Clean Energy ECU

+49 89 189600 - 3322


The fuel tank control unit is supposed to control and monitor the following processes: refuelling, hydrogen supply to the engine, energy management of the on-board network, essential safety functions such as gas warning or boil-off function and reacting to malfunctions including an automatic emergency cal.


Customers benefit from a comprehensive development approach. It embraces all development stages from system design through prototyping. In software engineering, including software development, SILVER ATENA is a leading partner in auto code generation for all existing safety standards and criticality levels (SIL3 /ASIL D from Matlab/Simulink), including expedient software development processes, provision of seamless test and simulation systems as well as systems integration and qualification services and support services during the initial phases of series production.


  • Tank pressure control, LH2 tank
  • H2 gas concentration monitoring / warning
  • Monitoring of critical tank parameters and response to threshold values
  • Communication with engine control
  • Monitoring of the LH2 refuelling process
  • Driver information on system status
  • Communication with service centre

CleanEnergy Control Unit


SILVER ATENA was commissioned to develop a series control unit that is supposed to control and monitor refuelling and hydrogen supply to the engine of the hydrogen-operated BMW 7 Series. Another requirement demanded by the BMW Group is that common safety standards (SIL3 [A-SIL D] according to IEC 61508) shall be met. This corresponds to the highest requirements class in the automotive industry.


series production

a hydrogen-operated series car in everyday life situations