1. Introduction
According to statistical data of H
2 stations, the number and scale of global hydrogen filling stations will continue to grow, and it is expected that the number of global hydrogen filling stations will exceed 2000 by 2026, as shown in
Figure 1 [
1]. At the same time, China has also released a series of hydrogen filling station policies in recent years [
2]. In particular, in March 2022, the Development and Reform Commission had clearly proposed that a large number of hydrogen filling stations will be deployed before 2025 [
3].
The rapid construction and operation of hydrogen filling stations will inevitably produce a series of problems, the most important of which is safety risk. Gaseous hydrogen filling stations are built in large quantities in China. They usually consist of seven systems, among which high-pressure key facilities such as the pressurization system, hydrogen storage system and hydrogen filling system have complicated structures [
4,
5].
According to the statistics of 48 accident cases in hydrogen filling stations and joint construction stations, the accident causes include operation errors or improper maintenance, sealing problems, design problems, etc., as shown in
Figure 2 [
6].
The safety of high-pressure hydrogen storage tanks cannot be ignored. If leakage occurs, the amount of leakage will be large, which will lead to more serious consequences than with other equipment [
7,
8]. In the last five years, the U.S., Norway and South Korea have successively experienced a number of hydrogen explosion accidents, most of which were caused by the failure of high-pressure hydrogen storage devices; the details of the accidents are shown in
Table 1 [
9,
10,
11]. It can be seen that high-pressure hydrogen storage device accidents occur frequently, so it is urgent to conduct hazard identification and risk assessment for high-pressure hydrogen storage devices so as to provide safe technical support for the hydrogen storage device.
At present, more and more scholars are focusing on the safety of hydrogen filling stations. Li et al. studied the hazard impact distance of major accidents in hydrogen filling stations [
12]. Various types of accident consequences were assumed, including flash fire, jet fire, and cloud explosions in confined spaces. Zhao Wenqing conducted a comparative study of hydrogen filling stations in Asia, Europe, North America and other regions, and developed a risk-based algorithm to determine safe spacing, providing a basis for the scientific and reasonable formulation and revision of the safety spacing [
13]. Kikukawa et al. conducted a risk assessment of a 70 MPa hydrogen filling station in Japan, identifying 721 accident scenarios and calculating the consequences such as explosion pressure and jet fire, and the results show that a safety spacing of 6 m is sufficient [
14]. In addition, the international standard for risk management in hydrogen storage facilities is ISO 19880 “Risk Assessment and Management of Hydrogen Energy Infrastructure” [
15]. ISO 19880 specifies safety recommendations for the risk management of hydrogen refueling stations, mitigation measures to enhance system safety, safe distances for hydrogen exhaust ports and protection measures against non-hydrogen hazards. It defines minimum design, installation, commissioning, operation, inspection and maintenance requirements for the safety of hydrogen refueling stations. It can be seen that this standard is a relevant requirement from the design stage, so it is difficult to grasp the risk status of key facilities in the hydrogen filling station during operation, and it is difficult to put forward targeted risk management and control strategies.
Most of the above studies focus on safe design during the building period, but safety evaluation during the operation period is equally important [
16,
17]. The development of risk assessment technology for key facilities of hydrogen filling stations in China is still at a preliminary stage, and various risk analysis methods are not systematic enough. To this end, it is necessary to further develop a comprehensive risk assessment methodology and conduct detailed assessments of key facilities, so as to prevent the occurrence of uncontrolled risk factors.
In this study, by taking advantage of the connection coefficient algorithms and quintuple subtraction set pair potential, a comprehensive risk assessment methodology is proposed. Detailed procedures of the proposed methodology and related algorithms are shown in
Section 2. In
Section 3, a practical application of the proposed integrated risk evaluation methodology for hydrogen filling station is presented.
Section 4 presents the conclusions and recommendations of the study.
2. Procedures
The structure of the proposed methodology is shown in
Figure 3. The structure includes the construction of the failure risk indicator system, the determination of indicator weights based on the FAHP and CRITIC methods, the analysis of vulnerability and development trends of key risk indicators, and a final risk level eigenvalue judgement.
Among them, the failure indicator system is based on the comprehensive analysis of multi-source information factors, hazard identification and indicator screening. The FAHP–CRITIC combined weighting method can comprehensively consider the importance of expert experience and data factors. The quintuple subtraction set pair potential can diagnose the vulnerability indicators in basic events. The full partial connection coefficient can be used to identify trends in each indicator.
The overall risk status of high-pressure hydrogen storage tanks is determined by comprehensively analyzing the risk level eigenvalues and trends of the three types of connection coefficient algorithms for high-pressure hydrogen storage tanks.
2.1. Determination of Index Weight
2.1.1. FAHP
FAHP is a subjective weighting method based on the traditional AHP and fuzzy mathematics theory [
18,
19,
20]. Different from the traditional AHP method, FAHP needs to build a fuzzy complementary judgment matrix, obtain a fuzzy consistent matrix through mathematical transformation, and obtain the indicator weight using the row sum normalization method. The
n indicator factors
,
,
,...,
with the same affiliation at the same level are compared, and the importance scale is expressed by 1~9. The judgment matrix established is:
where
is the AHP importance scale of
and
relative to the upper layer factor, and
,
.
The elements in the fuzzy complementary judgment matrix are summed by rows, as follows:
The fuzzy consistent matrix
is obtained by mathematical transformation, and the calculation formula is as follows:
The elements in the fuzzy consistent matrix are summed by rows and normalized, and the index weight is as follows:
where
.
The
n-order eigenvalue matrix
is constructed using the weight vector, and the consistency indicator of the fuzzy judgment matrix and its eigenvalue matrix is used to test its consistency. The conditions to satisfy the consistency test are as follows:
where, when
, the judgment matrix has consistency, or else it needs to be reconstructed.
2.1.2. FAHP
CRITIC is an objective weighting method that uses the objective properties of the data for scientific evaluation [
21,
22]. It is a better method than the entropy weight method [
23,
24]. At present, the CRITIC method is widely used in risk assessment, and the method has certain advantages over the objective weighting method. The specific calculation steps are as follows.
Step 1: Contrast strength.
The contrast strength is expressed as the difference between samples within an indicator. The greater the contrast strength, the greater the corresponding weights. The contrast strength formula of the indicator is:
where
is data after standardization,
represents the contrast strength of the
jth index,
n is the number of samples, and
p is total number of indicators.
Step 2: Relevance.
The stronger the relevance between an indicator and other indicators, the smaller the conflict and the more the information is repeated. The formula for the relevance coefficient is:
where
is the relevance coefficient between the
jth indicator and other indicators, and
represents the relevance coefficient between the
ith indicator and the
jth indicator.
Step 3: Objective weight determination.
The objective weight formula is:
where
is the objective weight of the
jth indicator.
2.1.3. Combination Weighting Method Based on FAHP and CRITIC
The AHP and CRITIC are both widely used weight analysis methods [
25]. Among them, AHP relies too much on expert experience to score, and so it is more subjective. CRITIC is free from the constraint of subjectivity, but ignores the importance of indicator factors. In order to reasonably determine the indicator weights of hydrogen storage tank failure risk evaluation, this paper invokes combination assignment thinking to determine the index weights. It combines the advantages of a subjective weight method and objective weight method, taking into account both expert experience in indicator weights and actual objective data. Compared with traditional AHP weighting methods, it can better reflect the true weight values of various indicators.
To this end, it is necessary to determine the ratio of subjective weight and objective weight, so that the comprehensive weight can better reflect the importance difference between multiple evaluation indicators.
is the weight obtained according to the FAHP, and
is the weight obtained according to the CRITIC. The linear combination
W of the two weighting methods is:
In the above formula,
and
represent the weight distribution coefficients. In order to find the best comprehensive weight vector, it is necessary to find the optimal weight distribution coefficient to minimize the standard deviation between
W and the two groups of weight vectors, namely:
where
,
,
,
.
2.2. Connection Coefficient Algorithms Based on Set Pair Analysis Method
The set pair analysis method was first constructed by Zhao Keqin [
26,
27]. The general form of the evaluation sample connection coefficient, the evaluation indicator value connection coefficient and the average connection coefficient is:
where
a is the same parameter, b is the difference parameter, and
c is the opposing parameter,
a,
b,
c∈[0, 1], and
a +
b +
c = 1.
I is the difference parameter coefficient, the value range of which is [−1, 1]; sometimes it only serves as a difference marker.
J is the opposite parameter coefficient, which is defined as −1 and sometimes only serves as a sign of opposites.
2.2.1. Evaluation Sample Connection Coefficient
The evaluation sample connection coefficient is obtained according to the index number of each index value for the evaluation sample in the k-level evaluation grade [
28,
29]. The calculation formula of the evaluation sample connection coefficient is as follows:
where
is evaluation sample connection coefficient of sample
i.
I1,
I2 and
I3 are difference parameter coefficients.
J is the opposite parameter coefficient.
is the connection coefficient component of
.
is the weight of the
jth indicator. In addition,
n1,
n2,
n3,
n4, and
n5 are the number of indexes in which sample
i falls into each evaluation level, respectively.
2.2.2. Connection Coefficient of the Evaluation Indicator Value
Based on the proximity of the sample value
of indicator
j in the evaluation sample
i to the level of the evaluation criteria, the connectivity coefficient for the value of the evaluation indicator can be calculated [
30].
When the positive index
or the reverse index
,
When the positive index
or the reverse index
,
When the positive index
or the reverse index
,
When the positive index
or the reverse index
,
When the positive index
or the reverse index
,
In the above formula, the positive index indicates that the value of the index increases with the increase in the evaluation criterion level k and the negative index indicates that the value of the index decreases with the increase in the evaluation criterion level k. For positive indicators, , ,, , and are thresholds of levels 0, 1, 2, 3, and 4, respectively.
The connection coefficient can be used as a means of evaluating the proximity between the sample value
and the rating of the evaluation criteria
. The variable fuzzy relationship is a relative difference function and the corresponding relative membership
is:
After normalization, we can derive the connection coefficient component
of the evaluation index value, as shown in the following formula:
Then, the connection coefficient of the evaluation index value is:
Therefore, the connection coefficient of the evaluation index value for hydrogen storage tank assessment sample
i can be obtained, as follows:
2.2.3. Average Connection Coefficient of the Evaluation Sample
The average connection coefficient of the evaluation sample is:
The evaluation sample connection coefficient and the evaluation indicator value connection coefficient reflect the degree of correlation between the evaluation sample and the level of the evaluation criteria at the macro level and micro level, respectively, and the connection coefficients obtained by the two types are consistent in terms of the overall trend and distribution [
31].
The indicator value connection coefficient is obtained by fuzzy matching using the continuous proximity information between the indicator value of the evaluation sample and the level of the evaluation standard, and its distribution is more uniform than the connection coefficient of the index number based on the discrete value. In order to further optimize the reasonable distribution of connection coefficients and deeply analyze the correlation degree between evaluation samples and evaluation standard grades, the principle of minimum relative entropy is applied to couple the two kinds of connection coefficients.
2.2.4. Full Partial Connection Coefficient
The concept of a partial connectivity coefficient is based on set pair analysis [
32,
33]. The full partial connection coefficient
essentially describes the relatively determined development trend represented by the connection coefficient at the micro level, so it can be defined as:
where
and
are the difference coefficients of partially positive and partially negative connection coefficients, respectively. The value interval is [−1, 1], which can be generally determined by the ratio value method.
When the full partial connection coefficient is greater than zero, equal to zero or less than zero, the trend of the micro-level development expressed in terms of the connection coefficient can be diagnosed as positive development trend, critical trend or negative development trend, respectively. The indicator of negative development trend is the main factor causing the weakness of hydrogen storage tank.
2.3. Risk Level Eigenvalue Method
The risk level eigenvalue method can be used to calculate the risk level of the evaluation sample’s connection coefficient, the evaluation indicator value’s connection coefficient and the average connection coefficient [
34]. The calculation formula of risk level evaluation based on the level eigenvalue method is as follows:
2.4. Set Pair Potential
2.4.1. Division Set Pair Potential
The division set pair potential is calculated as follows:
When c is small, the division set pair potentials tend to be unstable [
35]. For example, the connection coefficients 6 + 0.06
I + 0.2
J and 6 + 0.06
I + 0.02
J have little difference, but their division set pair potential
values are 30 and 300, respectively, which contain very obvious differences [
36]. Moreover, the division set pair potential undergoes a large range of changes, so it is not easy to classify. Therefore, it is necessary to carefully analyze and apply the division set pair potential.
2.4.2. Quintuple Subtraction Set Pair Potential
The calculation formula for quintuple subtraction set pair potential is as follows:
The above formula is obtained from the set pair potential formula of ternary subtraction through empirical correction via practical applications [
37,
38]. Obviously,
. The numeric size between the subtraction set pair potentials can be compared directly based on the
, which greatly simplifies the tedious work of determining the order of the set pair potentials.
The subtraction set pair potential is divided into five potential levels, among which the reverse potential , partial reverse potential , equipotential , partial same potential , and same potential . Similarly, when , the indicator is the main factor leading to the poor grade of the evaluation object, and so it can be identified as a vulnerability indicator. Therefore, the vulnerability indicator that can be identified for hydrogen storage tank failure should be improved.
3. Application of the Proposed Methodology in the Hydrogen Filling Station
In order to verify the practicability and accuracy of the proposed risk assessment methodology, this paper takes a hydrogen filling station in China as an example for in-depth analysis. The hydrogen filling station covers an area of 880 square meters, and the maximum storage capacity in the station is 800 kg. The distribution of the equipment in the hydrogen filling station is shown in
Figure 4.
Hydrogen is transported into the station from the hydrogen source end by a hydrogen bundle truck, compressed to 45 MPa (high) pressure by a hydrogen compressor and stored in a 45 MPa hydrogen storage tank. A two-gun hydrogen filling machine at the filling island can fill hydrogen into cars and buses with a filling pressure of 35 MPa; the specific equipment details are shown in
Table 2. Since the hydrogen filling station has been in safe operation for 16 years, much of its equipment may be aging, so it is necessary to carry out risk assessment on some key equipment.
3.1. Construction of the Failure Risk Index System for the Hydrogen Storage Tank in a Hydrogen Filling Station
Due to the special geographical location, natural environment and special nature of the hydrogen filling station, the index system that affects the safe operation of the hydrogen storage tank should be established first. The indicators were screened according to the principles of specificity, representativeness and practicability of the objectives. Combined with relevant accident cases, experts experience and a large number of studies, the indicators were further screened. Based on multi-source data, a safe operation index system of a high-pressure hydrogen storage tank in the hydrogen filling station has been established, with five aspects: corrosion factor, material factor, environmental factor, system factor and human factor, as shown in
Figure 5.
3.2. Calculation of Index Weights Based on FAHP and CRITIC Method
Step 1: Determination of subjective weight based on FAHP.
The secondary indicators fuzzy complementary judgment matrix is constructed as follows:
The weight of the fuzzy judgment matrix
A is obtained through row summation, transformation and normalization. The weight of the fuzzy judgment matrix is as follows:
In order to test whether the weight of the fuzzy judgment matrix is reliable, a consistency test of the fuzzy judgment matrix is required. The n-order eigenvalue matrix
of the fuzzy judgment matrix is constructed using the weight vector, as follows:
After the consistency check, . This shows that the weight value meets the consistency requirement of the fuzzy judgment matrix.
Step 2: Determination of objective weight based on CRITIC
Five experts in hydrogen energy-related fields were invited to score the five secondary indicators
M1~
M5 respectively, and MATLAB R2018b software was used to calculate the standard deviation corresponding to the contrast strength and the correlation coefficient corresponding to the correlation, so as to obtain the final objective weight. The calculation results are shown in
Table 3.
Step 3: Determination of combination weight.
The combination weighting method can better reflect the importance difference between multiple evaluation indicators. According to the calculation methods of Formula (10)–(12) and
W1 and
W2 obtained in the first two steps, the following is obtained:
In order to obtain the minimum standard deviation of
W, this paper uses the enumeration method to solve it, and obtains the minimum standard deviation when the subjective weight proportion is 0.76, as shown in
Figure 6.
Therefore, the comprehensive weight
W is:
The weight calculation results show that for the second-level indicators
M1~
M5,
M1 and
M2 have the largest weights, and the weights of other indicators in descending order are
M4,
M3 and
M5. Similarly, according to the above method of calculating combination weights, the calculation results of basic event weights are shown in
Table 4.
3.3. Determination of Vulnerability and Development Trend of Key Risk Indicators
According to the actual situation of the site and expert experience, the evaluation indicators can be divided into five levels, namely, safe, relatively safe, basically safe, relatively dangerous and dangerous. The specific division scope of each grade is shown in
Table 5.
Five teams of professors in the fields of corrosion, materials, environment, business management and human–computer interaction were invited to score the relevant indicators. We substituted the expert evaluation data of the index into Formulae (16)–(24) to obtain the connection coefficient of the evaluation indicator value, then calculated the full partial connection coefficient from Formula (27), and finally calculated the subtraction set pair potential according to Formula (35). The specific calculation results are shown in
Table 6. As shown in
Table 6, the basic events X1, X3, X5, X6, X8, X9, X12 and X13 are in the opposite direction, which gives the vulnerability index of the high-pressure hydrogen storage tank in the hydrogen filling station. This is the main prevention and control object related to safety management to ensure that the risk level is controlled within an acceptable level.
At the same time, it can be found that the full partial connection coefficient and the subtraction set pair potential of the basic event have a high degree of similarity in
Figure 7. The main reason is that both can describe the uncertain state and development trend of indicators to a certain extent. Among them, the subtraction set pair potential focuses on identifying the uncertain state of each basic event, thereby identifying the vulnerable indicators. The full partial connection coefficient focuses on describing the development trend of each basic event.
Therefore, based on the identification of X1, X3, X5, X6, X8, X9, X12, and X13 vulnerability indicators, it can be found that the full partial correlation coefficients of vulnerability indicators are all less than 0, indicating a negative development trend. The sequence of negative development trends can be ranked as X5 > X13 > X3 > X6 = X9 > X1 > X12 > X8. Priority control should be given to installation quality, misoperation, material quality, natural disasters, internal corrosion, emergency planning, and air humidity and temperature, in order of priority.
3.4. Determination of Risk Level and Development Trend of High-Pressure Hydrogen Storage Tank
Based on the data in
Table 7 and the index weights in
Table 4, the final connection coefficient of the evaluation index number is obtained using Formulae (14) and (15). Then, the final connection of the evaluation index value can be obtained from Formulae (16)–(24), and we can obtain the final average connection coefficient of the evaluation sample from Formulae (25) and (26). Finally, we can determine the final risk level and development trend of a high-pressure hydrogen storage tank.
According to the comprehensive analysis of the three connection coefficients, the risk level of the high-pressure hydrogen storage tank is close to Level 3, which means it is basically safe. The subtraction set pair potential approaches 0.1 and is in equilibrium, indicating that the high-pressure hydrogen storage tank has a certain safety bearing capacity. The full partial connection coefficient approaches 0, indicating that the safety situation of high-pressure hydrogen storage tanks is undergoing a critical development trend.
Based on the above analysis results, it can be seen that the high-pressure hydrogen storage tank of the hydrogen filling station is at a medium risk level, and the risk development trend is in a critical state, as shown in
Table 7. It is necessary to strengthen control over weak indicators X1, X3, X5, X6, X8, X9, X12, and X13. After our investigation, we find the risk status of high-pressure hydrogen storage tanks is consistent with the actual situation on site, which confirms the effectiveness and practicality of the proposed method.
4. Conclusions
In order to establish a highly applicable risk assessment method for high-pressure hydrogen storage tanks in hydrogen filling stations, this paper proposes a comprehensive risk assessment methodology based on connection coefficient algorithms and quintuple subtraction set pair potential. The methodology mainly includes the FAHP–CRITIC combined weighting method, quintuple subtraction set pair potential, the full partial coefficient method and the risk level eigenvalue method.
The FAHP–CRITIC combined weighting method is a good method that can comprehensively consider the subjective experience and objective data, so it can effectively avoid the uncertainty caused by a single-type weighting method. In order to effectively deal with the uncertainty between evaluation indicators and evaluation criteria, a quintuple subtraction set pair potential algorithm is proposed, and it is used to identify the uncertainty state of each indicator of a high-pressure hydrogen storage tank. At the same time, the full partial connection coefficient can identify the development trend of each indicator.
The usability and validity of the methodology proposed in this study were verified through a case study on the risk encountered by high-pressure hydrogen storage tanks. The results show that the risk level of a high-pressure hydrogen storage tank in the hydrogen filling station is grade 3, the subtraction set pair potential approaches 0.1, and the full partial connection coefficient approaches 0. By comparing the result with the actual situation, we found that the result was consistent with the actual situation on site.
Compared with traditional risk assessment methods, the proposed risk assessment method not only identifies the risk level and weak indicators of the target, but also determines the development trend of each weak indicator. The risk assessment results are more accurate and specific, which can provide direction to guide site managers in risk control.