Engine Control Authority Transfer Circuit and Arbiter Logic

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing engine control systems with redundant controllers often experience delayed transfer of control, conflicting signals, and repeated switching between main and backup controllers, leading to vehicle performance issues and potential stalling.

Innovation Solution

A control apparatus with a transfer circuit and arbiter circuit that switches control from a main controller to a backup controller based on failure signals and a majority vote from multiple arbiters, ensuring smooth transition and reducing erroneous switching.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a backup controller is added to the engine control system, then reliability is improved, but device complexity increases

Engineering Contradiction:

Improvecontroller reliabilityVSAvoidcontrol system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The control system is segmented into a main controller and a backup controller, each capable of independent operation. The transfer circuit segments the control signal path, allowing seamless switching between controllers. This segmentation improves reliability by ensuring continuous operation even if one controller fails, while managing complexity through modular architecture.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system changes the operational parameter of controller authority by introducing an arbiter circuit that dynamically adjusts which controller is active. The arbiter monitors controller status and changes the control signal routing parameter based on failure detection, maintaining reliability while using a standardized switching mechanism to manage complexity.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If control transfer is implemented quickly, then reliability is improved, but conflicting control signals may occur

Engineering Contradiction:

Improvecontrol transfer reliabilityVSAvoidconflicting control signals

Core Design Contradiction:

ReliabilityVSObject-generated harmful factors

Solution Approach 1:

The transfer circuit acts as an intermediary between the main controller and the engine, and between the backup controller and the engine. This intermediary ensures that only one controller's signals are passed to the engine at any given time, enabling quick control transfer while preventing conflicting signals from reaching the engine simultaneously.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The arbiter circuit implements feedback by continuously monitoring the status of both controllers and the transfer circuit state. This feedback mechanism detects when a controller fails and triggers the appropriate control transfer, ensuring reliable switching while the arbiter's oversight prevents erroneous or conflicting signal generation during the transition.

Inventive Principle:

Principle #23Feedback

3Productivity

If the backup controller is activated immediately upon main controller failure, then productivity is improved, but erroneous switching may occur

Engineering Contradiction:

Improveengine operation continuityVSAvoidcontrol switching accuracy

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The backup controller is prepared in advance with the same control algorithms and parameters as the main controller. The transfer circuit and arbiter are pre-configured to immediately activate the backup controller upon failure detection. This preliminary preparation enables instant switching that maintains productivity, while the pre-tested backup system and arbiter validation prevent erroneous switching.

Inventive Principle:

Principle #10Preliminary action

4Reliability

If redundant controllers are used, then reliability is improved, but control signal conflicts and repeated switching occur

Engineering Contradiction:

Improvecontroller redundancyVSAvoidcontrol signal stability

Core Design Contradiction:

ReliabilityVSStability of the object's composition

Solution Approach 1:

The transfer circuit serves as a mediator that ensures only one controller's output reaches the engine at any time. This intermediary prevents control signal conflicts by physically isolating the inactive controller's output. The arbiter circuit further stabilizes the system by monitoring transfer events and preventing repeated or oscillating switching between controllers, ensuring stable operation with redundant hardware.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11255287B2Apparatus and methods for allocating and indicating engine control authority

Publication Date: 2022.02.22 WESTINGHOUSE AIR BRAKE TECH CORP

AI summary

A control apparatus includes a first controller configured to generate control signals for controlling an engine or other machine, a second controller configured to generate the control signals for controlling the machine, a transfer circuit, and an arbiter circuit. The transfer circuit is coupled between the machine and the controllers, and is configured to switch from a first state, where the transfer circuit passes the control signals from the first controller to the machine, to a second state, where the transfer circuit passes the control signals from the second controller to the machine, responsive to receiving a first failure signal from the first controller. The arbiter circuit includes three (or more) arbiters, and is configured to control the transfer circuit from the first state to the second state responsive to any two of the three arbiters generating second signals indicative of failure of the first controller.