EP0101850B1 - Sicherheits-Notlaufeinrichtung für den Leerlaufbetrieb von Kraftfahrzeugen - Google Patents

Sicherheits-Notlaufeinrichtung für den Leerlaufbetrieb von Kraftfahrzeugen Download PDF

Info

Publication number
EP0101850B1
EP0101850B1 EP83106751A EP83106751A EP0101850B1 EP 0101850 B1 EP0101850 B1 EP 0101850B1 EP 83106751 A EP83106751 A EP 83106751A EP 83106751 A EP83106751 A EP 83106751A EP 0101850 B1 EP0101850 B1 EP 0101850B1
Authority
EP
European Patent Office
Prior art keywords
signal
output stage
microcomputer
emergency
actuator
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired
Application number
EP83106751A
Other languages
German (de)
English (en)
French (fr)
Other versions
EP0101850A2 (de
EP0101850A3 (en
Inventor
Günter Braun
Wolfgang Dipl.-Ing. Kosak
Alfred Dipl.-Ing. Kratt
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Robert Bosch GmbH
Original Assignee
Robert Bosch GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Family has litigation
First worldwide family litigation filed litigation Critical https://patents.darts-ip.com/?family=25803247&utm_source=google_patent&utm_medium=platform_link&utm_campaign=public_patent_search&patent=EP0101850(B1) "Global patent litigation dataset” by Darts-ip is licensed under a Creative Commons Attribution 4.0 International License.
Application filed by Robert Bosch GmbH filed Critical Robert Bosch GmbH
Publication of EP0101850A2 publication Critical patent/EP0101850A2/de
Publication of EP0101850A3 publication Critical patent/EP0101850A3/de
Application granted granted Critical
Publication of EP0101850B1 publication Critical patent/EP0101850B1/de
Expired legal-status Critical Current

Links

Images

Classifications

    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
    • F02D41/26—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
    • F02D41/266—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor the computer being backed-up or assisted by another circuit, e.g. analogue
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D31/00—Use of speed-sensing governors to control combustion engines, not otherwise provided for
    • F02D31/001—Electric control of rotation speed
    • F02D31/002—Electric control of rotation speed controlling air supply
    • F02D31/003—Electric control of rotation speed controlling air supply for idle speed control
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D31/00—Use of speed-sensing governors to control combustion engines, not otherwise provided for
    • F02D31/001—Electric control of rotation speed
    • F02D31/002—Electric control of rotation speed controlling air supply
    • F02D31/003—Electric control of rotation speed controlling air supply for idle speed control
    • F02D31/005—Electric control of rotation speed controlling air supply for idle speed control by controlling a throttle by-pass
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D11/00—Arrangements for, or adaptations to, non-automatic engine control initiation means, e.g. operator initiated
    • F02D11/06—Arrangements for, or adaptations to, non-automatic engine control initiation means, e.g. operator initiated characterised by non-mechanical control linkages, e.g. fluid control linkages or by control linkages with power drive or assistance
    • F02D11/10—Arrangements for, or adaptations to, non-automatic engine control initiation means, e.g. operator initiated characterised by non-mechanical control linkages, e.g. fluid control linkages or by control linkages with power drive or assistance of the electric type
    • F02D2011/101—Arrangements for, or adaptations to, non-automatic engine control initiation means, e.g. operator initiated characterised by non-mechanical control linkages, e.g. fluid control linkages or by control linkages with power drive or assistance of the electric type characterised by the means for actuating the throttles
    • F02D2011/102—Arrangements for, or adaptations to, non-automatic engine control initiation means, e.g. operator initiated characterised by non-mechanical control linkages, e.g. fluid control linkages or by control linkages with power drive or assistance of the electric type characterised by the means for actuating the throttles at least one throttle being moved only by an electric actuator

Definitions

  • the invention relates to a safety emergency operation according to the type of the main claim.
  • a SAE Technical Paper No. 810157 describes a microcomputer-controlled internal combustion engine control.
  • the microcomputer or microprocessor used in this way generates control pulses built into its control program, which are processed by the microprocessor and therefore occur regularly if they function properly.
  • a malfunction of the program or the device can then be detected by a memory circuit or another device, since in this case, for example when the computer is at a standstill, no more control pulses are emitted.
  • a monostable multivibrator is provided, the output signal of which can be fed to the injection system and the ignition device.
  • the regular control impulses are suppressed below a prescribed speed of the internal combustion engine, particularly when the internal combustion engine is started up.
  • a reset circuit for a microcomputer is also known from DE-A-30 35 896, in which the control pulses indirectly open or close. Discharge a capacitor so that the absence of the control pulses can be detected by monitoring the capacitor voltage. If there are changes in the sequence of the control pulses above a predetermined level, the monitoring circuit generates a reset signal which resets the microcomputer. The reset phase is then followed by a release phase in which the system can restart.
  • a device for the electronic control of an electromagnetic actuator in which the actuator is controlled by an amplifier with a pulse-shaped signal.
  • the control signal and output signal of the output stage are fed to a logic which, in the event of a fault, cancels the control of the actuating device.
  • an electronic control device with a microcomputer is known from GB-A-2 007 397.
  • a test signal is issued to monitor the processor. If the processor is defective, this test signal is missing. In this case, the control signals are no longer generated by the microprocessor, but by an emergency running device.
  • the safety emergency running device has the advantage over the fact that the digital control of the final stage driving the actuator, a perfect detection of errors by feedback of output stage output signals to the controlling computer is possible, which then itself generates a switch-off signal and feeds a separate switch-off stage for the output stage so that the output stage as a whole is de-energized.
  • the output stage is therefore always switched off when component defects occur, for example due to alloyed output stage transistors, wire breaks on the two-winding turntable, errors in the transmission of the motor temperature through the NTC line and the like.
  • the existing correction spring in this case sets an uncritical bypass cross-section for the idle charge control, which prevents unwanted accelerating.
  • the power stage is switched off in a pulsed manner using a separate failsafe circuit with a minimum duty cycle, which also results in an emergency function for a computer failure.
  • the invention takes into account linearity errors in the actuator cross-section caused by correction spring or battery voltage changes in that the safety circuit corrections by querying a memory at micro-rake enabled.
  • the microcomputer is designed so that an interruption or non-connection of the NTC resistor supplying an indication of the motor temperature to the computer recognizes and the output stage is switched off in the event of a fault, likewise an interruption of the ignition signals is recognized and the output stage is switched on in the event of a fault.
  • FIG. 1 shows the block diagram of the safety circuit with an external failsafe circuit
  • FIG. 2 shows a first detailed exemplary embodiment of the output stage area with an assigned shutdown stage
  • FIG. 3 shows in detail a converter for converting voltage signals into a time duration signal that can be evaluated by the computer
  • FIG. 4 2 shows a further detailed exemplary embodiment with additional additions
  • FIG. 6 signal curves at different circuit points of the exemplary embodiment of FIG. 5.
  • 10 denotes a microcomputer or microprocessor, which is used to control certain system functions, for example an idle charge control in a motor vehicle.
  • the microcomputers 10 are peripherally assigned to the modules provided for system security and the required reaction in the event of a fault;
  • the microcomputer 10 is supplied with signals to be processed at its input 10a via a data line 11 from a block shown only schematically at 12, those of operating parameters of the to be controlled or controlled. System depend.
  • These operating parameters can, for example, provide information about the actual value of the current speed of the motor vehicle, the setpoint at this time, climatic conditions such as pressure and outside temperature, the position of the throttle valve and the like in the selected application of an idle charge control. be. From this information, which will be followed by a few more, which will be discussed in the following, the microcomputer 10 creates at its signal output 10b a control signal sequence which is used to control actuators via an output stage 13, in the present case a so-called two-winding rotary actuator 14 , which is connected in parallel to the throttle valve in the idle charge control as an air bypass and has a slide 14a, the position of which determines a desired passage cross-section based on the type of supply of clocked signals to the two partial windings 15a, 15b of the two-winding rotary actuator 14 via the output stage 13 results.
  • a bias spring 16 also acts, which in the event of a fault mitigates and switches off the possible emergence of dangerous driving situations due to faulty non-activation of the two-winding turntable, in particular, for example, in maneuvering and pushing operation that in this case a bypass cross-section required for driving safety is set mechanically with minimal passage.
  • the two-winding turntable is controlled by a single digital control pulse train, usually a rectangular pulse train via the output stage 13 by the microcomputer 10, it is the duty cycle n of the drive pulse train that determines the position of the slide 14a of the two-winding rotary control, the division of the individual pulses in push-pull is made by the power amplifier 13.
  • the steep element receives a non-linear profile and a battery voltage dependency due to the spring characteristic which is dependent on the weight, so that the partial winding 15a, 15b can be partially compensated for the constant spring action.
  • the computer 10 is therefore supplied with a battery voltage signal U BATT at a connection point 17 and converted into a time duration signal t s via an interposed analog-digital converter 18 and supplied to the input 10c of the computer.
  • a temperature signal of the engine v MO which is decisive for the idle charge control, arrives via the analog-digital converter block 19 ! from the connection 20 to the computer input 10d, in turn converted by the converter circuit 19 into a corresponding, temperature-related time duration signal tv.
  • a preferred embodiment of a converter for blocks 18 and 19 is discussed in more detail below with reference to the illustration in FIG. 3.
  • the temperature and battery voltage signals can also be read into the computer using external (or internal) A / D converters.
  • Microcomputer 10 designed in the manner of a PID controller uses the input parameters to determine the required basic duty cycle ⁇ and corrected for the influence of the battery voltage and the stored spring force (non-linear characteristic curve) by querying an external data memory, which is identified by 21 in the block diagram in FIG. 1 and a PROM, EPROM, etc. can be; the flow of data from the data memory 21 after appropriate addressing by the computer 10 is illustrated by the multi f ach effetive arrows.
  • the circuit is completed by, so to speak, a computer-internal first control and safety function, which is based on the corresponding inputs 10e and 10f of the computer being fed via feedback lines 22, 23 to the actuating signals of the two respective end stages which are responsible for one of the partial windings of the two-winding rotary actuator, so that the computer, in the event of a deviation of the returned duty cycle n 'of the windings of the two-winding rotary actuator from the duty cycle n of the control signal sequence predetermined by itself, can supply a shutdown signal via an intermediate OR gate 25 to a blocking block 26 which switches off the output stage; since the computer also outputs so-called failsafe pulses or control pulses at its output 27, the occurrence of which ensures that the computer works properly, in addition to the security concept according to the invention, an external security or so-called fail-safe circuit 28 can also be provided the same OR gate 25 also supply a shutdown signal to the shutdown block 26 in the event of a fault.
  • This switch-off signal also serves as a
  • the output stage 13 comprises two output stage semiconductor switches, namely the switching transistors T1 and T2, the collector of T1 over the connection point M1 is connected to the first partial winding 15a and the collector of the switching transistor T2 is connected via connection point M2 to the second partial winding 15b of the two-winding turntable 14.
  • the two collectors are then each connected to the positive battery voltage via diodes D1 and D2 which are polarized in the reverse direction and to which connection point (M +) the two merged connections of the partial windings 15a, 15b are also connected.
  • the two switching transistors T1 and T2 of the output stage 13 are driven by an upstream driver transistor TO, to which the drive pulse sequence with the pulse duty factor r 1 is supplied from the output 10b of the microcomputer 10 at the connection point 29.
  • the control signal sequence passes from the driver transistor TO to the first switching transistor T1, which then controls the collector of the second switching transistor T2 connected to it via the voltage divider resistors R1, R2.
  • the two output stage transistors T1 and T2 work alternately in push-pull on the partial windings, the relative position of the slide 14a on the two-winding rotary actuator resulting from the respective, relative time periods of the pulses (current time areas) supplied to the corresponding partial windings.
  • the current switching states on the two-winding turntable 14 are monitored by detecting the control signals at the switching points M1 and M2 to the partial windings 15a, 15b and are passed via resistors R7, R8 with correspondingly assigned calming or pulse-shaping stages from diodes D5, D4, capacitors C1 connected in parallel and C2 and resistors R9, R10 as actuator signals U1 and U2 indicating the current duty cycle n 'to the inputs 10e, 10f of the microcomputer 10.
  • the switch-off stage 26 which comprises a series transistor T5 with its emitter against ground, the collector of which is connected to the two combined emitters of the switching transistors T1 and T2 of the output stage 13.
  • Oring with the reset signal of the safety circuit 28 present at the other input connection 31 is effected in that the reset signal is supplied via a diode D1 at the connection point of two resistors R14, R13 in the control circuit between the pre-stage transistor T4 and the base of the series transistor T5.
  • the control signal curve with the pulse duty factor '1 is shown at a), the times t 1 and t 2 each being able to change relatively corresponding to r 1 , and at b) and c) the signal curves at the switching points M1 and M2 shown corresponding to the collectors of T1 and T2;
  • the waveform at d) represents the shutdown signal issued by the microcomputer 10 itself;
  • the waveforms corresponding to e) and f) are the tuned actuator signals Ü1 and Ü2 with the current duty cycle n ';
  • the signal curve at g) indicates the reset signal which comes from the failsafe circuit and at h) the failsafe or control pulses issued by the microcomputer 10 are shown which are fed to the failsafe circuit 28.
  • the computer 10 checks whether the read signals U1, U2 during times t 1 and t 2 correspond to the required signal curve with the duty cycle n.
  • the switch-off signal corresponding to d) goes high at time t o and thus de-energizes the switching transistors T1 and T2, so that their collectors corresponding to b) and c) assume high signals.
  • This high-level signal passes from the switching point M + to the collectors via the partial windings 15a, 15b. This shutdown of the computer can only be canceled by switching off the engine and restarting.
  • the failsafe circuit 28 serves to compensate for internal and external faults, also on the computer itself or, if appropriate, a voltage drop.
  • the failsafe pulses supplied to the failsafe circuit 28 by the computer corresponding to h) in FIG. 4 are omitted, so that the failsafe circuit 28 with its reset signal corresponding to g) going low via the OR link 25 to the series transistor T5 switches off the power amplifier and at the same time provides a hardware reset for the computer.
  • the failsafe circuit is designed so that in the event of a fault it then works itself as a free-running oscillator; it comprises at least one capacitor continuously charged by the control pulses of the microcomputer 10, so that an input signal tapped via this capacitor arrives at an input of a threshold value comparator circuit and, in the absence of the control pulses, the comparator output is switched according to the low potential of the reset signal with a subsequent release signal of shorter duration by feedback of the output to the input.
  • the failsafe circuit therefore works in the manner of a monoflop, with the release time being designated t 3 and the reset time t 4 in curve profile g) of FIG. 4.
  • Another fault can be the additional dependencies of the bypass cross-section set by the two-winding rotary actuator on the battery voltage, the spring characteristic and the motor temperature. It is initially assumed that the time signals received by the microcomputer 10 in accordance with the conversion at its inputs 10c, 10d are within the usual limit values. In this case, the computer carries out corresponding corrections or additions to the duty cycle setting by querying the memory 21.
  • FIG. 3 An embodiment of a converter, to which an input voltage Us to be converted into a period of time, which can be the battery voltage or a voltage proportional to the engine temperature, is supplied below with reference to the illustration in FIG. 3.
  • the connection point with the voltage to be converted is designated 32; this voltage reaches a capacitor C3 via the transistor T6, which is turned on at the input 33 in the absence of an interrogation signal by the microcomputer. This capacitor is constantly charged to the voltage Us to be converted. If the query pulse appears at connection 33 from the computer, transistor T6 is blocked and capacitor C3 discharges via a circuit, which is initially shown as adjustable resistor R18, until the reference voltage present at resistors R19, R20 at a downstream comparator K1 falls below is.
  • the comparator K1 changes its output signal U a, for example from high to low, and feeds this signal to the computer.
  • the computer is designed so that it counts the time from the setting of the interrogation pulse to the appearance of the comparator signal, so that there is a proportionality between the determined time t s and the voltage Us. If a linear relationship between these two quantities is desired — if the computer cannot or should not compensate for a nonlinear relationship by correspondingly querying the memory 21, the capacitor C3 can also be discharged via a constant current source.
  • the computer normally increases the bypass cross-section accordingly due to its warm-up program, so that an increase in speed can also occur.
  • the resistance range of the NTC resistor used here for example, for temperature measurement, only extends within predefined limits (in the preferred exemplary embodiment between approximately 26 kilohms, which corresponds to a maximum voltage applied to the converter 19 and a maximum duration t that can be determined by the computer), approximately -30 ° C, up to less than 400 ohms, which then corresponds to the minimum voltage and the minimum duration pulse, at about + 80 ° C).
  • an interruption of the ignition signal is important as a fault, since in this case the actual speed value n, st supplied to the microcomputer 10 is significantly smaller than a desired speed value n should . Accordingly, the computer is simulated in this case n is , and the computer sets the bypass completely in order to avoid the engine going out, so that there may be a dangerous speed increase.
  • FIG. 5 of a completed safety emergency running device with a large number of optional configurations shows the individual assemblies in dashed lines, components identical to the preceding exemplary embodiments and carrying out the same functions being identified by the same reference numerals; comparable components are marked with the same reference symbol and additionally with a comma at the top.
  • the circuit shown in FIG. 5 comprises the block 35, which is responsible for the control and regulation of the system functions and contains microprocessors, microcomputers, logic control or sequence circuits, with a microcomputer 10 ', memory 21' and a stabilizer circuit 36, the output stage 13 ', the block 26 'for the output stage shutdown, a failsafe or safety circuit 28', a circuit 37 for processing the output stage monitoring signals Ü1 and Ü2 and an emergency operation circuit 38.
  • the emergency running circuit 38 is only provided as an option; if it is present, then in the practical exemplary embodiment the output stage shutdown 26 ′ and possibly also the conditioning of the output stage monitoring signals by the circuit 37 can be dispensed with.
  • the failsafe circuit 28 ' which can also be referred to as a so-called watch-dog circuit, as control pulses now the control signal pulses THV issued by the microcomputer 10', which the Duty cycle n contained according to the bypass cross-section required by the computer for the respective operating state, are supplied.
  • the THV pulses reach the output stage 13 'via a comparator K1 which is additionally provided, the reference input generated at 39 being fed to the other input of K1.
  • the basic function is as follows, the special structure of the failsafe circuit 28 'and the emergency running generator being discussed further below. Since the switching transistors T1 and T2 can only work alternately, however, for safety reasons, as can easily be seen, only the "opening" of the two-winding turntable by means of the transistor T2, which was last actuated as agreed, is basically only necessary for the microcomputer 10 ' the collector signal of the transistor T2, pulse-shaped by the one pulse shaping stage 37a from the series resistor R8, followed by the parallel connection of the diode D4, the resistor R10 and the capacitor C2 as a final stage monitoring signal U2.
  • the computer queries the pulse ratio via Ü2 for correctness very shortly before and very shortly after each new duty cycle output. If the computer detects a deviation in the duty cycle, it itself sets the output EA (output stage shutdown) to low and the output stage switching transistors T1 and T2 are de-energized via the additional comparator K2 and the transistors T4 and T5 already mentioned above. As a result, the two-winding turntable, which is connected to the switching points M1, M2 and M +, is de-energized and the spring pulls it back to the specified safety cross-section, which, for example, corresponds to a speed of around 1400 n- 1 when the engine is warm.
  • EA output stage shutdown
  • the structure and function of the failsafe circuit are as follows.
  • the THV drive pulses from the computer reach a transistor T6 via a diode D6, which charges a storage capacitor C3.
  • the storage capacitor C3 is connected to an inverting input of a threshold stage, which is represented in a known manner by a comparator K4 with appropriate wiring.
  • a resistor R16 and a series connection of a resistor R17 and a diode D7 are arranged in a negative feedback branch to the inverting input.
  • the failsafe circuit 28' which takes over and as a square wave oscillator with a duty cycle of low, for example 135 ms and high, about 18 ms in reset Signal works.
  • the reset signal then goes, as already explained further above, to the reset and restarting to the microcomputer 10 'and reaches the output stage switch-off 26' via the diode D3, which due to the high phases and the resulting influence on the emergency running cross-section on the two-winding Rotary adjuster idle speed changes between 200 to 300 n- 1 up or down can result.
  • the alternative embodiment with the emergency running generator 38 comprises a free-running oscillator 01, formed by a comparator K3, which is also coupled via a resistor R18 and is negatively coupled via a resistor R19, a capacitor C4 being connected in parallel with the resistor R20 to ground from the inverting input is.
  • the emergency operation signal 'NOT as indicated by the dashed connecting line L1, reaches the inverting input of the comparator K1 connected upstream of the driver transistor TO, but can also control the output stage at another point, for example directly at the base of the driver transistor T0.
  • the limp-home generator 28 can be started by the reset signal of the failsafe circuit 28 'via a diode D8, but it can also oscillate continuously with a predetermined pulse duty factor such that in normal operation this is within the pulse duty factor sequence of the drive pulse sequence THV typically output by the microcomputer 10' and therefore in this case does not come into effect.
  • an advantageous embodiment of the invention can include both measures, because in the event of an error in the power stage shutdown 26 ', the emergency operation signal then brings the position of the slide of the two-winding rotary actuator into an uncritical range.
  • the pulse shaper stages 37a, 37b are connected in parallel in front of the respective connection resistors R8 and R7, that is to say in each case starting from the circuit points M1 and M2, interference protection zener diodes D9, D10; Furthermore, with regard to the security concept, it can be useful to carry out the generation of the output stage monitoring signals U1, U2 with high impedance by inserting comparators into the two connecting lines back to the computer, as indicated at 40, which makes it possible to switch off the Decisive current at least in the UP winding of the two-winding turntable.
  • a simple transistor stage (emitter circuit) is also useful here if the semiconductors are integrated on an IC or hybrid.
  • a further embodiment includes the insertion of an additional emitter resistor Rx from the emitter of the output stage cut-off series resistor T5 to ground and, in parallel with the base-emitter resistor, the arrangement of a zener diode D11 in this transistor, optionally in series with a further diode D12. This results in an effective current limitation which, based on the duty cycle output by the computer, also absorbs an actuator short circuit.
  • the switching transistors T1 and T2 can optionally have an additional emitter resistor R21, R22 and a limiting diode path parallel to the resistor connected from the base to ground, either from the series connection of a zener diode D12, D13 with a further diode D14, D15 or be equipped only from the Zener diode D12, D13.
  • the duty cycle control signal THV output by the microcomputer 10 passes via the comparator K1 and the driver transistor TO to the first switching transistor T1 of the output stage. Since the signal designations of the pulse sequences are indicated on the individual curve profiles of FIG. 6, the further functional sequence can be followed by observing the signal pulse sequences.
  • THV Iow
  • the first switching transistor T1 is conductive, it then leads the one connected to it the UP winding of the two-winding turntable nominal current and the second switching transistor T2 is blocked by the divided saturation voltage of the transistor T1.
  • the CLOSE winding of the two-winding turntable is de-energized.
  • the CLOSE winding carries nominal current.
  • the opening cross-section on the two-winding turntable is directly proportional to the ratio of the currents in the switch-on times.
  • the characteristic curve shift in the UP direction caused by the base current of the transistor T2, which is also dependent on the duty cycle, can be taken into account when constructing the two-winding rotary actuator.
  • the output signal at the collector of transistor T2 is inverted to the THV control signal; This signal is limited by the simply constructed pulse shaper stage 37a and fed back to the microcomputer 10 'as a Ü2 output stage monitoring signal.
  • the output stage shutdown signal EA which is output by the microcomputer 10 ', is clamped to low by the direct link via the diode D3 to the output of the failsafe circuit 28', whereby the comparator K2 and the driver transistor T4 block the series transistor T5 to the output stage switching transistors and the two-winding turntable windings are accordingly de-energized.
  • the signal shaping stage 37a and possibly 37b draw a current from the CLOSE winding or the OPEN winding which is additionally reduced by comparators 40 which are optionally connected downstream.
  • the built-in spring adjusts an emergency running cross-section for the two-turn turntable.
  • the microcomputer 10 After the reset phase has elapsed at time t 1 and after the completion of initialization routines up to time t 2, the microcomputer 10 'begins with the output of an emergency duty cycle according to its design, until it receives the data on the speed it has received , Temperature and other parameters.
  • the computer After each THV pulse output, for example at time t, the computer checks after a specified period of time t 8 ⁇ t 7 ⁇ 100 us that the Ü2 or. Ü2 and Ü1 signal level with the THV signal level. In the event of a deviation, for example a disturbance at time t B - the transistor T2 no longer blocks, the Ü2 signal is not switched up during the period t 10 ... "The computer via its I / O line (signal goes low) and the comparator K2 ultimately turns off the transistor T5 and de-energizes the actuator.
  • a power amplifier monitoring routine in the microcomputer 10 'then checks after a predetermined time, for example every 2 seconds, by switching on the EA line and corresponding interrogation of the Ü2 return line after a predetermined time, for example after 100 ps (this corresponds to approximately five times the duration of the transistor switching times including filtering) whether the malfunction is still relevant. Any resulting influencing of the actuator current by this brief query does not essentially lead to a change in the emergency running cross section set by the spring on the two-winding rotary actuator.
  • the failsafe circuit 28 takess over as a rectangular oscillator. She works' to be able to send possible reset and re anwer f s, where the reset phases also result in only a slight influence on the Notlaufquerterrorismes the controller with its reset signal to the microcomputer 10th
  • the Ü2 signal (and also the Ü1 signal) must return to a high level; if this is not the case, for example in the event of an external short to ground, then the output stage remains switched off due to the computer programming being made.

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Chemical & Material Sciences (AREA)
  • Combustion & Propulsion (AREA)
  • Mechanical Engineering (AREA)
  • Computer Hardware Design (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Combined Controls Of Internal Combustion Engines (AREA)
  • Electrical Control Of Air Or Fuel Supplied To Internal-Combustion Engine (AREA)
  • Safety Devices In Control Systems (AREA)
EP83106751A 1982-07-23 1983-07-09 Sicherheits-Notlaufeinrichtung für den Leerlaufbetrieb von Kraftfahrzeugen Expired EP0101850B1 (de)

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
DE3227546 1982-07-23
DE3227546 1982-07-23
DE3322240 1983-06-21
DE3322240A DE3322240A1 (de) 1982-07-23 1983-06-21 Sicherheits-notlaufeinrichtung fuer den leerlaufbetrieb von kraftfahrzeugen

Publications (3)

Publication Number Publication Date
EP0101850A2 EP0101850A2 (de) 1984-03-07
EP0101850A3 EP0101850A3 (en) 1984-08-01
EP0101850B1 true EP0101850B1 (de) 1988-01-20

Family

ID=25803247

Family Applications (1)

Application Number Title Priority Date Filing Date
EP83106751A Expired EP0101850B1 (de) 1982-07-23 1983-07-09 Sicherheits-Notlaufeinrichtung für den Leerlaufbetrieb von Kraftfahrzeugen

Country Status (4)

Country Link
US (1) US4580220A (GUID-C5D7CC26-194C-43D0-91A1-9AE8C70A9BFF.html)
EP (1) EP0101850B1 (GUID-C5D7CC26-194C-43D0-91A1-9AE8C70A9BFF.html)
JP (1) JPS5934449A (GUID-C5D7CC26-194C-43D0-91A1-9AE8C70A9BFF.html)
DE (2) DE3322240A1 (GUID-C5D7CC26-194C-43D0-91A1-9AE8C70A9BFF.html)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10146781B4 (de) * 2001-09-22 2015-02-12 Robert Bosch Gmbh Verfahren und Vorrichtung zur Überwachung der Ansteuerung eines Stellelements

Families Citing this family (35)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3342848A1 (de) * 1983-11-26 1985-06-05 Robert Bosch Gmbh, 7000 Stuttgart Sicherheitseinrichtung fuer eine elektronisch gesteuerte oder geregelte brennkraftmaschine mit mikrocomputer
GB8406331D0 (en) * 1984-03-10 1984-04-11 Lucas Ind Plc Control system
JPS60215174A (ja) * 1984-04-06 1985-10-28 Fujitsu Ten Ltd アイドル回転数制御バルブの制御装置
GB2158613B (en) * 1984-04-19 1987-07-15 Nissan Motor Fail-safe circuit for a control system
JPH0811942B2 (ja) * 1984-07-11 1996-02-07 株式会社日立製作所 エンジン制御装置
DE3501588A1 (de) * 1985-01-18 1986-07-24 Voest-Alpine Friedmann GmbH, Linz Anordnung zum steuern und regeln des verstellweges der regelstange einer einspritzbrennkraftmaschine
US4685052A (en) * 1985-02-19 1987-08-04 American Standard Inc. Pulse train presence detector
JPS61207855A (ja) * 1985-03-11 1986-09-16 Honda Motor Co Ltd 内燃エンジンの燃料供給制御装置
JP2679970B2 (ja) * 1985-10-21 1997-11-19 株式会社日立製作所 アイドル回転速度制御装置
JPS62106524A (ja) * 1985-11-01 1987-05-18 Clarion Co Ltd 車載用の機器のマイクロコンピユ−タリセツト回路
US4771755A (en) * 1986-01-22 1988-09-20 Honda Giken Kogyo K.K. Abnormality detecting method for air-fuel ratio control system for internal combustion engines
JPH0663471B2 (ja) * 1986-02-13 1994-08-22 本田技研工業株式会社 内燃機関の補助空気量制御装置
JPH073403B2 (ja) * 1986-03-27 1995-01-18 本田技研工業株式会社 酸素濃度センサの異常検出方法
JPS62261640A (ja) * 1986-05-07 1987-11-13 Mitsubishi Electric Corp 内燃機関用燃料噴射制御装置の故障時制御装置
US5182755A (en) * 1987-06-19 1993-01-26 Diesel Kiki Co., Ltd. Malfunction checking system for controller
DE3720255A1 (de) * 1987-06-19 1988-12-29 Bosch Gmbh Robert System zur einstellung des drosselklappenwinkels
US4768013A (en) * 1987-07-01 1988-08-30 Nissan Motor Company, Limited Method and apparatus for diagnosing failure in idle switch for internal combustion engines
JPS6461830A (en) * 1987-08-31 1989-03-08 Aisin Seiki Protecting device for automobile microcomputer
DE3733623A1 (de) * 1987-10-05 1989-04-13 Bosch Gmbh Robert Einrichtung zur einstellung einer betriebskenngroesse einer brennkraftmaschine
WO1990001189A1 (en) * 1988-07-28 1990-02-08 Robert Bosch Gmbh Apparatus for defined switching of a microcomputer to standby mode
WO1990001631A1 (en) * 1988-07-29 1990-02-22 Mitsubishi Jidosha Kogyo Kabushiki Kaisha Fail-safe device for a temperature sensor
US5019717A (en) * 1988-11-14 1991-05-28 Elegant Design Solutions Inc. Computer-controlled uninterruptable power supply
US5184025A (en) * 1988-11-14 1993-02-02 Elegant Design Solutions, Inc. Computer-controlled uninterruptible power supply
DE3909396A1 (de) * 1989-03-22 1990-10-04 Bayerische Motoren Werke Ag Vorrichtung zur bemessung der leerlaufluft von brennkraftmaschinen
DE3926377C2 (de) * 1989-08-04 2003-03-06 Bosch Gmbh Robert Elektronisches Steuergerät für eine Brennkraftmaschine
JPH03233160A (ja) * 1990-02-08 1991-10-17 Mitsubishi Electric Corp エンジンの制御装置
JP2504289B2 (ja) * 1990-05-21 1996-06-05 宇部興産株式会社 押出プレス用後面設備サブストレッチャのテ―ルストック
DE4130712A1 (de) * 1991-09-14 1993-03-18 Kloeckner Humboldt Deutz Ag Steuerung elektromagnetischer ventile
JP3564148B2 (ja) * 1992-05-08 2004-09-08 株式会社ボッシュオートモーティブシステム 内燃機関の燃料噴射制御システム
EP0702808B1 (en) * 1994-04-06 2001-11-07 Koninklijke Philips Electronics N.V. Reset and watchdog system for a microprocessor, and appliance comprising such a microprocessor and such a system
DE19516208C1 (de) * 1995-05-03 1996-07-25 Siemens Ag Verfahren zur Überwachung einer Leistungsendstufe und Schaltungsanordnung zur Durchführung dieses Verfahrens
DE19541734C2 (de) * 1995-11-09 1997-08-14 Bosch Gmbh Robert Schaltungsanordnung zur Durchführung eines Reset
DE19722288A1 (de) * 1997-05-28 1998-12-03 Bosch Gmbh Robert Verfahren und Vorrichtung zur Regelung eines Stellelements mit integralem Verhalten
US6359794B1 (en) 1999-12-01 2002-03-19 Acme Electric Corporation Battery backup power supply
JP6266759B2 (ja) * 2014-03-31 2018-01-31 本田技研工業株式会社 車両用ｌｅｄ灯火器システム

Family Cites Families (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPS5458110A (en) * 1977-10-19 1979-05-10 Hitachi Ltd Automobile controller
US4328547A (en) * 1978-02-27 1982-05-04 The Bendix Corporation Failure system for internal combustion engine
JPS54148175A (en) * 1978-05-13 1979-11-20 Aoyama Seisakusho Production of upset type bolt
DE2964900D1 (en) * 1978-08-24 1983-03-31 Lucas Ind Plc Control circuits for solenoids
DE2847021A1 (de) * 1978-10-28 1980-05-14 Bosch Gmbh Robert Vorrichtung zur regelung von betriebskenngroessen einer brennkraftmaschine auf optimale werte
FR2458106A1 (fr) * 1979-05-31 1980-12-26 Thomson Csf Circuit electronique de commande pour electrovanne
JPS566134A (en) * 1979-06-28 1981-01-22 Nissan Motor Co Ltd Diagnostic unit of controller for car
DE2945543A1 (de) * 1979-11-10 1981-05-21 Robert Bosch Gmbh, 7000 Stuttgart Einrichtung zum steuern von betriebsparameterabhaengigen und sich wiederholenden vorgaengen fuer brennkraftmaschinen
JPS56118526A (en) * 1980-02-22 1981-09-17 Hitachi Ltd Electronically controlled fuel supply apparatus
DD159511A3 (de) * 1980-03-06 1983-03-16 Rolf Sobadky Sicherheitsvorrichtungen fuer impulsgesteuerte elektronische brennstoffeinspritzvorrichtungen,insbesondere an brennkraftmaschinen
JPS56135201A (en) * 1980-03-24 1981-10-22 Nissan Motor Co Ltd Pulse generator for engine control
JPS56135250A (en) * 1980-03-24 1981-10-22 Nissan Motor Co Ltd Output device of microcomputer
DE3035896C2 (de) * 1980-09-24 1984-02-09 Robert Bosch Gmbh, 7000 Stuttgart Schaltungsanordnung zur Erzeugung von Impulen bei Störung der Stromversorgung
DE3039435C2 (de) * 1980-10-18 1984-03-22 Robert Bosch Gmbh, 7000 Stuttgart Vorrichtung zur Regelung der Leerlauf-Drehzahl von Brennkraftmaschinen
JPS5786554A (en) * 1980-11-18 1982-05-29 Hitachi Ltd Backup device for idle rpm control system
JPS588249A (ja) * 1981-07-08 1983-01-18 Mazda Motor Corp エンジンのアイドル回転制御装置
JPS5827831A (ja) * 1981-08-11 1983-02-18 Toyota Motor Corp 内燃機関用空気流量制御装置
DE3238189A1 (de) * 1982-10-15 1984-04-19 Robert Bosch Gmbh, 7000 Stuttgart Leerlauf-regelsystem fuer eine brennkraftmaschine
JPS6040837U (ja) * 1983-08-30 1985-03-22 富士重工業株式会社 エンジンのピツチングストツパ装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
"Die Meisterprüfung im Kfz-Handwerk", Dipl. Ing. J. LEYHAUSEN, 7. Auflage, Teil 2 "Otto und Dieselmotoren, Fahrzeugbremser, Kfz Elektrik", 1980, Vogel-Verlag, Seiten 1063-1067 *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10146781B4 (de) * 2001-09-22 2015-02-12 Robert Bosch Gmbh Verfahren und Vorrichtung zur Überwachung der Ansteuerung eines Stellelements

Also Published As

Publication number Publication date
US4580220A (en) 1986-04-01
DE3375420D1 (en) 1988-02-25
EP0101850A2 (de) 1984-03-07
EP0101850A3 (en) 1984-08-01
JPS5934449A (ja) 1984-02-24
DE3322240C2 (GUID-C5D7CC26-194C-43D0-91A1-9AE8C70A9BFF.html) 1991-12-19
JPH0541823B2 (GUID-C5D7CC26-194C-43D0-91A1-9AE8C70A9BFF.html) 1993-06-24
DE3322240A1 (de) 1984-01-26

Similar Documents

Publication Publication Date Title
EP0101850B1 (de) Sicherheits-Notlaufeinrichtung für den Leerlaufbetrieb von Kraftfahrzeugen
EP0826102B1 (de) Verfahren und vorrichtung zur steuerung einer antriebseinheit eines fahrzeugs
EP0185667B1 (de) Rücksetzschaltung für mikroprozessoren
EP2961973B1 (de) Verfahren und anordnung zur steuerung einer brennkraftmaschine mit mindestens zwei steuereinheiten
EP0716781B1 (de) Vorrichtung zum betreiben eines verbrauchers in einem fahrzeug
DE10117450B4 (de) Verfahren und Vorrichtung zur Steuerung der Drosselklappe für einen Verbrennungsmotor zum Antrieb eines Fahrzeugs unter Nutzung redundanter Drosselsignale
EP1019621A1 (de) Anordnung zum regeln des ladedrucks einer brennkraftmaschine
DE3322242A1 (de) Einrichtung zur funktionsueberwachung elektronischer geraete, insbesondere mikroprozessoren
EP0326694B1 (de) Sicherheitssystem für Brennkraftmaschinen
DE10345424A1 (de) Motorluftansaugsteuervorrichtung und Motorluftansaugsteuerverfahren
EP1266136A2 (de) Vorrichtung und verfahren zur regelung des energieangebots für die zündung in einer brennkraftmaschine
DE4134495A1 (de) Steuereinrichtung fuer elektrische motoren in fahrzeugen
WO2016166146A1 (de) Gegen überspannung geschütztes elektronisches steuergerät
WO2002099444A1 (de) Verfahren zur überwachung einer spannungsversorgung eines steuergeräts in einem kraftfahrzeug
EP0596297B1 (de) Verfahren und Vorrichtung zur Überprüfung einer Überwachungseinheit von Motorsteuersystem
EP2494534B1 (de) Sicherheits-kommunikationssystem zur signalisierung von systemzuständen
DE102004020538B4 (de) Elektronische Steuereinrichtung und Verfahren zur Steuerung des Betriebs von Kraftfahrzeugkomponenten
DE102006001805A1 (de) Sicherheitsvorrichtung zum mehrkanaligen Steuern einer sicherheitstechnischen Einrichtung
EP0483449B1 (de) Als Bauteil ausgebildete Schaltungsanordnung mit mindestens einem Halbleiterschalter zum Schalten einer Last
DE3322073C2 (GUID-C5D7CC26-194C-43D0-91A1-9AE8C70A9BFF.html)
EP0326693A1 (de) Sicherheitssystem für Brennkraftmaschinen
DE10306553B4 (de) Steuervorrichtung für Kraftfahrzeuge und Verfahren zum Betreiben einer Steuervorrichtung
DE10040246A1 (de) Verfahren und Vorrichtung zur Ansteuerung wenigstens eines Verbrauchers
DE4129292C2 (de) Verfahren zur Erkennung von Zündfehlfunktionen
DE102008008666B4 (de) Schaltungsanordnung

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 19830709

AK Designated contracting states

Designated state(s): DE FR GB

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Designated state(s): DE FR GB

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): DE FR GB

REF Corresponds to:

Ref document number: 3375420

Country of ref document: DE

Date of ref document: 19880225

GBT Gb: translation of ep patent filed (gb section 77(6)(a)/1977)
ET Fr: translation filed
PLBI Opposition filed

Free format text: ORIGINAL CODE: 0009260

26 Opposition filed

Opponent name: SIEMENS AKTIENGESELLSCHAFT, BERLIN UND MUENCHEN

Effective date: 19881019

PLBN Opposition rejected

Free format text: ORIGINAL CODE: 0009273

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: OPPOSITION REJECTED

27O Opposition rejected

Effective date: 19910202

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 19940629

Year of fee payment: 12

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 19940729

Year of fee payment: 12

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 19940928

Year of fee payment: 12

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Effective date: 19950709

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 19950709

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DE

Effective date: 19960402

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Effective date: 19960430

REG Reference to a national code

Ref country code: FR

Ref legal event code: ST

REG Reference to a national code

Ref country code: FR

Ref legal event code: ST

REG Reference to a national code

Ref country code: FR

Ref legal event code: ST

APAH Appeal reference modified

Free format text: ORIGINAL CODE: EPIDOSCREFNO