CN107143429A - Electronic Unit Pump Diesel Engine ECU redundant systems and design method - Google Patents

Electronic Unit Pump Diesel Engine ECU redundant systems and design method Download PDF

Info

Publication number
CN107143429A
CN107143429A CN201710548288.XA CN201710548288A CN107143429A CN 107143429 A CN107143429 A CN 107143429A CN 201710548288 A CN201710548288 A CN 201710548288A CN 107143429 A CN107143429 A CN 107143429A
Authority
CN
China
Prior art keywords
ecu
standby
main
diesel engine
machine
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201710548288.XA
Other languages
Chinese (zh)
Other versions
CN107143429B (en
Inventor
黄都
李鹏豪
张鹏
曹钰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Chongqing Hongjiang Machinery Co Ltd
Original Assignee
Chongqing Hongjiang Machinery Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Chongqing Hongjiang Machinery Co Ltd filed Critical Chongqing Hongjiang Machinery Co Ltd
Priority to CN201710548288.XA priority Critical patent/CN107143429B/en
Publication of CN107143429A publication Critical patent/CN107143429A/en
Application granted granted Critical
Publication of CN107143429B publication Critical patent/CN107143429B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • FMECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02DCONTROLLING COMBUSTION ENGINES
    • F02D41/00Electrical control of supply of combustible mixture or its constituents
    • F02D41/24Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
    • F02D41/26Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
    • F02D41/266Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor the computer being backed-up or assisted by another circuit, e.g. analogue
    • FMECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02DCONTROLLING COMBUSTION ENGINES
    • F02D41/00Electrical control of supply of combustible mixture or its constituents
    • F02D41/22Safety or indicating devices for abnormal conditions
    • FMECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02DCONTROLLING COMBUSTION ENGINES
    • F02D2400/00Control systems adapted for specific engine types; Special features of engine control systems not otherwise provided for; Power supply, connectors or cabling for engine control systems
    • F02D2400/08Redundant elements, e.g. two sensors for measuring the same parameter

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Chemical & Material Sciences (AREA)
  • Combustion & Propulsion (AREA)
  • Mechanical Engineering (AREA)
  • Computer Hardware Design (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Safety Devices In Control Systems (AREA)

Abstract

The invention discloses security PLC, main ECU, standby ECU, power supply, the first drive module and the second drive module by a kind of Electronic Unit Pump Diesel Engine ECU redundant systems and design method, including machine;Security PLC is connected with main ECU and standby ECU respectively by the machine, and the main ECU is connected with standby ECU, and main ECU and standby ECU are connected with power supply respectively, and main ECU is connected with the first drive module, and standby ECU is connected with the second drive module;Security PLC for monitoring main ECU and standby ECU working condition, and judges switching condition as main website by the machine, when meeting switching condition, controls to switch between main ECU and standby ECU.The present invention improves the reliability of Electronic Unit Pump Diesel Engine control system.

Description

Electronic Unit Pump Diesel Engine ECU redundant systems and design method
Technical field
The invention belongs to Electronic Unit Pump Diesel Engine control technology, and in particular to a kind of Electronic Unit Pump Diesel Engine ECU is superfluous Remaining system and design method.
Background technology
Electronic controlled diesel is increasingly becoming the main flow of diesel engine industry development due to advantages such as its fuel consumption and emissions Trend, but the development of electronic controlled diesel also restricts by several factors, such as:The reliability of control.Improve control system can By property, to ensureing that normally operation is particularly important diesel engine, particularly in field peculiar to vessel, even more require occur in control system It still is able to maintain the normal operation of diesel engine in the case of failure.
In addition, the requirement in the 3rd the 9th chapter of CCS classification rules on electronic controlled diesel is pointed out:Electric-control system It is middle that the equipment that main promotion diesel engine runs well may be influenceed because of functional fault, should have duplexed system, such as electronic controller, song Shaft angle measurement apparatus, the type of two systems is identical with function, when one of them malfunctions, another set of system energy It is a set of before automatic replacement to work on, to maintain the normal operation of diesel engine, and it is simultaneously emitted by relative alarm.
In order to lift the reliability of Electronic Unit Pump Diesel Engine control system, while can also meet CCS enters level rule The requirement of model, the present invention proposes a kind of Electronic Unit Pump Diesel Engine ECU redundant systems and design method.
The content of the invention
It is automatically controlled to improve it is an object of the invention to provide a kind of Electronic Unit Pump Diesel Engine ECU redundancies system and design method The reliability of monoblock pump diesel engine control system.
Electronic Unit Pump Diesel Engine ECU redundant systems of the present invention:Including security PLC by machine, main ECU, standby ECU, Power supply, the first drive module and the second drive module;
Security PLC is connected with main ECU and standby ECU respectively by the machine, and the main ECU is connected with standby ECU, and main ECU and standby ECU divide It is not connected with power supply, main ECU is connected with the first drive module, standby ECU is connected with the second drive module;
Security PLC for monitoring main ECU and standby ECU working condition, and judges switching condition as main website by the machine, When meeting switching condition, control to switch between main ECU and standby ECU.
Also include the first relay and the second relay;
First relay and the second relay are connected with power supply respectively;
First relay and the second relay are also connected with security PLC by machine respectively;
First relay is connected with the first drive module;
Second relay is connected with the second drive module;After failure can be by relay by Electromagnetic valve driving portions Point disconnected with power supply, any one ECU failure will not impact to another ECU, thus effectively realize failure every From.
Connected between the main ECU and standby ECU by two-way communication bus;Main ECU and standby ECU respectively by communicating all the way Bus is connected with security PLC by machine.Due to main ECU by communication bus be transferred to standby ECU be all diesel engine important parameter, Vital effect is played in steady switching to diesel engine, so the communication line needs to carry out redundancy, is prevented due to failure Cause communicating interrupt, it is impossible to transmit the running parameter of diesel engine in time.When main ECU and standby ECU passes through wherein communication bus all the way Mutual heartbeat frame can not be normally received, now needs to switch to the transmission that another communication bus carries out Diesel Engine Parameters.
The main ECU and standby ECU are each configured to have monitoring and self-diagnosis of trouble cutting capacity, and periodically pass through diagnostic message Communication bus is transferred to security PLC by machine;The crucial electricity of such as electromagnetic valve driving current, communicating circuit, tach signal Acquisition Circuit The monitoring on road and self-diagnosis of trouble cutting capacity, and diagnostic message is passed into security PLC by machine by communication every 10s.
A kind of Electronic Unit Pump Diesel Engine ECU redundancy design methods of the present invention, using of the present invention automatically controlled Monoblock pump diesel engine ECU redundant systems, first drive module and the second drive module are connected with electronically controlled unit pump respectively;Its Method includes:
(1)After working on power, main ECU is in running order, diesel engine is implemented to control, standby ECU is in holding state;
(2)Using security PLC by machine as main website, main ECU and standby ECU working condition are monitored in real time, main ECU failure is received After code, determine whether to meet switching condition, if it is satisfied, then sending switching command, diesel oil is controlled by taking over main ECU for ECU Machine works;
(3)Main ECU again on after electricity, main ECU carries out self diagnosis, and diagnosis situation is passed to pacified by security PLC by machine, machine Protect PLC to determine after main ECU fault-frees, then send switching command, standby ECU controls diesel engine work is taken over by main ECU.
Further, the transmission of Diesel Engine Parameters is carried out between the main ECU and standby ECU by two-way communication bus, works as master ECU and standby ECU are communicated always by when wherein communication bus can not normally receive mutual heartbeat frame all the way, switching to another road Line carries out the transmission of Diesel Engine Parameters.
Further, the main ECU and standby ECU gather diesel engine speed signal in real time.
Further, security PLC gathers the related sensor signal of diesel engine security in real time by the machine, and total by communication Line is transferred to main ECU and standby ECU, in the case of main ECU failures, standby ECU work, important Diesel Engine Parameters is transferred to standby ECU, to ensure the stability contorting of diesel engine.
Further.The main ECU and standby ECU are each configured to the heartbeat producer, and heart beat cycle is identical;
Security PLC is by monitoring main ECU and standby ECU heartbeat by the machine, so as to judge main ECU and standby ECU communication condition; If main ECU and standby ECU carries out Diesel Engine Control all in normal communication state using the main ECU of acquiescence, if main ECU occurs Can not normal communication, security PLC can then start standby ECU at once and be controlled work by machine;When being controlled using standby ECU, Security PLC still can monitor main ECU heartbeat by machine, if main ECU heartbeating recoveries are normal, and be sentenced based on the diagnostic message received The main ECU that breaks is working properly, then security PLC can switch as main ECU work again by machine.
Further, Diesel Engine Parameters are periodically sent to standby ECU by the main ECU by way of communication, in standby ECU Main ECU is taken over come when controlling the diesel engine to work, standby ECU using the Diesel Engine Parameters received in advance as control initial parameter, with reality Existing smooth transition.
Beneficial effects of the present invention:
(1)Security PLC can monitor main ECU and standby ECU working conditions in real time, receive main ECU failure as main website by machine After code, determine whether to meet switching condition, if it is satisfied, then issuing instructions to standby ECU, take over main ECU controls motor hand Make, ensure that the normal operation of diesel engine.
(2)The important sensor signal of security PLC collections passes to standby ECU by communication bus by machine, it is ensured that diesel oil Machine even running.
(3)Main ECU and standby ECU have the transmission of two-way communication bus progress Diesel Engine Parameters, it is ensured that Diesel Engine Parameters are real-time The reliability of transmission, in the case of there is catastrophe failure in main ECU, standby ECU can according to the newest Diesel Engine Parameters passed over, Take over and steadily switched after main ECU and control diesel engine steady operation.
(4)ECU possesses monitoring and self-diagnosis of trouble cutting capacity, such as electromagnetic valve driving current, communicating circuit, tach signal collection The monitoring of the Key Circuits such as circuit and self-diagnosis of trouble cutting capacity, and at regular intervals transmit diagnostic message by communication bus To security PLC by machine.
(5)Possesses stronger trouble isolation serviceability, connection all uses bus form, the confession of solenoid-driven part Electricity is attached by relay, can be disconnected solenoid-driven part and power supply by relay, be appointed after failure One ECU of meaning failure, will not be impacted to another ECU, so as to effectively realize Fault Isolation.
Brief description of the drawings
Fig. 1 is ECU Redundancy Design scheme block diagrams of the invention;
Fig. 2 is data transfer logic block diagram between security PLC by main ECU, standby ECU and machine in the present invention
Speed curves figures of the Fig. 3 for the present invention applied to heat engine switching on certain diesel engine;
Wherein:1st, security PLC by machine, 2, main ECU, 3, standby ECU, 4, power supply, the 5, first relay, the 6, first drive module, 7th, electronically controlled unit pump, the 8, second drive module, the 9, second relay.
Embodiment
The invention will be further described below in conjunction with the accompanying drawings.
Electronic Unit Pump Diesel Engine ECU redundant systems as shown in Figure 1:Including security PLC1 by machine, main ECU2, standby ECU3, Power supply 4, the first drive module 6 and the second drive module 8.Security PLC1 is connected with main ECU2 and standby ECU3 respectively by the machine, The main ECU2 is connected with standby ECU3, and main ECU2 and standby ECU3 are connected with power supply 4 respectively, and main ECU2 connects with the first drive module 6 Connect, standby ECU3 is connected with the second drive module 8;Security PLC1 is as main website by the machine, for monitoring main ECU2 and standby ECU3 Working condition, and judge switching condition, when meeting switching condition, control to switch between main ECU2 and standby ECU3.
In Electronic Unit Pump Diesel Engine ECU redundant systems of the present invention, in addition to the first relay 5 and the second relay 9;The relay 9 of first relay 5 and second is connected with power supply 4 respectively;The relay 9 of first relay 5 and second is also It is connected respectively with security PLC1 by machine;First relay 5 is connected with the first drive module 6;Second relay 9 and Two drive modules 8 are connected.Solenoid-driven part and power supply can be disconnected by relay after failure, any one ECU failure, will not be impacted to another ECU, so as to effectively realize Fault Isolation.
As shown in figure 1, due to main ECU2 by communication bus be transferred to standby ECU3 be all diesel engine important parameter, it is right Vital effect is played in the steady switching of diesel engine, thus the communication line need carry out redundancy, will main ECU2 with it is standby Pass through two-way communication bus between ECU3(That is communication bus 1 and communication bus 2)Connection, to prevent because failure causes in communication It is disconnected, it is impossible to transmit the running parameter of diesel engine in time.When main ECU2 and standby ECU3 are by the way that wherein communication bus can not be normal all the way Receive mutual heartbeat frame, now need to switch to the transmission that another communication bus carries out Diesel Engine Parameters.
In Electronic Unit Pump Diesel Engine ECU redundant systems of the present invention, security PLC1 has 3 effects by machine, and one is Monitor main ECU2, standby ECU3 heartbeat and diagnostic message in real time, judge main ECU2 and for ECU3 whether normal work;Two be hair Go out instruction, appoint the work of an ECU catcher control diesel engine;Three be to gather the related sensor signal of diesel engine security, In the case of main ECU2 failures, standby ECU3 work, by important Diesel Engine Parameters(Such as lubricating oil pressure)Standby ECU3 is transferred to, to protect Demonstrate,prove the stability contorting of diesel engine.
In Electronic Unit Pump Diesel Engine ECU redundant systems of the present invention, the main ECU2 and standby ECU3 are each configured to tool There are monitoring and self-diagnosis of trouble cutting capacity, and diagnostic message is periodically transferred to security PLC1 by machine by communication bus;Such as electromagnetism The monitoring of the Key Circuits such as electrohydraulic valve actuator stream, communicating circuit, tach signal Acquisition Circuit and self-diagnosis of trouble cutting capacity, and every Diagnostic message is passed to security PLC by machine by 10s by communication.
When catastrophe failure occurs for main ECU2, there are two kinds of situations, one is that main ECU2 can also be diagnosed to be the failure of itself, by event Barrier code passes through communication bus all the way(That is the communication bus 3 in Fig. 1)Pass to security PLC1 by machine, two be main ECU2 failure Paralysed through serious to complete, diagnosis and communication work can not be carried out, and security PLC1 can not receive main ECU2 heartbeat frame by this opportunity, Both of which can be determined that main ECU2 occurs security PLC1 by catastrophe failure, machine and issues instructions to standby ECU3, and standby ECU3 is opened Begin to prepare to substitute the control work that main ECU2 takes over diesel engine.The power supply and plug for disconnecting main ECU2 repair either more Change, after determining that it has no problem, main ECU2 plug is plugged again, self diagnosis is carried out after upper electricity, diagnosis will diagnosis after finishing Information transmission gives security PLC1 by machine, and security PLC1 determines that it can be completely after normal work, simultaneously according to diagnostic message by machine Main ECU2 and standby ECU3 are sent instructions to, standby ECU3 is stopped, main ECU2 substitutes the control work that standby ECU3 takes over diesel engine Make.
A kind of Electronic Unit Pump Diesel Engine ECU redundancy design methods of the present invention, using of the present invention automatically controlled Monoblock pump diesel engine ECU redundant systems, the first drive module 6 and the second drive module 8 are connected with electronically controlled unit pump 7 respectively; Its method includes:
(1)After working on power, main ECU2 is in running order, diesel engine is implemented to control, standby ECU3 is in holding state;
(2)Using security PLC1 by machine as main website, main ECU2 and standby ECU3 working condition are monitored in real time, receives main ECU2's After DTC, determine whether to meet switching condition, if it is satisfied, then sending switching command, controlled by taking over main ECU2 for ECU3 Diesel engine work processed;
(3)Main ECU2 again on after electricity, main ECU2 carries out self diagnosis, and diagnosis situation is passed into security PLC1 by machine, machine Other security PLC1 is determined after main ECU2 fault-frees, then sends switching command, and standby ECU3 controls diesel engine work is taken over by main ECU2.
Diesel engine sensor signal is divided into three classes, be respectively signals of rotational speed sensor, safety and protection monitoring sensor signal and Vital effect is played in other sensors signal, stable operation, security control of the diesel engine speed signal to diesel engine, and The requirement of real-time of signal acquisition is higher, it is necessary to carry out redundancy, is respectively fed to main ECU2 and standby ECU3;Safety and protection monitoring sensor Signal carries out Real-time Feedback to the safe operation situation of diesel engine, if can not find or handle in time, it is possible to can be to bavin Oil machine causes irreversible infringement, such as lubricating oil pressure, and sensors with auxiliary electrode is attached with security PLC by machine, and will adopt The signal of collection is spaced specified time tranfer to main ECU2 and standby ECU3 by communication bus 3, in main ECU2 failures, standby ECU3 works In the case of work, important Diesel Engine Parameters are transferred to standby ECU3, to ensure the stability contorting of diesel engine.Using program energy The enough effective redundancy quantity for reducing sensor, improves the service efficiency of sensor.
As shown in Figure 2 for main ECU2, for data transfer logic block diagram between security PLC1 by ECU3 and machine, communication is redundancy The key technology of design, the main data exchange of system is present in by machine between security PLC1, main ECU2 and standby ECU3.Bus is led to Interrogate for transmission heartbeat data, conversation test and control data between main ECU2 and standby ECU3.When the system is operating, it is on the one hand main ECU2 and standby ECU3 sends heartbeat message to security PLC1 by machine by communication bus 3, whether to determine main ECU2 and standby ECU3 Normal operation, once security PLC1 detects main ECU2 heartbeat messages stopping by machine, will be immediately switched to standby ECU3 work.In addition On the one hand, to ensure that Diesel Engine Control keeps continuous-stable after control switching, the control system of work periodically will be various Diesel engine critical operational parameters are sent to standby ECU3 by way of communication, after control switching is sent, and standby ECU3 is in switching Realized a smooth transition afterwards according to the data received in advance as control initial parameter.Wherein, security PLC1 plays Coordinated Communication by machine Effect, Diesel Engine Control mainly completes by main ECU2 or standby ECU3.In this scenario, main ECU2 and standby ECU3 are each configured to the heart The producer is jumped, and heart beat cycle is identical.Security PLC1 is by monitoring main ECU2 or standby ECU3 heartbeat by machine, so as to judge master ECU2 or standby ECU3 communication condition.If main ECU2 or standby ECU3 are all in normal communication state, using the main ECU2 of acquiescence Diesel Engine Control is carried out, if significant trouble occurs in main ECU2, leading to not security PLC1 by normal communication, machine can then start at once Standby ECU3 is controlled work.When being controlled using standby ECU3, security PLC1 still can monitor main ECU2 heartbeat by machine, If main ECU2 heartbeating recoveries are normal, and judge that main ECU2 is working properly based on the diagnostic message received, then machine side security PLC1 Can switching be again main ECU2 work.
Fig. 3 show speed curves figure of the present invention applied to heat engine switching on certain diesel engine, and speed fluctuation rate can control Below 0.8%, the requirement steadily switched can be fully met.

Claims (10)

1. a kind of Electronic Unit Pump Diesel Engine ECU redundant systems, it is characterised in that:Including security PLC by machine(1), main ECU(2)、 Standby ECU(3), power supply(4), the first drive module(6)With the second drive module(8);
Security PLC by the machine(1)Respectively with main ECU(2)With standby ECU(3)Connection, the main ECU(2)With standby ECU(3)Even Connect, main ECU(2)With standby ECU(3)Respectively with power supply(4)Connection, main ECU(2)With the first drive module(6)Connection, standby ECU(3) With the second drive module(8)Connection;
Security PLC by the machine(1)As main website, for monitoring main ECU(2)With standby ECU(3)Working condition, and judge cut Condition is changed, when meeting switching condition, main ECU is controlled(2)With standby ECU(3)Between switch over.
2. Electronic Unit Pump Diesel Engine ECU redundant systems according to claim 1, it is characterised in that:Also include first after Electrical equipment(5)With the second relay(9);
First relay(5)With the second relay(9)Respectively with power supply(4)Connection;
First relay(5)With the second relay(9)Also respectively with security PLC by machine(1)Connection;
First relay(5)With the first drive module(6)Connection;
Second relay(9)With the second drive module(8)Connection.
3. Electronic Unit Pump Diesel Engine ECU redundant systems according to claim 1 or 2, it is characterised in that:The main ECU (2)With standby ECU(3)Between connected by two-way communication bus;Main ECU(2)With standby ECU(3)Pass through communication bus all the way respectively With security PLC by machine(1)Connection.
4. Electronic Unit Pump Diesel Engine ECU redundant systems according to claim 3, it is characterised in that:The main ECU(2) With standby ECU(3)It is each configured to that there is monitoring and self-diagnosis of trouble cutting capacity, and is periodically transferred to diagnostic message by communication bus Security PLC by machine(1).
5. a kind of Electronic Unit Pump Diesel Engine ECU redundancy design methods, it is characterised in that using such as any institute of Claims 1-4 The Electronic Unit Pump Diesel Engine ECU redundant systems stated, first drive module(6)With the second drive module(8)Respectively with electricity Control monoblock pump(7)Connection;Its method includes:
(1)After working on power, main ECU(2)It is in running order, diesel engine is implemented to control, standby ECU(3)In holding state;
(2)By security PLC by machine(1)As main website, main ECU is monitored in real time(2)With standby ECU(3)Working condition, receive master ECU(2)DTC after, determine whether to meet switching condition, if it is satisfied, then send switching command, by standby ECU(3)Take over Main ECU(2)To control diesel engine to work;
(3)In main ECU(2)Again after upper electricity, main ECU(2)Self diagnosis is carried out, and diagnosis situation is passed into security PLC by machine (1), machine side security PLC(1)Determine main ECU(2)After fault-free, then switching command is sent, by main ECU(2)Take over standby ECU(3) Control diesel engine work.
6. Electronic Unit Pump Diesel Engine ECU redundancy design methods according to claim 5, it is characterised in that:The main ECU (2)With standby ECU(3)Between by two-way communication bus carry out Diesel Engine Parameters transmission, as main ECU(2)With standby ECU(3)It is logical When crossing that wherein communication bus can not normally receive mutual heartbeat frame all the way, switch to another road communication bus and carry out diesel engine The transmission of parameter.
7. Electronic Unit Pump Diesel Engine ECU redundancy design methods according to claim 6, it is characterised in that:The main ECU (2)With standby ECU(3)Diesel engine speed signal is gathered in real time.
8. Electronic Unit Pump Diesel Engine ECU redundancy design methods according to claim 7, it is characterised in that:By the machine Security PLC(1)The related sensor signal of collection diesel engine security, and main ECU is transferred to by communication bus in real time(2)With it is standby ECU(3), in main ECU(2)Failure, standby ECU(3)In the case of work, important Diesel Engine Parameters are transferred to standby ECU(3), To ensure the stability contorting of diesel engine.
9. according to any described Electronic Unit Pump Diesel Engine ECU redundancy design methods of claim 5 to 8, it is characterised in that:Institute State main ECU(2)With standby ECU(3)The heartbeat producer is each configured to, and heart beat cycle is identical;
Security PLC by the machine(1)By monitoring main ECU(2)With standby ECU(3)Heartbeat, so as to judge main ECU(2)With it is standby ECU(3)Communication condition;If main ECU(2)With standby ECU(3)All in normal communication state, then using the main ECU of acquiescence(2) Diesel Engine Control is carried out, if main ECU(2)Occurring can not normal communication, machine side security PLC(1)Standby ECU can be then started at once(3) It is controlled work;When using standby ECU(3)When being controlled, security PLC by machine(1)Still main ECU can be monitored(2)Heartbeat, If main ECU(2)Heartbeating recovery is normal, and judges main ECU based on the diagnostic message received(2)It is working properly, then security by machine PLC(1)Can switching be again main ECU(2)Work.
10. Electronic Unit Pump Diesel Engine ECU redundancy design methods according to claim 9, it is characterised in that:The master ECU(2)Diesel Engine Parameters are periodically sent to standby ECU by way of communication(3), in standby ECU(3)Take over main ECU(2) During controlling diesel engine to work, standby ECU(3)It is steady to realize using the Diesel Engine Parameters received in advance as control initial parameter Transition.
CN201710548288.XA 2017-07-06 2017-07-06 Electronic Unit Pump Diesel Engine ECU redundant system and design method Active CN107143429B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710548288.XA CN107143429B (en) 2017-07-06 2017-07-06 Electronic Unit Pump Diesel Engine ECU redundant system and design method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710548288.XA CN107143429B (en) 2017-07-06 2017-07-06 Electronic Unit Pump Diesel Engine ECU redundant system and design method

Publications (2)

Publication Number Publication Date
CN107143429A true CN107143429A (en) 2017-09-08
CN107143429B CN107143429B (en) 2019-10-15

Family

ID=59785242

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710548288.XA Active CN107143429B (en) 2017-07-06 2017-07-06 Electronic Unit Pump Diesel Engine ECU redundant system and design method

Country Status (1)

Country Link
CN (1) CN107143429B (en)

Cited By (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108869071A (en) * 2018-06-27 2018-11-23 潍柴动力股份有限公司 A kind of processing method of driving malfunction, device and electronic equipment
CN109162818A (en) * 2018-10-31 2019-01-08 潍柴动力股份有限公司 A kind of control system of engine, control method and engine
CN109372646A (en) * 2018-09-06 2019-02-22 中车大连机车车辆有限公司 Fuel oil pump control circuit and method
CN109541934A (en) * 2018-12-29 2019-03-29 潍柴动力股份有限公司 A kind of controlled oil device redundancy control method and system
CN110939522A (en) * 2019-12-27 2020-03-31 江苏谷登重型机械装备科技有限公司 Double-throttle control system of slurry pump station and control method thereof
CN111830936A (en) * 2020-07-23 2020-10-27 重庆红江机械有限责任公司 ECU detection calibration system
CN112096530A (en) * 2020-09-02 2020-12-18 无锡威孚高科技集团股份有限公司 Control method, device and system for electric control redundancy of marine engine
CN112282934A (en) * 2020-10-20 2021-01-29 哈尔滨工程大学 Triple-redundancy control method for electric control system of marine engine
CN112526867A (en) * 2020-11-30 2021-03-19 重庆红江机械有限责任公司 Redundancy switching device and control method thereof
CN112596369A (en) * 2020-12-10 2021-04-02 中国兵器装备集团自动化研究所 Multi-machine redundancy seamless switching system and method thereof
CN113050408A (en) * 2021-03-09 2021-06-29 广西玉柴机器股份有限公司 Marine diesel engine redundancy control system
CN113062813A (en) * 2021-04-02 2021-07-02 重庆红江机械有限责任公司 Phase redundancy fault-tolerant control system and method for diesel engine electronic injection system
CN113202629A (en) * 2021-06-07 2021-08-03 北京理工大学 Dual-redundancy control system of aircraft engine
CN113917869A (en) * 2021-10-08 2022-01-11 江西清华泰豪三波电机有限公司 Generator set control method and system
WO2022110834A1 (en) * 2020-11-26 2022-06-02 中船动力研究院有限公司 Electric control system and method for ship

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102305136A (en) * 2011-08-02 2012-01-04 长安大学 Automobile fuel control method and controller
CN105089856A (en) * 2015-07-15 2015-11-25 江苏科技大学 Self-sufficient type internal combustion engine gas fuel supply system and gas packet pressure control method
WO2017058133A1 (en) * 2015-09-28 2017-04-06 General Electric Company Apparatus and methods for allocating and indicating engine control authority

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102305136A (en) * 2011-08-02 2012-01-04 长安大学 Automobile fuel control method and controller
CN105089856A (en) * 2015-07-15 2015-11-25 江苏科技大学 Self-sufficient type internal combustion engine gas fuel supply system and gas packet pressure control method
WO2017058133A1 (en) * 2015-09-28 2017-04-06 General Electric Company Apparatus and methods for allocating and indicating engine control authority

Cited By (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108869071A (en) * 2018-06-27 2018-11-23 潍柴动力股份有限公司 A kind of processing method of driving malfunction, device and electronic equipment
CN109372646A (en) * 2018-09-06 2019-02-22 中车大连机车车辆有限公司 Fuel oil pump control circuit and method
CN109372646B (en) * 2018-09-06 2021-02-09 中车大连机车车辆有限公司 Fuel pump control circuit and method
CN109162818A (en) * 2018-10-31 2019-01-08 潍柴动力股份有限公司 A kind of control system of engine, control method and engine
CN109541934A (en) * 2018-12-29 2019-03-29 潍柴动力股份有限公司 A kind of controlled oil device redundancy control method and system
CN109541934B (en) * 2018-12-29 2022-09-23 潍柴动力股份有限公司 Redundancy control method and system for electric oil controller
CN110939522A (en) * 2019-12-27 2020-03-31 江苏谷登重型机械装备科技有限公司 Double-throttle control system of slurry pump station and control method thereof
CN111830936A (en) * 2020-07-23 2020-10-27 重庆红江机械有限责任公司 ECU detection calibration system
CN112096530A (en) * 2020-09-02 2020-12-18 无锡威孚高科技集团股份有限公司 Control method, device and system for electric control redundancy of marine engine
CN112096530B (en) * 2020-09-02 2023-02-14 无锡威孚高科技集团股份有限公司 Control method, device and system for electric control redundancy of marine engine
CN112282934A (en) * 2020-10-20 2021-01-29 哈尔滨工程大学 Triple-redundancy control method for electric control system of marine engine
WO2022110834A1 (en) * 2020-11-26 2022-06-02 中船动力研究院有限公司 Electric control system and method for ship
CN112526867A (en) * 2020-11-30 2021-03-19 重庆红江机械有限责任公司 Redundancy switching device and control method thereof
CN112596369A (en) * 2020-12-10 2021-04-02 中国兵器装备集团自动化研究所 Multi-machine redundancy seamless switching system and method thereof
CN112596369B (en) * 2020-12-10 2023-05-16 中国兵器装备集团自动化研究所有限公司 Multi-machine redundancy seamless switching system and method thereof
CN113050408A (en) * 2021-03-09 2021-06-29 广西玉柴机器股份有限公司 Marine diesel engine redundancy control system
CN113062813A (en) * 2021-04-02 2021-07-02 重庆红江机械有限责任公司 Phase redundancy fault-tolerant control system and method for diesel engine electronic injection system
CN113062813B (en) * 2021-04-02 2022-08-16 重庆红江机械有限责任公司 Phase redundancy fault-tolerant control system and method for diesel engine electronic injection system
CN113202629A (en) * 2021-06-07 2021-08-03 北京理工大学 Dual-redundancy control system of aircraft engine
CN113917869A (en) * 2021-10-08 2022-01-11 江西清华泰豪三波电机有限公司 Generator set control method and system

Also Published As

Publication number Publication date
CN107143429B (en) 2019-10-15

Similar Documents

Publication Publication Date Title
CN107143429B (en) Electronic Unit Pump Diesel Engine ECU redundant system and design method
CN101910669B (en) Clutch actuator and method for control thereof
US20170050655A1 (en) System for vital brake interface with real-time integrity monitoring
CN101546483B (en) System and method for fault diagnosis of traffic signal controller
CN112638739B (en) Redundant electronic control system and equipment
CN104590243B (en) Whole vehicle functional safety monitoring system
CN104503272A (en) Automatic train driving system based on double-system hot standby redundancy
CN105278516A (en) Double-redundancy switch value PLC control system reliable fault-tolerant controller realization method
CN106878081A (en) Train gateway redundancy control system and its control method
CN105718336A (en) Dual-redundancy dispatching control system for aircraft alarm computer
CN102915033A (en) Vehicle fault diagnosing system and engineering machine
CN206374759U (en) The redundancy control system and train of train central control unit
KR20120052987A (en) Multi-engine plant and method for operating the same
CN105159263B (en) A kind of intelligence electrohydraulic actuator self-cure regulation and control system control method
US20100018384A1 (en) Drive system and method of monitoring a hydrostatic drive
CN111186463A (en) Board-level redundant full-electronic computer interlocking system
CN201576199U (en) Ship engine room monitoring and alarming system based on CAN bus
CN111874049A (en) Brake control system for safety computer of train control
CN104691555B (en) Whole vehicle functions safety monitoring system
CN114466762A (en) Control device for vehicle
CN1332841C (en) Magnetic suspension train operation controlling system and method
CN113014150B (en) Motor control system, method for operating a motor control system and aircraft
CN102817778B (en) Method and device for preventing PLC (programmable logic controller) control system of fan from crashing
KR101530181B1 (en) Redundant driving control system having virtual control structure
CN106838296B (en) A kind of car automatic mechanical transmission electronic control unit safety monitoring system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant