Switch circuit for engine redundant electrically-controlled system and its controlling method

Abstract

A switching-over circuit of engine redundant electric control system consists of master-backup system control circuit separately set on two circuit board with the same function. It is featured as forming said each control circuit by CPU processor, information exchange circuit, CPU interface circuit, master-backup control logic circuit and state processing logic circuit; carrying out real time monitor on master-backup state by utilizing digital signal between master-backup circuit board and generating master-backup control command according to monitored information. Its controlling method is also disclosed.

Description

(1) Technical field The invention relates to an engine electric control system, in particular to a switching circuit and a control method of an engine redundant electric control system. (2) Background technology In order to improve the reliability of the system, the key units or systems in the system usually adopt the redundancy technology of active backup and hot backup. The so-called main-standby hot backup means that the same two units or systems work at the same time, one is for normal work and the other is for backup. When the unit or system for normal work fails, the system should be able to automatically activate the backup unit or switch to Backup system to ensure the continuity of system work. In the engine electronic control equipment, the reliability of the system is extremely important, especially in some key application areas such as power station unit engine control, military ship main / auxiliary engine control, etc., in order to ensure that the diesel engine ...

AI Technical Summary

Problems solved by technology

1. Simple gate circuits are used to realize redundant logic processing, and the error signals that may be generated when the system fails cannot be identified, which affects the reliability of the redundant circuit;

2. A single logic signal is used as the input signal, which is prone to erroneous actions when subjected to external interference;

3. The power-on reset process of the system is not perfect, and the logic signal of the power-on reset process is not provided to achieve effective control of the external interface;

4. Does not have a data synchronization interface, cannot guarantee the synchronization of the redundant system status, and cannot meet the requirements of smooth transition of system switching;

5. Does not have the function of resetting the faulty system to try to restore the system

Images