ECU Over-Temperature Shutdown in Failed-Fixed Engine Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Aircraft engine control units (ECUs) face overheating issues due to extreme temperatures, which can lead to component damage and failure, especially during engine shutdown conditions without forced cooling, exceeding the operational temperature limits of electronic components.

Innovation Solution

A method and system for managing over-temperature excursions in ECUs, involving temperature monitoring and power enable devices that disable actuators if temperature thresholds are exceeded, with independent power sources and multiple temperature sensors to prevent thermal damage, allowing safe engine operation in high-temperature environments.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the ECU operates without forced cooling during engine shutdown, then the system maintains operational capability, but the temperature exceeds component limits causing damage and failure

Engineering Contradiction:
ImproveECU operational reliabilityVSAvoidECU temperature
Core Design Contradiction:
ReliabilityVSTemperature

Solution Approach 1:

The temperature monitoring and power enable device continuously monitors temperature before damage occurs and preemptively disables the ECU when thresholds are approached, preventing thermal damage before it happens

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system uses temperature sensors to provide continuous feedback to the power enable device, which adjusts power supply based on real-time temperature conditions, creating a closed-loop thermal management system

Inventive Principle:
Principle #23Feedback

2Temperature

If the ECU is mounted on a cooling system to cope with extreme temperatures, then thermal protection is improved, but the device complexity and potential for cooling failure increase

Engineering Contradiction:
ImproveECU temperature controlVSAvoidcooling system complexity
Core Design Contradiction:
TemperatureVSDevice complexity

Solution Approach 1:

The invention extracts the critical thermal protection function from the mechanical cooling system by implementing an independent electronic monitoring and power control system that operates autonomously based on temperature feedback

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The ECU system monitors its own temperature and autonomously controls its own power supply to prevent overheating, without requiring external intervention or complex mechanical cooling infrastructure

Inventive Principle:
Principle #25Self-service

3Reliability

If multiple temperature thresholds and independent monitoring are implemented, then thermal protection is improved, but the device complexity increases

Engineering Contradiction:
Improvethermal protection reliabilityVSAvoidtemperature monitoring complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The temperature protection is segmented into multiple discrete threshold levels (first threshold and second threshold), allowing staged response to different thermal conditions and enabling more nuanced thermal management

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS10908624B2Method for managing over-temperature excursions in a failed-fixed control system
Publication Date: 2021.02.02 HAMILTON SUNDSTRAND CORP
  • US10908624B2 patent drawing
  • US10908624B2 patent drawing
  • US10908624B2 patent drawing

AI summary

A method of managing over-temperature excursions in an electronic control unit of a control system having failed-fixed capability and an operationally independent temperature monitoring and power enable function. The method includes receiving a temperature signal indicative of a temperature associated with an electronic control unit, determining if the temperature associated with the electronic control unit exceeds a first selected threshold, determining if the temperature associated with the electronic control unit exceeds a second selected threshold, and ascertaining if an engine associated with the control system is operational. The method also includes that if the engine is not operational and the temperature exceeds the first selected threshold, then disabling an actuator associated with the control system. In addition, the method also includes that if the temperature associated with the electronic control unit exceeds the second selected threshold, then disabling an actuator associated with the control system.