Engine Control Switchover via Live Signal Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for controlling internal combustion engines lack seamless and reliable redundancy in case of engine control unit malfunctions, particularly in common rail engines, leading to potential operational disruptions and safety concerns due to complex fault detection procedures.
Innovation Solution
A method utilizing a switching device that forwards control signals from one engine control unit to another based on a continuous 'live signal' indicating functionality, allowing seamless switchover without the need for complex error checks, using software-generated pulse width modulated signals and hardware detection for timely and safe switching.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a redundant control unit is provided to compensate for malfunction, then reliability is improved, but device complexity increases due to the need for fault detection mechanisms
Solution Approach 1:
The active control unit performs self-diagnosis by monitoring its own output signals and determining whether they are being received by the actuator. This self-service approach eliminates the need for separate fault detection mechanisms, reducing device complexity while maintaining reliability through the redundant control unit.
Solution Approach 2:
The system uses feedback from the actuator to the control unit to detect faults. The control unit monitors whether its control signals are being received and executed by the actuator, enabling fault detection through the natural feedback loop of the control system without adding complex external monitoring mechanisms.
2Reliability
If control responsibility is transferred between redundant units, then reliability is improved, but loss of time occurs during switchover that may cause operational disruptions
Solution Approach 1:
The standby control unit is pre-configured with all necessary control parameters and is ready to immediately assume control. The system performs preliminary setup of the redundant unit so that when switchover is needed, no time is lost for configuration or initialization, enabling seamless transition.
Solution Approach 2:
The control signal transmission to the actuator continues without interruption during switchover. The switching mechanism ensures that the actuator receives continuous control signals from either the active or standby control unit, maintaining the continuity of useful action and preventing operational disruptions.
3Reliability
If redundant control units are connected to a single actuator system, then reliability is improved, but device complexity increases due to coordination requirements between units
Solution Approach 1:
Instead of having the control units actively coordinate and communicate with each other, the system inverts the approach by having each control unit independently capable of controlling the actuator. The standby unit mirrors the active unit's configuration and can immediately take over without requiring complex inter-unit communication or coordination protocols.
4Reliability
If a switching device is introduced to forward control signals, then reliability is improved through seamless switchover, but device complexity increases
Solution Approach 1:
A switching device is introduced as an intermediary between the control units and the actuator. This mediator manages the signal routing from either control unit to the actuator, enabling seamless switchover while isolating the complexity of the switching logic from the control units themselves. The switching device handles the coordination complexity centrally.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for controlling an internal combustion engine (3), wherein a first engine control device (5) generates at least one control signal in order to actuate at least one function of the internal combustion engine (3). The method is characterized in that a switchover device (9) transmits the at least one control signal of the first engine control device (5) to the internal combustion engine (3) in order to actuate the at least one function of the internal combustion engine (3). The first engine control device (5) continuously or periodically transmits a sign-of-life signal which indicates the functionality of the engine control device to the switchover device (9). The first engine control device (5) does not transmit the sign-of-life signal or transmits the signal incorrectly if a fault occurs which endangers the proper actuation of the at least one function of the internal combustion engine (3) by means of the first engine control device (5). If the sign-of-life signal of the first engine control device (5) is not received or is incorrectly received by the switchover device (9), the switchover device (9) stops transmitting the control signals of the first engine control device (5) to the internal combustion engine (3) and starts transmitting at least one control signal generated by a second engine control device (7), in order to actuate the at least one function of the internal combustion engine (3), to the internal combustion engine (3).