Safety protection control system of engine

The engine safety protection control system, which uses a dual-redundant circuit design and multi-sensor signal acquisition, solves the shortcomings of medium- and high-speed high-power engines in terms of high precision and high reliability. It realizes real-time monitoring and protection of the engine, ensuring the safety and reliability of the system in the event of a fault.

CN224228753UActive Publication Date: 2026-05-12HENAN DIESEL ENGINE IND
View PDF 0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Utility models(China)
Current Assignee / Owner
HENAN DIESEL ENGINE IND
Filing Date
2025-06-19
Publication Date
2026-05-12

AI Technical Summary

Technical Problem

The existing safety protection and control systems for medium- and high-speed high-power engines are insufficient in terms of high precision and high reliability, especially in emergency operation conditions where they are difficult to effectively prevent mechanical damage and personal injury caused by overspeed.

Method used

The circuit employs a dual-redundancy design, utilizes multiple status monitoring and 3-out-of-2 logic judgment, and combines multiple sensor signal acquisition methods to achieve real-time monitoring and protection of engine speed and status, ensuring high system reliability and safety.

Benefits of technology

It improves the reliability and safety of engine operation, and can take timely protective measures in case of failure to prevent mechanical damage and personal injury caused by overspeed.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN224228753U_ABST
    Figure CN224228753U_ABST
Patent Text Reader

Abstract

The utility model discloses a safety protection control system of an engine, which comprises a plurality of same overspeed protection modules, a connecting back plate, a logic control output driving module and a two-out-of-three redundancy processing unit, the two-out-of-three redundancy processing unit is respectively connected with an external logic control output driving module and a two-out-of-three redundancy processing unit through a connecting back plate; a power supply and a redundant power supply of the overspeed protection module are connected to the dual-power-supply redundant processing module, and the dual-power-supply redundant processing module is connected with an internal power supply bus; the total signal acquisition module is connected with the processing unit, the processing unit module is connected with the logic control output driving module, and the logic control output driving module outputs a control signal to control external equipment. According to the system, the dual-redundancy design of a circuit is adopted, and the reliability and safety of engine operation are improved by monitoring various states of an engine sensor.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This utility model relates to the technical field of engine safety protection control system, specifically an engine safety protection control system. Background Technology

[0002] Engines typically require overspeed protection to prevent excessive engine speed from causing mechanical damage or injury to personnel.

[0003] Early diesel engines had relatively simple structures and rudimentary speed control systems, primarily relying on mechanical governors to control engine speed. These governors used centrifugal force, employing the movement of mechanical components like flyweights to regulate the fuel injection pump's output, thus maintaining relatively stable engine speed. With the development of electronic technology, electronic overspeed protection devices gradually emerged and became widely used. Compared to mechanical devices, electronic overspeed protection devices offer higher precision, faster response times, and greater flexibility, allowing for precise settings and adjustments based on different operating conditions and diesel engine characteristics.

[0004] In certain specialized applications, medium-to-high-speed, high-power engines are required. These engines, with their high speed, high power, and high inertia, place even greater demands on safety protection. To ensure the engine's emergency operating status, a new type of engine safety protection and control system is needed to guarantee the safety and effectiveness of the overspeed detection function. Summary of the Invention

[0005] This invention proposes a safety protection and control system for an engine. The system adopts a dual-redundancy circuit design and improves the reliability and safety of engine operation by monitoring various states of engine sensors.

[0006] To achieve the objective, the present invention adopts the following technical solution: an engine safety protection control system, including an overspeed protection module, a connecting backplate, a logic control output drive module and a three-out-of-two redundancy processing unit. The overspeed protection module consists of multiple identical modules, which are respectively connected to the external logic control output drive module and the three-out-of-two redundancy processing unit through the connecting backplate.

[0007] The overspeed protection module includes: a dual-power redundancy processing module, a processing unit, a logic control output driver module, and a total signal acquisition module. The power supply and the redundant power supply are connected to the dual-power redundancy processing module, which is connected to the internal power supply bus. The total signal acquisition module is connected to the processing unit, which is connected to the logic control output driver module. The logic control output driver module outputs control signals to control external devices.

[0008] Furthermore, the overspeed protection module consists of three identical modules.

[0009] Furthermore, the overall signal acquisition module includes an auxiliary control signal acquisition module and a signal acquisition module, which are respectively connected to the processing unit;

[0010] Furthermore, the auxiliary control signal acquisition module receives auxiliary control signal inputs and acquires relevant auxiliary control signals. The signal acquisition module specifically acquires signals from the speed sensor, providing raw signal data for subsequent processing.

[0011] Furthermore, the overall signal acquisition module includes signal conversion module one, signal conversion module two, signal conversion module three, signal conversion module four, and signal conversion module five, and a signal processing module. The signal processing module is connected to signal conversion modules one, two, three, four, and five, respectively. Signal conversion module one receives control signals and performs conversion processing to provide adaptation signals for subsequent signal processing units. Signal conversion module two is responsible for converting the oil pressure signal for system analysis and processing. Signal conversion module three converts encoder signals, which are used to measure the engine's angular position. Signal conversion module four directly acquires speed sensor signals to determine the engine speed signal. Signal conversion module five converts the generator frequency signal, which is related to the engine speed and helps determine the engine's operating status.

[0012] Furthermore, the processing unit includes a communication processing module, which is connected to a communication bus to interact with the outside world for data exchange.

[0013] Furthermore, the overspeed protection module also includes a communication processing module. The processing unit is connected to the communication processing module, and the communication processing module interacts with the outside world via a communication bus.

[0014] This utility model has the following beneficial effects:

[0015] 1. This system acquires engine speed through speed sensors on rotating engine components, encoders on the engine shaft, oil pressure sensors on the main oil passage or oil filter housing, or by collecting generator frequency data. It monitors the engine oil pressure and crankcase pressure. When low oil pressure, high crankcase pressure, or other emergency shutdown signals occur, the system quickly implements engine shutdown protection to prevent serious mechanical failures.

[0016] 2. Because this system uses independent signal acquisition circuits, it can effectively prevent the failure of the entire protection system due to the failure of the independent acquisition circuits.

[0017] 3. This system achieves real-time information sharing of sampled data and engine operating status through the communication and control bus on the intelligent backplane. By comparing the collected data, the system can determine the operating status of the collected data, promptly detect sensor faults, and perform self-checks on the sensor's operating status.

[0018] 4. This system uses a 3-out-of-2 logic circuit on the intelligent backplane to perform logical judgment on the engine fault protection output signal. The engine protection action is executed only when two protection control signals are output simultaneously. Attached Figure Description

[0019] Figure 1 This is an overall schematic diagram of a safety protection control system for an engine proposed in this utility model;

[0020] Figure 2 This is a schematic diagram of the overspeed protection module of an engine safety protection control system proposed in this utility model;

[0021] Legend: 10. Dual power supply redundancy processing module; 200. Auxiliary control signal acquisition module; 202. Signal acquisition; 50. Logic control output drive module; 60. Processing unit; 70. Main signal acquisition module; 20. Signal conversion module one; 21. Signal conversion module two; 22. Signal conversion module three; 23. Signal conversion module four; 24. Signal conversion module five; 30. Signal processing module; 40. Communication processing module. Detailed Implementation

[0022] The technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments. In this application, the term "embodiment" means that a specific feature, structure, or characteristic described in connection with an embodiment can be included in at least one embodiment of this application. The appearance of this phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described in this application can be combined with other embodiments without conflict.

[0023] Unless otherwise defined, the technical or scientific terms used in this application shall have the ordinary meaning understood by one of ordinary skill in the art to which this application pertains. The terms “a,” “an,” “an,” “the,” and similar words used in this application do not indicate quantity limitation and may indicate singular or plural. The terms “comprising,” “including,” “having,” and any variations thereof used in this application are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or device that includes a series of steps or modules (units) is not limited to the listed steps or units, but may also include steps or units not listed, or may include other steps or units inherent to these processes, methods, products, or devices. The terms “connected,” “linked,” “coupled,” and similar words used in this application are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. “Multiple” used in this application refers to two or more. “And / or” describes the relationship between related objects, indicating that three relationships may exist; for example, “A and / or B” can represent: A alone, A and B simultaneously, and B alone. The character " / " generally indicates that the preceding and following objects are in an "or" relationship. The terms "first," "second," and "third" used in this application are merely to distinguish similar objects and do not represent a specific ordering of the objects.

[0024] Example 1 Figures 1 to 2 As shown in the figure, this embodiment provides an engine safety protection control system, including an overspeed protection module, a connection backplane, a logic control output drive module, and a 3-out-of-2 redundancy processing unit. The overspeed protection module comprises multiple identical modules, each connected to an external logic control output drive module and 3-out-of-2 redundancy processing unit via the connection backplane. Each overspeed protection module possesses independent and complete functions for engine and safety protection. Each overspeed protection module has two power supply circuits: a primary power supply circuit and a redundant power supply circuit. This allows the overspeed protection module to be redundantly powered by two independent power supply circuits simultaneously, enabling seamless switching between the two circuits and preventing protection failure due to a power supply malfunction in one circuit. The overspeed protection module includes an internal power supply input / output interface circuit for supplying power to the intelligent connection backplane.

[0025] The overspeed protection module includes: a dual-power redundancy processing module 10, a processing unit 60, a logic control output drive module 50, and a total signal acquisition module 70. The main power supply and redundant power supply are connected to the dual-power redundancy processing module 10, which is connected to an internal power supply bus. The internal power supply bus is the system's internal power distribution bus, distributing power to each module. The total signal acquisition module 70 is connected to the processing unit 60, which is the core processing unit of the overspeed protection module. It is responsible for receiving and processing data from different sensors and modules, and making decisions and controls based on this data. The processing unit 60 is connected to the logic control output drive module 50, which converts the control signals from the processing unit 60 into signals that can drive external devices, thus enabling control of the external devices.

[0026] Furthermore, the overspeed protection module consists of three identical modules.

[0027] Furthermore, the overall signal acquisition module 70 includes an auxiliary control signal acquisition module 200 and a signal acquisition module 202, which are respectively connected to the processing unit 60. The auxiliary control signal acquisition module 200 receives auxiliary control signal input and acquires relevant auxiliary control signals. The signal acquisition module 202 is specifically designed to acquire engine speed sensor signals, providing raw signal data for subsequent processing.

[0028] Furthermore, the total signal acquisition module 70 includes signal conversion module one 20, signal conversion module two 21, signal conversion module three 22, signal conversion module four 23, signal conversion module five 24, and signal processing module 30; the signal processing module 30 is connected to signal conversion module one 20, signal conversion module two 21, signal conversion module three 22, signal conversion module four 23, and signal conversion module five 24 respectively;

[0029] Signal conversion module 1 (20) receives and converts control signals, providing adaptive signals for subsequent signal processing units. Signal conversion module 2 (21) converts oil pressure signals for easier analysis and processing. Signal conversion module 3 (22) converts encoder signals, which are used to measure the engine's angular position. Signal conversion module 4 (23) directly acquires speed sensor signals to determine engine speed. Signal conversion module 5 (24) converts generator frequency signals, which are related to engine speed and can help determine the engine's operating status. For critical speed acquisition, the overspeed protection module offers different methods for obtaining engine speed. Engine speed can be acquired through speed sensors mounted on rotating engine components, encoders mounted on the engine's rotating shaft, oil pressure sensors mounted on the engine's main oil passage or oil filter housing, or by acquiring the generator's frequency. The speed acquisition method is selected via a physical selection circuit or a program selection method.

[0030] The collected signals are normalized by the signal processing module 30 and then input into the processing unit 60 for logical processing. The processing unit 60 obtains the current operating status of the engine based on the comprehensive judgment of the data, and realizes the engine operating status, overspeed warning status, overspeed protection status, low oil pressure status, high crankcase pressure and other alarm statuses through preset alarm thresholds.

[0031] Furthermore, the processing unit 60 includes a communication processing module 40, which is connected to a communication bus to interact with the outside world for data exchange.

[0032] Furthermore, the overspeed protection module also includes a communication processing module 40. The processing unit 60 is connected to the communication processing module 40, and the communication processing module 40 interacts with external systems via a communication bus. The engine operating status is transmitted to the external monitoring unit through the communication processing module 40. Protective drive signals for engine deceleration and engine shutdown are output through the drive output circuit.

[0033] The three overspeed protection modules, combined with the connecting backplate, form an engine safety protection control system with triple redundancy protection.

[0034] The entire system compares the measurement signals from three overspeed protection modules, labeling the three sets of signals as S1, S2, and S3. The deviations of the three sets of data are calculated: the deviation between S1 and S2 is denoted as P1, the deviation between S2 and S3 as P2, and the deviation between S3 and S1 as S3. When two of the three sets of signal deviations exceed the system's set deviation (fault judgment value), the system logically determines the information deviation measurement signal and discards it. The average of the two sets of normal signals is taken as the replacement value for the faulty data. If the signal from a certain overspeed protection module exhibits a persistent deviation, the sensor is judged to be malfunctioning.

[0035] The three overspeed protection modules collect signals and compare them with the system-set protection thresholds. When the speed exceeds the system-set threshold, a protection command is output. The protection command undergoes a two-out-of-three logic check at the intelligent backplane before being output as control.

[0036] The intelligent connection backplane has a built-in power supply bus, and any one of the three overspeed protection modules can supply power to the protection system simultaneously when any one of the modules is powered normally.

Claims

1. A safety protection control system for an engine, characterized in that: It includes an overspeed protection module, a connection backplane, a logic control output drive module, and a 3-out-of-2 redundancy processing unit. The overspeed protection module consists of multiple identical modules, which are connected to the external logic control output drive module and the 3-out-of-2 redundancy processing unit through the connection backplane. The overspeed protection module includes: a dual power supply redundancy processing module (10), a processing unit (60), a logic control output drive module (50), and a total signal acquisition module (70). The power supply and the redundant power supply are connected to the dual power supply redundancy processing module (10), and the dual power supply redundancy processing module (10) is connected to the internal power supply bus. The total signal acquisition module (70) is connected to the processing unit (60), and the processing unit (60) is connected to the logic control output drive module (50). The logic control output drive module (50) outputs control signals to realize the control of external devices.

2. The engine safety protection control system according to claim 1, characterized in that: The overspeed protection module consists of three identical modules.

3. The engine safety protection control system according to claim 2, characterized in that: The total signal acquisition module (70) includes an auxiliary control signal acquisition module (200) and a signal acquisition module (202), which are respectively connected to the processing unit (60). The auxiliary control signal acquisition module (200) receives the auxiliary control signal input and acquires the relevant auxiliary control signals. The signal acquisition module (202) is specifically designed to acquire the speed sensor signal and provide raw signal data for subsequent processing.

4. The engine safety protection control system according to claim 2, characterized in that: The overall signal acquisition module (70) includes conversion module one (20), conversion module two (21), conversion module three (22), conversion module four (23), conversion module five (24) and signal processing module (30). The signal processing module (30) is connected to the signal conversion module one (20), signal conversion module two (21), signal conversion module three (22), signal conversion module four (23) and signal conversion module five (24) respectively. The signal conversion module one (20) receives control signals and performs conversion processing to provide adaptation signals for the subsequent signal processing module (30). The signal conversion module two (21) is responsible for converting the oil pressure signal so that the system can analyze and process it. The signal conversion module three (22) converts the encoder signal, which is used to measure the angular position information of the engine. Signal conversion module four (23) directly collects the speed sensor signal to determine the engine speed signal; signal conversion module five (24) converts the power generation frequency signal, which is related to the engine speed, to help determine the engine operating status.

5. The engine safety protection control system according to claim 3, characterized in that: The processing unit (60) includes a communication processing module (40), which is connected to a communication bus to interact with the outside world.

6. The engine safety protection control system according to claim 4, characterized in that: The overspeed protection module also includes a communication processing module (40). The processing unit (60) is connected to the communication processing module (40), and the communication processing module (40) interacts with the outside world via a communication bus.