Preprint
Article

This version is not peer-reviewed.

Condition-Monitoring-Based Reliability and Profit Optimization of PEM Electrolyser: A Multi-State Semi-Markov Approach with Derated Operation and Logistics Delay

Submitted:

28 September 2026

Posted:

29 September 2026

You are already at the latest version

Abstract
Proton exchange membrane (PEM) water electrolysis is a key technology for converting renewable electricity into green hydrogen, and the availability of electrolyser stacks directly determines the hydrogen output and economics of such plants. This paper extends a previously reported ten-state semi-Markov reliability model of a PEM electrolyser into a twenty-state framework that better reflects field behavior. The extension adds a derated, partial-output operating state for each of four degradation mechanisms (membrane, electrode, chemical and thermal), a spares-waiting state that separates logistics delay from active repair, a scheduled preventive-maintenance branch, and a rare catastrophic-shock branch, all treated as competing risks at the operative state. Closed-form steady-state expressions are derived for availability, mean time to system failure (MTSF) and maintenance-crew busy periods. A delta-method procedure converts sensitivity coefficients into a confidence interval on availability, and a profit function balances hydrogen revenue against inspection, derating, logistics and repair costs. Using plant rates from a pilot-scale electrolyser and literature-informed values for the new parameters, the model gives a steady-state availability of 0.8804 (95% CI: 0.778–0.983), an MTSF of about 5270 h and an illustrative profit rate of $383.28/h. The results show that models omitting preventive maintenance and shock-type failures overstate electrolyser availability, with direct consequences for hydrogen supply planning and plant economics.
Keywords: 
;  ;  ;  ;  ;  ;  ;  ;  

I. Introduction

Green hydrogen produced by water electrolysis using renewable electricity is widely regarded as a key energy carrier for decarbonizing industry, heavy transport and long-duration energy storage [1,2]. Among electrolysis technologies, PEM electrolysers are favored for coupling with variable solar and wind power because of their fast dynamic response, compact design and high current density [2,3]. However, their stacks degrade through membrane thinning, catalyst loss, chemical contamination and thermal stress, and this degradation raises specific energy consumption and ultimately forces the unit out of service [4,5,6,7]. Every hour of downtime or reduced-capacity operation is an hour of lost hydrogen production and unused renewable electricity. The availability of an electrolyser is therefore not only a maintenance concern but a determinant of the cost and security of hydrogen supply. This is especially relevant in countries such as Oman, which has made green hydrogen a pillar of its energy transition strategy [8]. Reliable, data-driven models of electrolyser availability are needed to plan maintenance, size spare-part inventories and estimate the true production capacity of hydrogen plants.
Reliability modelling of hydrogen-generation systems has matured considerably over the last two decades, with Markov and semi-Markov processes remaining the dominant probabilistic tools for capturing transitions across operational states [9,10,11]. A recurring limitation in this body of work, however, is that component and subsystem degradation is almost always represented as a binary transition — a unit is either functioning or has failed — even though many electro-mechanical and electrochemical systems degrade gradually and continue to deliver reduced, rather than zero, output for extended periods [12,13]. Such models have recently begun to be applied to green-hydrogen plants, for example to the power-supply chain of electrolysers through a Bayesian continuous-time Markov chain [14], while a review of incidents in water-electrolysis plants found that reliability engineering is still little applied in the hydrogen sector despite the cost of unplanned downtime [15]. Reliability models of the electrolyser stack itself, which is where the degradation mechanisms act, remain scarce.
Reliability, availability and maintainability (RAM) studies across a wide range of industrial plants — desalination units [16,17,18], soft-water treatment [19], wastewater treatment [20], concrete and sugar processing [21,22], cable manufacturing and aluminium production [23,24,25,26,27,28], steam-turbine generators [29], power transformers [30,31], and power distribution networks [32] — have consistently demonstrated the practical value of structured multi-state reliability analysis for maintenance planning. Best-fit distribution selection for repair and restoration data has likewise been shown to materially improve the accuracy of reliability indices in complex installations [33,34]. A prior study by the present authors introduced a ten-state semi-Markov framework for PEM electrolyser that classified anomalies into membrane, electrode, chemical and thermal degradation states before transitioning to corresponding failed states, and benchmarked the probabilistic availability against ARIMA and Random Forest forecasts [35].
That earlier framework, while establishing the basic state architecture for electrolyser degradation, shares the binary-outcome limitation of the wider literature: it does not distinguish a partially degraded but still-producing system from a fully failed one, it does not separate the time a maintenance crew spends waiting for spare parts from the time actually spent repairing — a distinction long recognized in maintainability engineering as administrative and logistics delay time (ALDT) versus active corrective-maintenance time [36] — and it does not admit a sudden, non-degradation-path failure such as a common-cause electrical or pressure shock. The broader multi-state-systems literature has meanwhile developed the formal machinery for exactly this kind of graceful-degradation modelling [12,13,37], and has shown that rare shock-type failures competing with gradual degradation paths can be incorporated into a single stochastic framework without sacrificing tractability [13].
The present paper closes these gaps for the PEM electrolyser case. It extends the ten-state model of [35] into a twenty-state semi-Markov framework that (a) inserts a derated, partial-capacity operating state between each degradation state and its corresponding failed state; (b) inserts a spares-waiting state ahead of each active-repair state, so that logistics delay is estimated separately from repair duration; (c) introduces a scheduled preventive-maintenance branch competing with the anomaly-detection path at the operative state; and (d) introduces a rare catastrophic common-cause shock branch, also competing at the operative state. Beyond the state-space extension, this paper makes three further contributions absent from [35]: a delta-method procedure that converts rate-sensitivity coefficients into a defensible 95% confidence interval on steady-state availability; closed-form mean-time-to-system-failure (MTSF) expressions obtained through a regenerative argument; and a steady-state profit (cost-benefit) function that nets hydrogen-revenue accrual against inspection, derating, logistics and repair costs, in the spirit of profit-function formulations used elsewhere in the RAM literature [19,22,38].
The remainder of the paper is organized as follows. Section II summarizes the available plant data and the literature-informed assumed values used to instantiate the newly introduced states. Section III defines the extended state space and presents the transition diagram. Section IV derives the governing transition-probability, availability, MTSF and busy-period equations, each accompanied by its steady-state numerical evaluation. Section V develops the confidence-interval procedure. Section VI formulates the profit function. Section VII reports consolidated numerical results and discussion, and Section VIII concludes.

II. Data Summary

Table 1 reports the plant rates previously reported in [35], available from three years of pilot-scale PEM electrolyser maintenance records. Table 2 reports the assumed values used to instantiate the newly introduced states; because no field data yet exist for these parameters at the case-study plant, values are set within ranges reported for scheduled-maintenance cadence, shock-type competing-failure rates in multi-state systems [13], and spares logistics delay per maintainability guidance [36]. All numerical results in this paper (Sections IV–VII) are computed from Table 1 and Table 2 and should be read as illustrative of the framework rather than as validated plant-specific forecasts.

III. System Description and Extended State Space

A. Overview

Continuous monitoring of cell voltage, current, hydrogen production rate and temperature is assumed, as in [35]. Unlike the original model, the operative state S0 now competes among three mutually exclusive, exponentially distributed sojourn-terminating events: anomaly detection (rate α), the onset of a scheduled preventive-maintenance interval (rate δ), and a rare catastrophic shock (rate θ). Once an anomaly is confirmed, diagnostics classify it into one of four degradation states (S2–S5) exactly as in [35]. Each degradation state now feeds a derated operating state (S6–S9) representing continued, reduced-capacity hydrogen production — rather than an immediate jump to full failure — which subsequently feeds a spares-waiting state (S10–S13) and finally an active-repair state (S14–S17). All repair, preventive-maintenance and catastrophic-overhaul completions return the system to S0. The twenty states are summarised in Table 3. This graceful-degradation structure is consistent with experimental evidence that PEM stacks lose performance progressively rather than abruptly, at rates that depend on the operating mode and increase under intermittent operation [39,40].

B. Transition Diagram

Figure 1 gives a block schematic of the twenty states grouped by category and degradation mechanism, and Figure 2 shows the corresponding state-transition diagram with every rate marked on its edge; the meaning of each rate symbol is summarised in the legend of Figure 2 and in Table I. Solid arrows denote the anomaly-driven diagnostic path and its four mechanism-specific degradation→derated→waiting→repair chains; dashed arrows denote the rare catastrophic-shock branch. All repair states (S14–S17) and the catastrophic state S18 return the system directly to S0, as does the preventive-maintenance state S19.

C. Modelling Assumptions

(1) The system starts in S0. (2) Sojourn times at S0 for the three competing exit events are independent exponential random variables; the transition actually observed is the one with the shortest realised time (a standard competing-risks construction). (3) Diagnostic classification (S1 → S2–S5) follows the same probabilities pm, pe, pc, pt as in [35], with pm+pe+pc+pt = 1. (4) Within each degradation branch the progression degradation → derated → waiting → repair → operative is deterministic (transition probability 1 at each step), consistent with the physical picture that an unaddressed degradation mechanism worsens monotonically until repaired. (5) Preventive maintenance and catastrophic overhaul each return the system directly to S0. (6) Failure and shock inter-arrival times are exponential; repair, waiting and derated-operation sojourns may in general follow arbitrary distributions, which is why the process remains a semi-Markov process even though the numerical illustration in this paper uses exponential rates throughout for tractability, exactly as justified in [35].

IV. Mathematical Formulation

A. Notation Recap

Si, Sj denote states (i, j = 0 to 17, plus 18, 19); qij(t) and Qij(t) are as defined in the Notation section. © denotes the Laplace convolution operator. Ai(t) is the probability that the electrolyser is in an up (producing) state at time t given it was in Si at t = 0. Bi(t) is the probability that the maintenance crew is occupied (inspection, waiting, or active repair) at time t given the system was in Si at t = 0.

B. Transition Probability Densities

The competing-risks structure at S0 gives three simultaneous transition densities:
dQ01(t) = α e−αt dt
dQ0,19(t) = δ e−δt dt
dQ0,18(t) = θ e−θt dt
with branching probabilities obtained by integrating (1a)–(1c) over t and normalising by the total exit rate (α+δ+θ):
p 01   =   α α + δ + θ ,   p 0 , 19   =   δ α + δ + θ ,   p 0 , 18   =   θ α + δ + θ
Diagnostic classification from S1 follows the same form as [35], with destination j = 2, 3, 4, 5 and corresponding probability pj ∈ {pm, pe, pc, pt}:
dQ1j(t) = pj β e−βtdt
For each degradation mechanism k = 1 (membrane), 2 (electrode), 3 (chemical), 4 (thermal), the deterministic progression through derating, spares-waiting and active repair is governed by:
dQ deg ( k ) , der ( k ) ( t )   =   λ k   e − λ k t   dt
dQ der ( k ) , wait ( k ) ( t ) = λ' k   e − λ' k t   dt
dQ wait ( k ) , rep ( k ) ( t ) = ν k   e − ν k t   dt
dQ rep ( k ) , 0 ( t ) = γ k   e − γ k t   dt
where deg(k), der(k), wait(k), rep(k) denote the four mechanism-specific states in sequence (e.g., for k = 1 / membrane: S2 → S6 → S10 → S14), and λk, λ′k, νk, γk are the degradation-to-derated, derated-to-waiting, waiting-to-repair and repair-to-operative rates respectively. The preventive-maintenance and catastrophic branches close as:
dQ19,0(t) = ε e−εt dt, dQ18,0(t) = φ e−φt dt

C. Mean Sojourn Times

Using μi = E[sojourn time in Si], the sojourn times follow directly from (1)–(5):
μ 0   =   1 α + δ + θ ,   μ 1   =   1 / β ,   μ 19   =   1 / ε ,   μ 18   =   1 / φ
μdeg(k) = 1/λk, μder(k) = 1/λ'k, μwait(k) = 1/νk, μrep(k) = 1/γk (k = 1,…,4)

D. Steady-State Availability

Following the regenerative-process argument used for the base model [35], the probabilities Ai(t) satisfy a system of Markov-renewal integral equations whose Laplace transforms yield, after inversion at s → 0, the steady-state availability
A 0 = N 1 D 1
where the numerator equals the mean sojourn time at S0,
N1 = μ0
and the denominator sums, over one regeneration cycle, the mean time spent in every state weighted by the probability of actually visiting that state starting from S0:
D1 = μ0 + p01[ μ1 + pm · Bm + pe · Be + pc · Bc + pt · Bt ] + p0,19μ19 + p0,18μ18
with each branch term Bk (k = m, e, c, t) the sum of the four mechanism-specific sojourn times encountered from disturbance to repair completion:
Bk = μdeg(k) + μder(k) + μwait(k) + μrep(k)
Substituting the plant rates of Table 1 and the assumed rates of Table 2 into (6)–(10) gives μ0 = 629.37 h, D1 = 714.84 h, and hence the steady-state numerical outcome
A 0 = 629.37 714.84 = 0.8804
Equations (7)–(10) reduce exactly to Equation (12) of [35] when δ = θ = 0 and μder(k) = μwait(k) = 0 for all k, confirming that the original ten-state model is the special case of the present framework in which no preventive maintenance, no catastrophic shocks, and no derated or logistics-delay states are recognized.

E. Mean Time to System Failure

Treating the four active-repair states and the catastrophic state as momentarily absorbing (i.e., computing the expected time to first reach a state requiring active intervention), a regenerative argument analogous to (7)–(10) gives, for each mechanism k, the expected time to reach the corresponding repair state,
Tk = μdeg(k) + μder(k) + μwait(k) (k = m, e, c, t)
which combine at S1 as
T1 = μ1 + pm · Tm + pe · Te + pc · Tc + pt · Tt
and, accounting for the fact that a preventive-maintenance excursion is a renewal that does not itself count toward failure,
T 0 = μ 0 + p 01 T 1 1 − p 0 , 19
where T0 is the mean time to system failure (MTSF). Substituting the parameter values of Table 1 and Table 2 gives T1 = 5,915.4 h and, since p0,19 = 0.8741 and p01 = 0.0944, the steady-state numerical outcome
T 0 = 629.37 + 0.0944 × 5 , 915.4 1 − 0.8741   ≈   5 , 269.6   h   ≈   219.6   days

F. Maintenance-Crew Busy Periods

By the same regenerative argument, the steady-state fraction of time the maintenance crew spends in any state Sj is the product of the probability of reaching Sj from S0 in one cycle and the mean sojourn time at Sj, normalised by D1:
Bj = (path − probability to Sj) × μj / D1
Applied to the preventive-maintenance and catastrophic branches, (14) gives
Bpm = p0,19μ19 / D1 = 0.004891, Bcat = p0,18μ18 / D1 = 0.010565
and, for the membrane branch (k = m) taken as a worked example, (14) decomposes into four separately identifiable busy-period contributions:
Bdeg(m) = 0.019810, Bder(m) = 0.003962, Bwait(m) = 0.001902, Brep(m) = 0.016508
Equation (14) recovers the busy-period expressions of [35] (their Equation (13)) when applied to S1 through S4, and additionally yields separate busy-period contributions for derated operation, spares-waiting and active repair for every mechanism — the maintainability distinction absent from the base model. The full set of busy-period fractions for all four mechanisms is reported in Table 5 (Section VII).

V. Confidence-Interval Estimation

Reliability rates estimated from a finite maintenance record (r̂ = n/T, with n observed events over exposure time T) carry sampling uncertainty that a point estimate of A0 conceals. Rather than introduce a separate variance model, this paper reuses the partial-derivative (sensitivity) coefficients already computed for RAM sensitivity analysis — e.g., ∂A0/∂α, ∂A0/∂λk — as the ingredients of a first-order (delta-method) variance propagation.
For an exponential-rate MLE r̂ = n/T, the asymptotic variance is
Var(r̂) ≈ r̂2 / n
Treating the rate parameters as approximately independent, the delta method gives
Var A 0 ≈   ∑ i ∂ A 0 / ∂ r i 2   Var r i
and the corresponding 95% confidence interval for steady-state availability is
A 0   ±   1.96   Var ( A 0 )
Evaluating (15)–(17) numerically (Table 6, Section VII) with illustrative observed-event counts consistent with a 3-year maintenance record gives Var(A0) = 2.748×10⁻³, so that the steady-state numerical outcome is
0.8804   ±   1.96 2.748 × 10 − 3 = 0.8804   ±   0.1027
i.e., a 95% confidence interval of A0 ∈ [0.778, 0.983]. The partial derivatives in (16) are obtained here by numerical (finite-difference) perturbation of (7)–(10) about the baseline rates, which reduces to the analytical sensitivity coefficients of [35] in the limiting case of the original ten-state model. Where the exponential-MLE assumption in (15) is judged too strong — for instance where repair-time data are visibly non-exponential — a non-parametric bootstrap over the maintenance log (resampling repair/failure records with replacement and recomputing A0 many times) is recommended as a robustness check; it requires no distributional assumption but is not pursued numerically in this paper.

VI. Cost-Benefit (Profit) Model

Following the profit-function convention used elsewhere in the RAM literature [19,22,38], a steady-state profit rate is defined by netting the revenue accrued while the plant is fully operative against the cost rate of every non-productive activity:
P   =   K 0 A 0   −   K pm · B pm   −   K cat · B cat   −   ∑ k [   K d , k · B der ( k )   +   K w , k · B wait ( k )   +   K r , k · B rep ( k )   ]
where K0 is the revenue rate accrued per unit time of full-capacity hydrogen production; Kpm and Kcat are the cost rates of preventive maintenance and catastrophic overhaul respectively; and for each mechanism k, Kd,k, Kw,k and Kr,k are, respectively, the revenue-loss-equivalent cost of derated operation, the spares-logistics holding cost, and the active-repair cost rate. Because the derated states now carry their own (reduced) revenue term implicitly through Kd,k rather than being counted as full downtime, Equation (18) is a genuine improvement over a two-state up/down costing model. Because the revenue rate can be written as K0 = ṁH2·cH2, where ṁH2 is the rated hydrogen output of the stack (kg/h) and cH2 is the hydrogen sale price ($/kg), the illustrative value K0 = $500/h corresponds, for example, to a stack producing 100 kg/h of hydrogen sold at $5/kg; plant-specific values of ṁH2 and cH2 can be substituted directly. Substituting the illustrative cost rates of Table 7 (Section VII) into (18) gives the steady-state numerical outcome
P = 440.22 − 0.20 − 15.85 − 14.43 − 14.07 − 7.66 − 4.73 ≈ $383.28 / h

VII. Numerical Results and Discussion

Sections IV–VI derived the governing equations and evaluated each symbolically alongside its steady-state numerical outcome, using the plant rates of Table 1 and the assumed rates of Table 2. This section consolidates those outcomes and discusses their implications.

A. Availability, MTSF and Busy Periods

Table 4 summarises the steady-state indices obtained from (7)–(14). The availability of 0.8804 is lower than the 0.9115 reported for the ten-state model in [35]; the reduction is attributable entirely to the two branches absent from the earlier model — scheduled preventive maintenance and catastrophic overhaul — which together account for roughly 1.5% of system time even though each individual event is either brief (PM) or rare (catastrophic shock). This illustrates the paper’s central methodological point: a purely corrective-maintenance, binary-state model systematically overstates availability by omitting classes of downtime that do not arise from gradual degradation.
Table 4. STEADY-STATE RESULTS.
Table 4. STEADY-STATE RESULTS.
Index Value
A0 (steady-state availability) 0.8804
95% CI for A0 (delta method) [0.7777, 0.9832]
MTSF 5269.6 h ≈ 219.6 days ≈ 0.60 yr
Bpm (PM busy fraction) 0.004891
Bcat (catastrophic busy fraction) 0.010565
B1 (diagnostic busy fraction) 0.000088
Table 5. BUSY-PERIOD FRACTIONS BY DEGRADATION MECHANISM (SUM OF ALL 20-STATE FRACTIONS = 1.000).
Table 5. BUSY-PERIOD FRACTIONS BY DEGRADATION MECHANISM (SUM OF ALL 20-STATE FRACTIONS = 1.000).
Mechanism Degradation Derated Waiting (logistics) Active repair
Membrane 0.019810 0.003962 0.001902 0.016508
Electrode 0.001321 0.001057 0.001268 0.022968
Chemical 0.001057 0.000880 0.000951 0.010565
Thermal 0.013206 0.001651 0.000317 0.006603
The electrode branch shows the largest active-repair busy fraction (0.0230), consistent with its comparatively high base failure rate λ2 = 0.04/h carried over from [35]; the membrane branch shows the largest single degradation-state occupancy, reflecting its long characteristic degradation sojourn (1/λ1 = 500 h). Separating waiting from repair (columns 4 and 5) shows that, under the assumed logistics rates, active repair dominates the crew’s time for every mechanism — i.e., the case-study plant is not spares-constrained under the assumed νk values, a conclusion that could not have been drawn from the original model, where waiting and repair were conflated.
Expressed in production terms, A0 = 0.8804 means that the electrolyser runs at full rated output for about 7,712 h of an 8,760-h year and below rated output for about 1,048 h. From Table 4 and Table 5, roughly 496 h of this time is spent in active repair, 310 h in diagnosed degradation states, 93 h in catastrophic overhaul, 66 h in derated operation, 43 h in preventive maintenance and 39 h awaiting spares. For a stack with rated hydrogen output ṁH2 (kg/h) and specific energy consumption e (kWh/kg), the forgone hydrogen is therefore at most about 1,048·ṁH2 kg per year, less the partial output delivered in the degradation and derated states, and the renewable electricity that cannot be converted is correspondingly about 1,048·ṁH2·e kWh per year. This links the reliability indices directly to hydrogen supply and to the use of renewable generation.

B. Confidence Interval

Table 6 lists the largest contributors to Var(A0) under (15)–(16), using illustrative observed-event counts n consistent with a 3-year (≈ 26,280 h) record. The degradation-onset rate α dominates the uncertainty budget by roughly an order of magnitude over every other parameter, mirroring its dominance in the sensitivity analysis of [35] and confirming that the delta-method reuse of sensitivity coefficients is not merely a computational convenience but tracks the same parameter that already mattered most physically. The resulting 95% confidence interval, A0 ∈ [0.778, 0.983], is wide relative to the point estimate — a direct and honest consequence of the small number of degradation events (assumed n = 4) observed for α over three years, and an argument for continued data collection rather than over-interpreting the point estimate alone.
Table 6. DOMINANT CONTRIBUTORS TO Var(A0) (ILLUSTRATIVE n).
Table 6. DOMINANT CONTRIBUTORS TO Var(A0) (ILLUSTRATIVE n).
Parameter ∂A0/∂r Assumed n Contribution to Var(A0)
α −611.09 4 2.101×10⁻³
θ −186.04 1 8.65×10⁻⁵
φ 2.23 1 8.65×10⁻⁵
λ1 8.72 2 1.52×10⁻⁴
λ4 11.63 1 1.35×10⁻⁴
γ1 6.06 2 1.06×10⁻⁴
γ2 8.79 15 2.73×10⁻⁵

C. Cost-Benefit (Profit) Evaluation

Table 7 evaluates (18) using illustrative hydrogen-revenue and maintenance-cost rates. The catastrophic-overhaul term, despite the rare occurrence of S18, is the single largest cost contributor after full-capacity revenue, because its cost rate Kcat is set an order of magnitude above routine repair costs to reflect major-overhaul scope — underscoring that low-probability, high-cost events can dominate a profit function even when they contribute little to the availability figure itself. The resulting steady-state profit rate is P ≈ $383.28 per hour, roughly 13% below the K0A0 revenue-only figure of $440.22 per hour, quantifying the aggregate cost of maintaining the plant under the assumed cost structure.
Table 7. PROFIT-FUNCTION EVALUATION (ILLUSTRATIVE COST RATES).
Table 7. PROFIT-FUNCTION EVALUATION (ILLUSTRATIVE COST RATES).
Term Assumed rate Contribution ($/h)
K0·A0 (revenue) $500/h +440.22
Kpm·Bpm $40/h −0.20
Kcat·Bcat $1,500/h −15.85
Membrane derating+wait+repair $300/$20/$800 per h −14.43
Electrode derating+wait+repair $250/$20/$600 per h −14.07
Chemical derating+wait+repair $280/$20/$700 per h −7.66
Thermal derating+wait+repair $260/$20/$650 per h −4.73
Summing up, all contributions in Table 7 give P = 440.22 − 0.20 − 15.85 − 14.43 − 14.07 − 7.66 − 4.73 ≈ $383.28 per hour, consistent with the abstract.

D. Implications for Renewable-Coupled Operation

The rates in Table 1 come from a pilot plant and are treated as constant. In practice, PEM electrolysers coupled directly to solar or wind power undergo frequent part-load operation and start–stop cycles, which accelerate degradation [2,41,42]. A recent simulation for Muscat found that high, stable irradiance nearly doubled annual hydrogen yield relative to a temperate site, but at the cost of faster stack degradation [8]. A study of a 1 MW PEM system coupled to a PV farm likewise noted that techno-economic models rarely account for how the operating mode affects stack and system lifetime [1]. Within the present framework these effects can be represented by making the degradation-onset rate α and the progression rates λk and λ′k functions of the load profile, for example through site-specific or seasonal rate sets. Because α dominates both the sensitivity and the uncertainty budget (Section VII-B), such an extension would be expected to have the largest effect on availability and profit for renewable-coupled plants in hot, high-irradiance regions such as Oman.

VIII. Conclusions

This paper extended a previously reported ten-state semi-Markov reliability model for PEM electrolyser into a twenty-state framework that recognizes derated partial-capacity operation, separates spares-logistics delay from active repair, and admits both scheduled preventive maintenance and rare catastrophic shocks through a competing-risks formulation at the operative state. Closed-form steady-state expressions were derived for availability, mean time to system failure and maintenance busy periods, and were shown to reduce exactly to the original model as a special case. A delta-method procedure was introduced that reuses standard RAM sensitivity coefficients to place a defensible confidence interval on availability without requiring new data-collection machinery, and a steady-state profit function was formulated that separates revenue-bearing derated operation from complete outage. Using the previously available plant rates together with literature-informed assumed values, the extended model produced a lower, and arguably more realistic, availability estimate (0.8804 versus 0.9115) together with a quantified uncertainty band and an explicit economic evaluation. Expressed in production terms, the model attributes about 1,048 h per year below rated output to the downtime classes it represents, which translates directly into forgone hydrogen and unconverted renewable electricity. Future work should replace the assumed parameters of Table 2 with field-measured logistics, preventive-maintenance and shock-rate data as they become available and should validate the exponential-MLE variance assumption in (15) against a bootstrap analysis once a sufficiently long maintenance record has accumulated. It should also make the degradation rates depend on the renewable load profile, so that the framework can be applied to electrolysers coupled directly to solar or wind generation.

Acknowledgments

The authors acknowledge the Ministry of Higher Education, Research and Innovation, Sultanate of Oman, for financial support under grant number BFP/RGP/EI/23/348.

Notation and Acronyms

LIST OF SYMBOLS
Symbol Meaning
Si, Sj System states, i, j = 0 to 19 (see Table 1)
qij(t), Qij(t) Transition probability density function and cumulative distribution function from Si to Sj
© Laplace convolution operator
Ai(t) Probability the system is in an up (producing) state at time t, given Si at t = 0
Bi(t) Probability the maintenance crew is occupied at time t, given Si at t = 0
μi Mean sojourn time in state Si
α Rate of anomaly detection (degradation onset) at S0
β Rate of diagnostic inspection at S1
δ, ε Rate of scheduled preventive-maintenance onset and completion
θ, φ Rate of catastrophic shock onset and overhaul completion
λk Degradation-to-derated rate for mechanism k (k = 1 membrane, 2 electrode, 3 chemical, 4 thermal)
λ′k Derated-to-waiting (further progression) rate for mechanism k
νk Waiting-to-repair rate for mechanism k (inverse of logistics delay)
γk Repair-to-operative rate for mechanism k
pm, pe, pc, pt Diagnostic classification probabilities (membrane, electrode, chemical, thermal); sum to 1
p01, p0,19, p0,18 Branching probabilities of the competing-risks exit from S0
A0 Steady-state system availability
N1, D1 Numerator and denominator of the steady-state availability expression
T0 Mean time to system failure (MTSF)
Bpm, Bcat Steady-state busy-period fraction for preventive maintenance and catastrophic overhaul
K0 Revenue rate accrued per unit time of full-capacity hydrogen production
Kpm, Kcat Cost rate of preventive maintenance and catastrophic overhaul
Kd,k, Kw,k, Kr,k Cost rate of derated operation, spares-logistics holding, and active repair for mechanism k
P Steady-state profit rate
LIST OF ACRONYMS
Acronym Meaning
PEM Proton Exchange Membrane
RAM Reliability, Availability and Maintainability
MTSF Mean Time to System Failure
MTTR Mean Time To Repair
ALDT Administrative and Logistics Delay Time
CI Confidence Interval
MLE Maximum Likelihood Estimate
PM Preventive Maintenance
H₂ Hydrogen

References

  1. B. Endrődi, C. A. Trapp, I. Szén, I. Bakos, M. Lukovics, and C. Janáky, “Challenges and opportunities of the dynamic operation of PEM water electrolyzers,” Energies, vol. 18, no. 9, Art. no. 2154, 2025. [CrossRef]
  2. H. Sayed-Ahmed, I. Toldy, and A. Santasalo-Aarnio, “Dynamic operation of proton exchange membrane electrolyzers—Critical review,” Renew. Sustain. Energy Rev., vol. 189, Art. no. 113883, 2024. [CrossRef]
  3. M. Carmo, D. L. Fritz, J. Mergel, and D. Stolten, “A comprehensive review on PEM water electrolysis,” Int. J. Hydrogen Energy, vol. 38, no. 12, pp. 4901–4934, 2013.
  4. Q. Feng, X. Z. Yuan, G. Liu, B. Wei, Z. Zhang, H. Li, and H. Wang, “A review of proton exchange membrane water electrolysis on degradation mechanisms and mitigation strategies,” J. Power Sources, vol. 366, pp. 33–55, 2017. [CrossRef]
  5. E. Wallnöfer-Ogris, I. Grimmer, M. Ranz, M. Höglinger, S. Kartusch, J. Rauh, M. G. Macherhammer, B. Grabner, and A. Trattner, “A review on understanding and identifying degradation mechanisms in PEM water electrolysis cells: Insights for stack application, development, and research,” Int. J. Hydrogen Energy, vol. 65, pp. 381–397, 2024. [CrossRef]
  6. F. N. Khatib, T. Wilberforce, O. Ijaodola, E. Ogungbemi, Z. El-Hassan, A. Durrant, J. Thompson, and A. G. Olabi, “Material degradation of components in polymer electrolyte membrane (PEM) electrolytic cell and mitigation mechanisms: A review,” Renew. Sustain. Energy Rev., vol. 111, pp. 1–14, 2019. [CrossRef]
  7. S. Siracusano, N. Van Dijk, R. Backhouse, L. Merlo, V. Baglio, and A. S. Aricò, “Degradation issues of PEM electrolysis MEAs,” Renew. Energy, vol. 123, pp. 52–57, 2018.
  8. M. Al-Mandhari and A. Ghosh, “Modelling solar intermittency effects on PEM electrolyser performance & degradation: A comparison of Oman and UK,” Energies, vol. 18, no. 23, Art. no. 6131, 2025. [CrossRef]
  9. M. Tanrioven and M. S. Alam, “Reliability modeling and analysis of stand-alone PEM fuel cell power plants,” Renewable Energy, vol. 31, no. 6, pp. 915–933, 2006.
  10. T. D. Wiles, “Reliability of numerical modelling predictions,” Int. J. Rock Mech. Min. Sci., vol. 43, no. 3, pp. 454–472, 2006.
  11. S. M. Rizwan, “Reliability modeling strategy of an industrial system,” in Proc. Int. Conf. Availability, Reliability and Security, Vienna, Austria, 2006, pp. 625–630.
  12. A. Lisnianski and G. Levitin, Multi-State System Reliability: Assessment, Optimization and Applications. Singapore: World Scientific, 2003.
  13. W. Li and H. Pham, “Reliability modeling of multi-state degraded systems with multi-competing failures and random shocks,” IEEE Trans. Reliab., vol. 54, no. 2, pp. 297–303, 2005.
  14. S. Swati, R. Gupta, and P. Chaudhary, “Stochastic reliability modeling of power supply chain for green hydrogen electrolyzers using Bayesian-CTMC,” Reliab. Eng. Syst. Saf., vol. 275, Art. no. 112806, 2026. [CrossRef]
  15. F. Y. Tuhi, M. Bucelli, and Y. Liu, “Technical failures in green hydrogen production and reliability engineering responses: Insights from database analysis and a literature review,” Int. J. Hydrogen Energy, vol. 94, pp. 608–625, 2024.
  16. N. Padmavathi, S. M. Rizwan, A. Pal, and G. Taneja, “Probabilistic analysis of an evaporator of a desalination plant with priority for repair over maintenance,” Int. J. Sci. Stat. Comput., vol. 4, no. 1, pp. 1–9, 2013.
  17. S. M. Rizwan, N. Padmavathi, A. Pal, and G. Taneja, “Reliability analysis of a seven-unit desalination plant with shutdown during winter season and repair/maintenance on FCFS basis,” Int. J. Performability Eng., vol. 9, no. 5, pp. 523–528, 2013.
  18. N. Padmavathi, S. M. Rizwan, and A. Senguttuvan, “Comparative analysis between the reliability models portraying two operating conditions of a desalination plant,” Int. J. Core Eng. Manag., vol. 1, no. 12, pp. 1–10, 2015.
  19. A. Kumar, R. Singh, M. Saini, and O. Dahiya, “Reliability, availability, and maintainability analysis to improve the operational performance of soft water treatment and supply plant,” J. Eng. Sci. Technol. Rev., vol. 13, no. 5, pp. 183–192, 2020.
  20. S. M. Rizwan, J. V. Thanikal, and M. Torrijos, “A general model for reliability analysis of a domestic wastewater treatment plant,” Int. J. Cond. Monit. Diagn. Eng. Manag., vol. 17, no. 3, pp. 3–6, 2014.
  21. A. Kumar, M. Saini, and S. C. Malik, “Stochastic modeling of a concrete mixture plant with preventive maintenance,” Int. J. Eng. Sci. Technol. Rev., vol. 13, no. 5, pp. 183–192, 2014.
  22. A. K. Aggarwal, S. Kumar, and V. Singh, “Mathematical modeling and reliability analysis of the serial processes in feeding system of a sugar plant,” Int. J. Syst. Assur. Eng. Manag., 2015.
  23. S. Z. Taj, S. M. Rizwan, B. Alkali, D. Harrison, and G. Taneja, “Reliability analysis of a single machine subsystem of a cable plant with six maintenance categories,” Int. J. Appl. Eng. Res., vol. 12, no. 8, pp. 1752–1757, 2017.
  24. Y. Al Rahbi, S. M. Rizwan, B. Alkali, A. Cowel, and G. Taneja, “Reliability analysis of rodding anode plant in aluminium industry,” Int. J. Appl. Eng. Res., vol. 12, no. 16, pp. 5616–5623, 2017.
  25. S. Z. Taj, S. M. Rizwan, B. Alkali, D. Harrison, and G. Taneja, “Reliability analysis of a 3-unit subsystem of a cable plant,” Adv. Appl. Stat., vol. 52, no. 6, pp. 413–429, 2018.
  26. S. Z. Taj, S. M. Rizwan, B. Alkali, D. Harrison, and G. Taneja, “Performance analysis of a rod breakdown system,” Int. J. Eng. Technol. (UAE), vol. 7, no. 3.4, pp. 243–248, 2018.
  27. Y. Al Rahbi, S. M. Rizwan, B. Alkali, A. Cowel, and G. Taneja, “Reliability analysis of a rodding anode plant in aluminum industry with multiple units failure and single repairman,” Int. J. Syst. Assur. Eng. Manag., vol. 10, pp. 97–109, 2019.
  28. S. Z. Taj, S. M. Rizwan, B. Alkali, D. Harrison, and G. Taneja, “Three reliability models of a building cable manufacturing plant: a comparative analysis,” Int. J. Syst. Assur. Eng. Manag., vol. 11, pp. 239–246, 2020.
  29. N. Gupta, A. Kumar, and M. Saini, “Reliability and maintainability investigation of generators in steam turbine power plant using RAMD analysis,” J. Phys.: Conf. Ser., vol. 1714, no. 1, p. 012009, 2021.
  30. N. Al Balushi, S. M. Rizwan, S. Z. Taj, and W. Al Khairi, “Reliability analysis of power transformers of a power distribution company,” Int. J. Syst. Assur. Eng. Manag., vol. 15, pp. 1735–1742, 2024.
  31. N. Al Balushi, W. Al Khairi, S. M. Rizwan, and S. Z. Taj, “Estimation of reliability parameters for power transformers,” J. Mech. Contin. Math. Sci., vol. 19, no. 11, pp. 144–156, 2024.
  32. S. M. Rizwan, S. Tanavade, K. Sachdeva, and S. Z. Taj, “Reliability, availability, and sensitivity analysis of a power distribution system,” Reliab. Theory Appl., vol. 11, no. 4, Mar. 2025.
  33. S. Z. Taj and S. M. Rizwan, “Estimation of reliability indices of a complex industrial system using best-fit distributions for repair/restoration times,” Int. J. Adv. Res. Eng. Technol., vol. 12, no. 2, pp. 132–146, 2021.
  34. S. Z. Taj and S. M. Rizwan, “Comparative analysis between three reliability models of a two-unit complex industrial system,” J. Adv. Res. Appl. Sci. Eng. Technol., vol. 30, no. 2, pp. 243–254, 2023.
  35. R. Syed Mohd, S. Walke, and S. Z. Taj, “Assessing the reliability of PEM electrolysers for green hydrogen generation: using probabilistic approach & compared with AI model,” in Proc. 9th Int. Conf. Syst. Reliab. Saf. (ICSRS), 2025, pp. 604–609.
  36. MIL-HDBK-472, Military Standardization Handbook: Maintainability Prediction. Washington, DC: U.S. Department of Defense, 1966 (Notice 1, 1984).
  37. G. Levitin and A. Lisnianski, “Importance and sensitivity analysis of multi-state systems using the universal generating function method,” Reliab. Eng. Syst. Saf., vol. 65, no. 3, pp. 271–282, 1999.
  38. S. Z. Taj, S. M. Rizwan, B. M. Alkali, D. K. Harrison, and G. Taneja, “Probabilistic modeling and analysis of a cable plant subsystem with priority to repair over preventive maintenance,” i-manager’s J. Math., vol. 6, no. 3, pp. 12–21, 2017.
  39. S. H. Frensch, F. Fouda-Onana, G. Serre, D. Thoby, S. S. Araya, and S. K. Kær, “Influence of the operation mode on PEM water electrolysis degradation,” Int. J. Hydrogen Energy, vol. 44, no. 57, pp. 29889–29898, 2019. [CrossRef]
  40. A. Weiß, A. Siebel, M. Bernt, T.-H. Shen, V. Tileli, and H. A. Gasteiger, “Impact of intermittent operation on lifetime and performance of a PEM water electrolyzer,” J. Electrochem. Soc., vol. 166, no. 8, pp. F487–F497, 2019. [CrossRef]
  41. E. Nguyen, P. Olivier, M.-C. Pera, E. Pahon, and R. Roche, “Impacts of intermittency on low-temperature electrolysis technologies: A comprehensive review,” Int. J. Hydrogen Energy, vol. 70, pp. 474–492, 2024. [CrossRef]
  42. E. Kuhnert, K. Mayer, M. Heidinger, C. Rienessel, V. Hacker, and M. Bodner, “Impact of intermittent operation on photovoltaic-PEM electrolyzer systems: A degradation study based on accelerated stress testing,” Int. J. Hydrogen Energy, vol. 55, pp. 683–695, 2024. [CrossRef]
Figure 1. Block schematic of the extended 20-state PEM electrolyser model: operative (S0), diagnostic (S1), preventive-maintenance (S19) and catastrophic-shock (S18) states, and the four mechanism-specific degradation → derated → spares-waiting → active-repair chains (S2–S17).
Figure 1. Block schematic of the extended 20-state PEM electrolyser model: operative (S0), diagnostic (S1), preventive-maintenance (S19) and catastrophic-shock (S18) states, and the four mechanism-specific degradation → derated → spares-waiting → active-repair chains (S2–S17).
Preprints 235548 g001
Figure 2. State-transition diagram of the extended 20-state PEM electrolyser model with the transition rate marked on every edge (α, pjβ, λk, λ′k, νk, γk, δ, ε, θ, φ); dashed arrows denote the rare catastrophic-shock branch.
Figure 2. State-transition diagram of the extended 20-state PEM electrolyser model with the transition rate marked on every edge (α, pjβ, λk, λ′k, νk, γk, δ, ε, θ, φ); dashed arrows denote the rare catastrophic-shock branch.
Preprints 235548 g002
Table 1. AVAILABLE RATES (FROM [35], /HOUR UNLESS NOTED).
Table 1. AVAILABLE RATES (FROM [35], /HOUR UNLESS NOTED).
Parameter Value Source / meaning
α 0.00015 Rate of PEM degradation onset (available, [35])
β 1.5 Rate of diagnostic inspection (available, [35])
λ1 (mem.) 0.002 Degradation→derated rate (available, [35])
λ2 (elec.) 0.04 Degradation→derated rate (available, [35])
λ3 (chem.) 0.025 Degradation→derated rate (available, [35])
λ4 (therm.) 0.001 Degradation→derated rate (available, [35])
γ1 (mem.) 0.0024 Repair→operative rate (available, [35])
γ2 (elec.) 0.0023 Repair→operative rate (available, [35])
γ3 (chem.) 0.0025 Repair→operative rate (available, [35])
γ4 (therm.) 0.002 Repair→operative rate (available, [35])
pm, pe, pc, pt 0.3, 0.4, 0.2, 0.1 Diagnostic classification probabilities (available, [35])
Table 2. ASSUMED RATES FOR THE NEWLY INTRODUCED STATES (/HOUR UNLESS NOTED).
Table 2. ASSUMED RATES FOR THE NEWLY INTRODUCED STATES (/HOUR UNLESS NOTED).
Parameter Assumed value Rationale
δ 0.00139 (1/720 h) Scheduled PM interval ≈ monthly — typical industrial PM cadence
ε 0.25 (1/4 h) PM duration ≈ 4 h — illustrative, per routine-maintenance practice
θ 0.00005 (1/20,000 h) Catastrophic shock — rare-event rate consistent with shock-competing multi-state models [13]
φ 0.00417 (1/240 h) Catastrophic overhaul ≈ 10 days — illustrative major-repair duration
λ′1, λ′2, λ′3, λ′4 0.010, 0.050, 0.030, 0.008 Derated→waiting progression rates — assumed proportional to base λk
ν1, ν2, ν3, ν4 0.0208, 0.0417, 0.0278, 0.0417 Waiting→repair (logistics delay) rates — 1–2 day spares lead time, per ALDT guidance [36]
Table 3. EXTENDED STATE-SPACE DEFINITION.
Table 3. EXTENDED STATE-SPACE DEFINITION.
State Description Category
S0 Operative — baseline healthy condition Normal
S1 Disturbed — automated diagnostic in progress after an anomaly is flagged Diagnostic
S19 Preventive maintenance — scheduled intervention, independent of anomaly detection Scheduled
S18 Catastrophic / common-cause shock — sudden failure bypassing the gradual path Rare event
S2 / S3 / S4 / S5 Membrane / electrode / chemical / thermal degradation classified by diagnostics Degradation
S6 / S7 / S8 / S9 Derated operation — reduced current density, partial H₂ output, per mechanism Derated
S10 / S11 / S12 / S13 Awaiting spares — logistics / administrative delay, per mechanism Logistics delay
S14 / S15 / S16 / S17 Active repair / replacement in progress, per mechanism Repair
Disclaimer/Publisher’s Note: The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of MDPI and/or the editor(s). MDPI and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content.
Copyright: This open access article is published under a Creative Commons CC BY 4.0 license, which permit the free download, distribution, and reuse, provided that the author and preprint are cited in any reuse.