 and detection from a sensor of the combustion engine 506 may together result in an operating parameter of the safety management system 500 or the gas turbine engine 100 as a whole.

Referring to the second process 602, a safety threshold may refer to any number of parameters for which a safety concern exists in detectable or predictable conditions. The safety threshold may be an upper or a lower limit, beyond which safe operation is impossible or unlikely. This safety threshold is a tunable feature and may be set to account for various regulations, operating conditions, and/or safety factors. It should be understood that achieving the safety threshold may be done by exceeding or falling below the safety threshold, based on the operating parameters used.

For example, a safety threshold may be set based on a maximum temperature, a minimum temperature, combustion detection, a maximum rotational speed, a minimum rotational speed, a maximum linear speed, a minimum linear speed, a maximum gas concentration, or a minimum gas concentration. It should also be appreciated that the safety threshold may be a composite of more than one variable, for example a combination of temperature and gas concentration, where an increase in detected gas concentration decreases a temperature increase required to achieve an upper limit threshold or vice versa. As described above with reference to FIG. 7, the processor(s) 542A may be configured to determine if the safety threshold has been achieved based on any of at least one first operating parameter achieving a first threshold; at least one second operating parameter achieving a second threshold; and/or the at least one first operating parameter and the at least one second operating parameter achieving a combined threshold. Using the example described above with reference to the first process 601, a fuel cell assembly sensor 503, 505, 507, 533, 535 configured to detect at least one first operating parameter of the fuel cell assembly 504 and a combustion engine sensor 511, 513, 515 configured to detect at least one second operating parameter of the combustion engine 506 can be used to determine if a safety threshold has been achieved.

In a first example, a fire detection sensor or collection of sensors may be provided to detect a fire outside of the fuel cell stacks 532, 534 (or to determine data indicative of a fire outside of the fuel cell stacks 532, 534) as shown in FIG. 7. This example may be referred to as a fire event or fire detection event. The fire detection sensor may be one provided with the aircraft or may include the first fuel cell assembly sensor 505, the second fuel cell assembly sensor 507, or the fuel cell assembly external sensor 503. Fire detection may be achieved in various ways, such as through temperature, gas concentration, and/or particle concentration. Indirect detection of a fire or risk of fire may also be inferred from various other sensors configured to detect mechanical or structural failures.

In a second example, a hazardous gas detector may be provided to detect leakage or other unsafe concentrations of hazardous gases in one or more regions. The hazardous gas detector may be provided as one or more of the sensors described above with reference to FIG. 7, for example the fuel cell assembly external sensor 503. In an embodiment, as described above with reference to CPO_x in FIG. 5, a hydrogen rich gas may leak from the fuel cell stacks 532, 534. Gas concentration may be measured with respect to Lower Explosive limit (LEL), expressed as a percentage of hazardous combustible gas or solvent vapor in air, also referred to as a maximum hazardous gas concentration. Potential combustible gases experienced here include Hydrogen and Carbon Monoxide. Other sensors may be used in conjunction with LEL sensors, such as temperature sensors, where a range of acceptable LEL detections may further be based on temperature. In various embodiments, the safety threshold may be configured such that it is exceeded by an LEL of 5%, 10%, 15%, 20%, 25%, or 30%.

In a third example, a sensor or collection of sensors may be configured to determine a loss of propulsion. These sensors may include linear speed sensors for various airflows and/or rotational sensors of the gas turbine engine 100. Mechanical damage may also be detected, for example through detection of imbalance of the fan 126, 526 following a fan blade out (FBO) event. An overspeed event, which may include anticipation of exceeding a maximum engine speed, may be detected through use of such sensors.

In a third process 603, the processor(s) 542A may be configured to execute a safety action responsive to operating parameters detected by the sensors or calculated based on detections by the sensors. The safety action, being responsive to the detected operating parameters achieving the safety threshold, is tunable to achieve the intended safe operating outcome. In various embodiments, the safety action is configured to control operation of the fuel cell assembly 504 and to control operation of the combustion engine 506. It should be noted that, as a safety or emergency measure, it may be desirable to use the safety threshold as a binary on/off switch, where other systems may be operable to handle tuning above or below the safety threshold.

Described herein in conjunction with the third process 603, the fourth process 604 controls operation of the fuel cell assembly 504 responsive to the safety action and the fifth process 605 controls operation of the combustion engine 506 responsive to the safety action. Controlling operation may include modifying an input or output of the fuel cell assembly 504 or the combustion engine 506 as described in various examples below. It should be appreciated that the fourth process 604 and the fifth process 605 may be concurrent or independently-timed.

In the first example described above relating to fire detection, executing a safety action may include reducing or shutting down fuel and/or air to the fuel cell assembly 504. Further, a purge gas may be introduced into the fuel cell assembly 504, for example through the purge gas inlet 525 as described with reference to FIG. 7. It should be understood that the purge gas should be provided to assist in fire suppression after fuel has been shut off to the fuel cell stacks 532, 534. Additionally, executing the safety action may include disconnecting the fuel cell assembly 504 from one or more loads, for example using the fuel cell load control 545 to limit connection to or disconnect the fuel cell assembly 504 from the fuel cell load 544. Earlier, concurrent, or subsequent safety action may also be executed with respect to the combustion engine 506. For example, an output of the combustion engine 506 may be increased, for example by increasing a fuel supply to the combustion engine 506. Increasing output of the combustion engine 506 may advantageously account for a loss of power incurred by reducing output of the fuel cell assembly 504.

In the second example described above relating to hazardous gas detection, executing a safety action may include reducing or shutting down fuel and/or air to the fuel cell assembly 504. Additionally, executing the safety action may include disconnecting the fuel cell assembly 504 from one or more loads, for example using the fuel cell load control 545 to limit connection to or disconnect the fuel cell assembly 504 from the fuel cell load 544. In this example, it may be advantageous to provide airflow to reduce levels of hazardous gas. The combustion engine 506 may be controlled to increase output by rotation speed and thus linear airspeed through the engine. For example, an electric motor or starter may be engaged if an engine speed is below a certain threshold. For example, if the engine is not rotating, then the starter may be engaged to increase rotation speed of the engine and thus flow through areas of hazardous gas accumulation. In an embodiment, at least one sensor is a speed sensor of the combustion engine 506 configured to detect a rotation speed of the combustion engine 506. The processor 542A or a processor of the combustion engine controller 556 is further configured to determine if the rotation speed has achieved a rotation speed threshold. In this further example, the safety action further includes increasing the rotation speed of the combustion engine to above the rotation speed threshold when the rotation speed has achieved the rotation speed threshold by falling below a minimum rotation speed.

In the third example described above relating to loss of propulsion, executing a safety action may include reducing or shutting off output of the combustion engine 506. For example, fuel and/or air supply may be limited or shut off to the combustion engine 506 to reduce rotation speed to safe levels. The safety action may also include increasing the output of the fuel cell assembly 504. For example, the fuel cell assembly 504 may be controlled to a maximum output level, increasing the output of the fuel cell assembly 504. As another example, the fuel cell assembly 504 may be controlled to operate at a higher fuel utilization, thus decreasing fuel waste and/or harmful emissions from the gas turbine engine. Such a configuration may provide further environmental benefits, for example in the event of combustor shutdown through lean blowout or rich blowout, or in other various scenarios where the gas turbine engine can no longer effectively combust exhaust products from the fuel cell assembly 504.

Turning now to the sixth process 606, a safety indication may be transmitted responsive to the executing of a safety action and controlling performed in the third, fourth, and fifth processes 603, 604, 605. The safety indication may include information resulting from the safety action or subsequent control. For example, a range message may be transmitted indicative of a range of the aircraft or adjustment to range of the aircraft. In an embodiment, a range message is transmitted to a flight computer indicative of a maximum range of the fuel cell assembly 504. For example, referring to the third example described above, a maximum range of the fuel cell assembly 504 in an engine where propulsion has been reduced or lost may be transmitted. Referring to the first example above, a range message may be transmitted to a flight computer indicative of a maximum range of the gas turbine engine 100 without operation of the fuel cell assembly 504 or with reduced operation of the fuel cell assembly 504.

Turning now to FIG. 9, another embodiment of a method 700 for operating a safety management system 500 for the aircraft and its propulsion system is provided. The embodiment of FIG. 9 differs from that in FIG. 8 at least in that it provides for executing a preventative action and issuing an early warning. A first process 701, a third process 703, a fourth process 704, a fifth process 705, a sixth process 706, and sub processes 710, 711 may generally correspond to those described with reference to FIG. 8, particularly the first process 601, the third process 603, the fourth process 604, the fifth process 605, the sixth process 606, and the sub processes 610, 611, respectively. The method 700 of FIG. 9 may also include an achievement process 702b, which may generally correspond with the second process 602 of FIG. 8 in that it is determined, for example with the processor(s) 542A, that the operating parameter has achieved a safety threshold.

The embodiment of FIG. 9 further provides a predictive process 702a, wherein, for example with the processor(s) 542A, it is determined whether the operating parameter is approaching the safety threshold. The processor(s) 542A may be configured to determine that one or more of the operating parameters is approaching the safety threshold, for example to issue an early warning to a pilot or aircraft computer. In an embodiment, the processor(s) 542A may be configured to execute a preventative action distinct from the safety action, responsive to determining that at least one operating parameter is approaching the safety threshold. It should be understood that the preventative action executed responsive to determining that the safety threshold is being approached may differ from the safety action responsive to determining that the safety threshold has been achieved, as explained in greater detail below with reference to the third process 703.

In the predictive process 702a, the processor(s) 542A may be configured to determine a trend towards the safety threshold being achieved. The processor(s) 542A may perform various calculations and/or regressions to predict future progress of one or more operating parameters. For example, the predictive process 702a may determine, for example from model estimation or predictive monitoring, that a gas concentration with respect to LEL described above with reference to the second example described above with reference to FIG. 8 is approaching the safety threshold.

Responsive to the predictive process 702a, the processor(s) 542A may be configured to execute a preventative action responsive to determining that an operating parameter is approaching the safety threshold. For example, in the preventative process 712, the processor(s) 542A may control operation of the fuel cell assembly 504 based on a predetermined response to a given determination of approaching the safety threshold. The processor(s) 542A may also be configured to control operation of the fuel cell assembly 504 until a determination that no safety action will likely be required, for example by a determination that the operating parameter has not achieved the safety threshold and a determination that the operating parameter is not approaching the safety threshold. For example, still referring to the example of the predictive process 702a above, based on the determination that the gas concentration with respect to LEL is approaching the safety threshold but has not yet achieved the safety threshold, then the processor(s) 542A may be configured to reduce a fuel flowrate to one or more fuel cells of the fuel cell assembly 504. Further action may be performed in the preventative step 712, for example by increasing a fuel flowrate to the combustion engine 506 to account for the reduced fuel flowrate and likely power loss from the fuel cell assembly 504. Such actions may be performed to achieve various goals, such as maintaining a total power offtake demand. Additionally, a warning process 714 may be performed along with the preventative process 712, for example to provide a visual, audio, or other warning to an operator. In an embodiment, the preventative process 712 and the warning process 714 are only performed when it is determined that the operating parameter is approaching the safety threshold but has not achieved the safety threshold.

As depicted in FIG. 9, if it is determined that the operating parameter has achieved the safety threshold, then the safety action in the third process 703 may be executed. In this way, the executing of a safety action in the third process 703 may function as a hard limit, where once the safety threshold has been achieved, there is no option but to execute the safety action to ensure a return to, or maintenance of, safe operating parameter levels. In contrast with the safety action, the preventative action may be adjustable, for example subject to pilot inputs. However, it should be understood that the safety action as described herein includes more than mere preventative measures, for example by controlling a fuel cell assembly and a combustion engine, including various accessories, to specifically counter fire detection, LEL, or loss of propulsion events as described above in various examples. It should be further understood that due to the high priority nature of these safety actions, they may be configured such that no other processes or inputs can interfere with a given safety action once executed.

This written description uses examples to disclose the present disclosure, including the best mode, and also to enable any person skilled in the art to practice the disclosure, including making and using any devices or systems and performing any incorporated methods. The patentable scope of the disclosure is defined by the claims, and may include other examples that occur to those skilled in the art. Such other examples are intended to be within the scope of the claims if they include structural elements that do not differ from the literal language of the claims, or if they include equivalent structural elements with insubstantial differences from the literal languages of the claims.

Further aspects are provided by the subject matter of the following clauses:

A first clause provides a safety management system for an aircraft, the aircraft comprising a propulsion system including a fuel cell assembly and a combustion engine, the safety management system comprising: at least one sensor configured to detect at least one operating parameter of the propulsion system; a controller comprising a processor and memory storing instructions that when executed by the processor cause the controller to: determine that the at least one operating parameter has achieved a safety threshold; and execute a safety action when the at least one operating parameter has achieved the safety threshold, wherein the safety action is configured to: control operation of the fuel cell assembly; and control operation of the combustion engine.

Another clause provides a first sensor configured to detect at least one first operating parameter of the fuel cell assembly; and a second sensor configured to detect at least one second operating parameter of the combustion engine, wherein the processor is configured to determine that the safety threshold has been achieved based on any of: the at least one first operating parameter achieving a first threshold; the at least one second operating parameter achieving a second threshold; and the at least one first operating parameter and the at least one second operating parameter achieving a combined threshold.

Another clause provides that the safety action comprises: reducing output of one of the fuel cell assembly and the combustion engine; and increasing output of the other of the fuel cell assembly and the combustion engine.

Another clause provides that the at least one operating parameter achieving the safety threshold corresponds to detection of a fuel cell safety event of the fuel cell assembly and wherein the safety action comprises: reducing a fuel supply to the fuel cell assembly; and increasing a fuel supply to the combustion engine.

Another clause provides that the fuel cell safety event is a fire and wherein the safety action further comprises: shutting off the fuel supply to the fuel cell assembly; flowing a purge gas through the fuel cell assembly; and disconnecting a load from the fuel cell assembly.

Another clause provides that the at least one operating parameter achieving the safety threshold corresponds to detection of an overspeed event and wherein the safety action comprises: reducing a fuel supply to the combustion engine; and increasing output of the fuel cell assembly.

Another clause provides that the safety action further comprises: shutting off the fuel supply to the combustion engine; and transmitting a range message to a flight computer indicative of a maximum range of the fuel cell assembly.

Another clause provides that the at least one sensor comprises a hazardous gas detector, wherein the safety threshold comprises a maximum hazardous gas concentration, and wherein the safety action comprises at least one of: reducing a fuel supply to the fuel cell assembly; reducing an air supply to the fuel cell assembly; and reducing a load of the fuel cell assembly.

Another clause provides that the safety action further comprises at least one of: shutting off the fuel supply to the fuel cell assembly; shutting off the air supply to the fuel cell assembly; and removing the load of the fuel cell assembly.

Another clause provides that the at least one sensor comprises a speed sensor of the combustion engine configured to detect a rotation speed of the combustion engine, wherein the processor is further configured to determine that the rotation speed has achieved a rotation speed threshold, and wherein the safety action further comprises increasing the rotation speed of the combustion engine to above the rotation speed threshold when the rotation speed has achieved the rotation speed threshold.

Another clause provides a method of operating a propulsion system of an aircraft, the propulsion system including a fuel cell assembly and a combustion engine, the method comprising: determining data indicative of at least one operating parameter of the propulsion system; determining that the at least one operating parameter has achieved a safety threshold; executing a safety action when the at least one operating parameter has achieved the safety threshold; controlling operation of the fuel cell assembly responsive to execution of the safety action; and controlling operation of the combustion engine responsive to execution of the safety action.

Another clause provides detecting, with a first sensor, at least one first operating parameter of the fuel cell assembly; and detecting, with a second sensor, at least one second operating parameter of the combustion engine, determining that the safety threshold has been achieved based on any of: the at least one first operating parameter achieving a first threshold; the at least one second operating parameter achieving a second threshold; and the at least one first operating parameter and the at least one second operating parameter achieving a combined threshold.

Another clause provides that the safety action comprises: reducing output of one of the fuel cell assembly and the combustion engine; and increasing output of the other of the fuel cell assembly and the combustion engine.

Another clause provides that the at least one operating parameter achieving the safety threshold corresponds to detection of a fuel cell safety event of the fuel cell assembly and wherein the safety action comprises: reducing a fuel supply to the fuel cell assembly; and increasing a fuel supply to the combustion engine.

Another clause provides that the fuel cell safety event is a fire and wherein the safety action further comprises: shutting off the fuel supply to the fuel cell assembly; and flowing a purge gas through the fuel cell assembly.

Another clause provides that the safety action further comprises disconnecting a load from the fuel cell assembly.

Another clause provides that the at least one operating parameter achieving the safety threshold corresponds to detection of an overspeed event and wherein the safety action comprises: reducing a fuel supply to the combustion engine; and increasing output of the fuel cell assembly.

Another clause provides that the safety action further comprises: shutting off the fuel supply to the combustion engine; and transmitting a range message to a flight computer indicative of a maximum range of the fuel cell assembly.

Another clause provides that the at least one sensor comprises a hazardous gas detector, wherein the safety threshold comprises a maximum hazardous gas concentration, and wherein the safety action comprises at least one of: reducing a fuel supply to the fuel cell assembly; reducing an air supply to the fuel cell assembly; and reducing a load of the fuel cell assembly.

Another clause provides detecting, with a speed sensor of the combustion engine, a rotation speed of the combustion engine; determining that the rotation speed has achieved a rotation speed threshold, and wherein the safety action further comprises at least one of: shutting off the fuel supply to the fuel cell assembly; disconnecting the load from the fuel cell assembly; and increasing a rotation speed of the combustion engine when the rotation speed has achieved the rotation speed threshold.

Claims

1. A safety management system for an aircraft, the aircraft comprising a propulsion system including a fuel cell assembly and a combustion engine, the safety management system comprising: at least one sensor configured to detect at least one operating parameter of the propulsion system;a controller comprising a processor and memory storing instructions that when executed by the processor cause the controller to: determine that the at least one operating parameter has achieved a safety threshold; andexecute a safety action when the at least one operating parameter has achieved the safety threshold, wherein the safety action is configured to: control operation of the fuel cell assembly; andcontrol operation of the combustion engine.

2. The safety management system of claim 1, further comprising: a first sensor configured to detect at least one first operating parameter of the fuel cell assembly; anda second sensor configured to detect at least one second operating parameter of the combustion engine, wherein the processor is configured to determine that the safety threshold has been achieved based on any of:the at least one first operating parameter achieving a first threshold;the at least one second operating parameter achieving a second threshold; andthe at least one first operating parameter and the at least one second operating parameter achieving a combined threshold.

3. The safety management system of claim 1, wherein the safety action comprises: reducing output of one of the fuel cell assembly and the combustion engine; andincreasing output of the other of the fuel cell assembly and the combustion engine.

4. The safety management system of claim 3, wherein the at least one operating parameter achieving the safety threshold corresponds to detection of a fuel cell safety event of the fuel cell assembly and wherein the safety action comprises: reducing a fuel supply to the fuel cell assembly; andincreasing a fuel supply to the combustion engine.

5. The safety management system of claim 4, wherein the fuel cell safety event is a fire and wherein the safety action further comprises: shutting off the fuel supply to the fuel cell assembly;flowing a purge gas through the fuel cell assembly; anddisconnecting a load from the fuel cell assembly.

6. The safety management system of claim 3, wherein the at least one operating parameter achieving the safety threshold corresponds to detection of an overspeed event and wherein the safety action comprises: reducing a fuel supply to the combustion engine; andincreasing output of the fuel cell assembly.

7. The safety management system of claim 6, wherein the safety action further comprises: shutting off the fuel supply to the combustion engine; andtransmitting a range message to a flight computer indicative of a maximum range of the fuel cell assembly.

8. The safety management system of claim 1, wherein the at least one sensor comprises a hazardous gas detector, wherein the safety threshold comprises a maximum hazardous gas concentration, and wherein the safety action comprises at least one of: reducing a fuel supply to the fuel cell assembly;reducing an air supply to the fuel cell assembly; andreducing a load of the fuel cell assembly.

9. The safety management system of claim 8, wherein the safety action further comprises at least one of: shutting off the fuel supply to the fuel cell assembly;shutting off the air supply to the fuel cell assembly; andremoving the load of the fuel cell assembly.

10. The safety management system of claim 8, wherein the at least one sensor comprises a speed sensor of the combustion engine configured to detect a rotation speed of the combustion engine, wherein the processor is further configured to determine that the rotation speed has achieved a rotation speed threshold, and wherein the safety action further comprises increasing the rotation speed of the combustion engine to above the rotation speed threshold when the rotation speed has achieved the rotation speed threshold.

11. A method of operating a propulsion system of an aircraft, the propulsion system including a fuel cell assembly and a combustion engine, the method comprising: determining data indicative of at least one operating parameter of the propulsion system;determining that the at least one operating parameter has achieved a safety threshold;executing a safety action when the at least one operating parameter has achieved the safety threshold;controlling operation of the fuel cell assembly responsive to execution of the safety action; andcontrolling operation of the combustion engine responsive to execution of the safety action.

12. The method of claim 11, further comprising: detecting, with a first sensor, at least one first operating parameter of the fuel cell assembly; anddetecting, with a second sensor, at least one second operating parameter of the combustion engine,determining that the safety threshold has been achieved based on any of: the at least one first operating parameter achieving a first threshold;the at least one second operating parameter achieving a second threshold; andthe at least one first operating parameter and the at least one second operating parameter achieving a combined threshold.

13. The method of claim 11, wherein the safety action comprises: reducing output of one of the fuel cell assembly and the combustion engine; andincreasing output of the other of the fuel cell assembly and the combustion engine.

14. The method of claim 13, wherein the at least one operating parameter achieving the safety threshold corresponds to detection of a fuel cell safety event of the fuel cell assembly and wherein the safety action comprises: reducing a fuel supply to the fuel cell assembly; andincreasing a fuel supply to the combustion engine.

15. The method of claim 14, wherein the fuel cell safety event is a fire and wherein the safety action further comprises: shutting off the fuel supply to the fuel cell assembly; andflowing a purge gas through the fuel cell assembly.

16. The method of claim 15, wherein the safety action further comprises disconnecting a load from the fuel cell assembly.

17. The method of claim 13, wherein the at least one operating parameter achieving the safety threshold corresponds to detection of an overspeed event and wherein the safety action comprises: reducing a fuel supply to the combustion engine; andincreasing output of the fuel cell assembly.

18. The method of claim 17, wherein the safety action further comprises: shutting off the fuel supply to the combustion engine; andtransmitting a range message to a flight computer indicative of a maximum range of the fuel cell assembly.

19. The method of claim 11, wherein the determining data indicative of at least one operating parameter of the propulsion system is performed by a hazardous gas detector, wherein the safety threshold comprises a maximum hazardous gas concentration, and wherein the safety action comprises at least one of: reducing a fuel supply to the fuel cell assembly;reducing an air supply to the fuel cell assembly; andreducing a load of the fuel cell assembly.

20. The method of claim 19, further comprising: detecting, with a speed sensor of the combustion engine, a rotation speed of the combustion engine;determining that the rotation speed has achieved a rotation speed threshold, and wherein the safety action further comprises at least one of:shutting off the fuel supply to the fuel cell assembly;disconnecting the load from the fuel cell assembly; andincreasing a rotation speed of the combustion engine when the rotation speed has achieved the rotation speed threshold.