ECU Over-Temperature Shutdown in Failed-Fixed Engine Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Aircraft engine control units (ECUs) face overheating issues due to extreme temperatures, which can lead to component damage and failure, especially during soak-back conditions without forced cooling, exceeding the operational temperature limits of electronic components.
Innovation Solution
A method and system for managing over-temperature excursions in ECUs, involving temperature monitoring and power enable devices that autonomously disable actuators if temperature thresholds are exceeded, ensuring safe operation by depowering components to prevent thermal damage, utilizing independent temperature sensors and power sources to maintain component safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the ECU operates in high temperature environments without forced cooling, then engine operation is maintained, but the electronic components exceed their operational temperature limits and risk damage
Solution Approach 1:
The system performs preliminary cooling of the ECU before engine shutdown to prevent overheating during soak-back conditions. Temperature sensors monitor ECU temperature and control the cooling system in advance to ensure the ECU remains within safe operating temperatures even when the engine is stopped and forced cooling is unavailable.
2Temperature
If forced cooling is applied to the ECU, then component temperature is reduced, but system complexity and power consumption increase
Solution Approach 1:
The cooling system is designed to utilize the engine's own operation to provide cooling through airflow and heat dissipation. During engine operation, the natural airflow and thermal management of the engine system serve to cool the ECU without requiring additional active cooling components, thereby reducing system complexity while maintaining effective temperature control.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of managing over-temperature excursions in an electronic control unit of a control system having failed-fixed capability and an operationally independent temperature monitoring and power enable function. The method includes receiving a temperature signal indicative of a temperature associated with an electronic control unit, determining if the temperature associated with the electronic control unit exceeds a first selected threshold, determining if the temperature associated with the electronic control unit exceeds a second selected threshold, and ascertaining if an engine associated with the control system is operational. The method also includes that if the engine is not operational and the temperature exceeds the first selected threshold, then disabling an actuator associated with the control system. In addition, the method also includes that if the temperature associated with the electronic control unit exceeds the second selected threshold, then disabling an actuator associated with the control system.