EP0245296A1 - Rechnersystem mit zwei prozessoren - Google Patents
Rechnersystem mit zwei prozessorenInfo
- Publication number
- EP0245296A1 EP0245296A1 EP19860905738 EP86905738A EP0245296A1 EP 0245296 A1 EP0245296 A1 EP 0245296A1 EP 19860905738 EP19860905738 EP 19860905738 EP 86905738 A EP86905738 A EP 86905738A EP 0245296 A1 EP0245296 A1 EP 0245296A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- processors
- computer system
- processor
- control
- setpoint
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/16—Error detection or correction of the data by redundancy in hardware
- G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
- G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
- G06F11/2035—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant without idle spare hardware
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02D—CONTROLLING COMBUSTION ENGINES
- F02D41/00—Electrical control of supply of combustible mixture or its constituents
- F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
- F02D41/26—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
- F02D41/266—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor the computer being backed-up or assisted by another circuit, e.g. analogue
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B9/00—Safety arrangements
- G05B9/02—Safety arrangements electric
- G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02B—INTERNAL-COMBUSTION PISTON ENGINES; COMBUSTION ENGINES IN GENERAL
- F02B3/00—Engines characterised by air compression and subsequent fuel addition
- F02B3/06—Engines characterised by air compression and subsequent fuel addition with compression ignition
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/16—Error detection or correction of the data by redundancy in hardware
- G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
- G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
- G06F11/2023—Failover techniques
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/16—Error detection or correction of the data by redundancy in hardware
- G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
- G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
- G06F11/2023—Failover techniques
- G06F11/203—Failover techniques using migration
Definitions
- the invention relates to a computer system with two processors for controlling parameters of an internal combustion engine according to the type of the main claim.
- Computer systems with a division of functions are known in which a main computer in normal operation, which represents the fault-free state, takes over the entire computer load for the necessary control and regulating functions.
- a second computer which is used exclusively as an emergency computer, can take over emergency functions in the event of a failure of the main computer and thus maintain restricted operation.
- the main computer has to perform all the computer functions for normal operation, for example to determine the injection quantity and the injection timing depending on the speed and the position of the pedestrian, a correspondingly large storage and computing capacity is required for the main computer.
- the computer system according to the invention with the features of The main claim has the advantage, due to the distribution of the computer load in normal operation over two processors, of enabling a high computer speed in determining essential manipulated variables. It is particularly advantageous if, in order to regulate the control rod of a diesel injection pump, the setpoint is determined in one processor, whereas the manipulated variable is calculated as a function of the difference between the setpoint and the actual value in the other processor. This measure allows the control speed to be increased significantly without impairing the other control and monitoring tasks that must be carried out by the two processors.
- the two processors are supplied with the essential operating states via duplicated encoders.
- speed sensor, foot pedal sensor and the sensor monitoring the brake position can be provided in duplicate. If one of these sensors fails, the corresponding other sensor is switched over.
- a control path transmitter is provided which reports the actual value to the processors.
- control rod can be adjusted by the setpoint using a proportional-differential adjustment controller. As a result, the control rod is at least approximately adjusted to the respective operating state.
- the block diagram shown in the drawing shows a computer system with a first processor P1 and a second processor P2, some of which have identical control and regulating devices.
- the processor P1 comprises a quantity control 11, to which input signals from the brake, the foot pedal FFG and a first speed sensor D1 are fed on the input side.
- the speed sensor D1 is connected to the quantity control 11 via a controllable changeover switch S11.
- the output signal of the quantity control which represents the target value U TARGET , is fed to a proportional differential adjustment controller 12 and a comparator 13 at its positive input.
- the actual value U IST which represents the position of the control rod of the injection pump, is present at the negative input of the comparator 13.
- the output-side difference signal of the comparator 13 is fed to a control controller 14.
- the outputs of the PD adjustment controller 12 and the control controller 14 can optionally be connected to the input of an output stage E via a controllable changeover switch S12 and two further external changeover switches S1, S2, which are used for actuation the control rod of an injection pump serving as an adjusting element is provided.
- the second processor P2 also has a narrow-range control 21, which, however, is only activated in the event of a defect in the quantity control 11 or in the processor P1 by means of a switch S23 connected downstream.
- corresponding signal lines which have a logic "I” in the event of a defect in the processor P1 or a defect in the quantity control 11 are connected via an OR circuit to the control input of the switch S 23 which is connected when a logic "I" occupies the other switch position, not shown here, and connects the output of the Menger control unit 21 to the input of the PD adjustment controller 22.
- a changeover switch S21 provided in the processor P2, a comparator 23, a setting regulator 24 and a controllable changeover switch S22 correspond in their function to the corresponding devices described above.
- the quantity control is also supplied with 21 sensor signals from a speed sensor D2, from the pedestrian sensor FFG and from a sensor which characterizes the position of the brake.
- the switch positions shown in the exemplary embodiment correspond to the normal, trouble-free operation.
- the setpoint U SOL L is transmitted from the quantity control 11 to the comparator 23 of the processor P2 via a serial interface and the changeover switch S23.
- the control controller 24 outputs the control value via the changeover switch S22
- the associated control 15 or 25 causes the associated switch S11 or S21 to be switched over. If, for example, a defect occurs in the speed sensor D1, the changeover switch S11 is brought into the other position (not shown here) via the associated controller 15, so that the sensor signals of the speed sensor D2 can reach the input of the quantity control 11 via a bridge.
- the switches S12 and S22 are associated with controls 16 and 26 which, in the event of a defect in the regulating path transmitter, cause a switchover, so that the regulators 14, 24 have no effect and the PD actuators 12, 22 become effective.
- the function of the two processors P1, P2 is monitored by means of assigned monitoring circuits UE1 and UE2. If both monitoring circuits UE1, UE2 detect faults in the assigned processors P1, P2, a switch of the switch S2 and thus a shutdown of the output stage E is effected via the downstream AND gate.
- the fuel supply is also switched off electronically if there is a permanent control deviation in processor P2 or a permanent control deviation in processor P1 at the same time
- processor P2 Defect in processor P2 can be found. These functions are represented by AND circuits 31, 32 and an OR circuit 33.
- the OR circuit 33 is followed by an electronic switch 34, symbolically represented as a transistor, by means of which the fuel supply is switched off electronically.
Landscapes
- Engineering & Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Quality & Reliability (AREA)
- Microelectronics & Electronic Packaging (AREA)
- Chemical & Material Sciences (AREA)
- Combustion & Propulsion (AREA)
- Mechanical Engineering (AREA)
- Automation & Control Theory (AREA)
- Electrical Control Of Air Or Fuel Supplied To Internal-Combustion Engine (AREA)
- Safety Devices In Control Systems (AREA)
Description
Claims
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE3539407 | 1985-11-07 | ||
DE19853539407 DE3539407A1 (de) | 1985-11-07 | 1985-11-07 | Rechnersystem mit zwei prozessoren |
Publications (1)
Publication Number | Publication Date |
---|---|
EP0245296A1 true EP0245296A1 (de) | 1987-11-19 |
Family
ID=6285322
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP19860905738 Ceased EP0245296A1 (de) | 1985-11-07 | 1986-09-19 | Rechnersystem mit zwei prozessoren |
Country Status (4)
Country | Link |
---|---|
EP (1) | EP0245296A1 (de) |
JP (1) | JPS63501303A (de) |
DE (1) | DE3539407A1 (de) |
WO (1) | WO1987003044A1 (de) |
Families Citing this family (28)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE3700986C2 (de) * | 1987-01-15 | 1995-04-20 | Bosch Gmbh Robert | Einrichtung zur Überwachung eines Rechnersystems mit zwei Prozessoren in einem Kraftfahrzeug |
DE3726489C2 (de) * | 1987-08-08 | 1995-04-20 | Bosch Gmbh Robert | Einrichtung zur Überwachung eines Rechnersystems mit zwei Prozessoren in einem Kraftfahrzeug |
DE3733623A1 (de) * | 1987-10-05 | 1989-04-13 | Bosch Gmbh Robert | Einrichtung zur einstellung einer betriebskenngroesse einer brennkraftmaschine |
US5448480A (en) * | 1988-05-11 | 1995-09-05 | Siemens Aktiengesellschaft | Fail-safe operation via controller redundancy for steering the back wheels of a road vehicle |
DE3816254A1 (de) * | 1988-05-11 | 1989-11-23 | Siemens Ag | Steuereinheit zur lenkung der hinterraeder eines strassenfahrzeuges |
DE4002389A1 (de) * | 1989-05-02 | 1990-11-08 | Bosch Gmbh Robert | Kraftstoffzumesssystem mit redundanter regeleinrichtung |
DE3926377C2 (de) * | 1989-08-04 | 2003-03-06 | Bosch Gmbh Robert | Elektronisches Steuergerät für eine Brennkraftmaschine |
DE4128658A1 (de) * | 1991-08-29 | 1993-03-04 | Bosch Gmbh Robert | Verfahren zur steuerung von betriebsparameterabhaengigen und sich zyklisch wiederholenden betriebsvorgaengen von brennkraftmaschinen |
DE4133268A1 (de) * | 1991-10-08 | 1993-04-15 | Bosch Gmbh Robert | Vorrichtung zur steuerung der antriebsleistung eines fahrzeuges |
US5320076A (en) * | 1991-10-10 | 1994-06-14 | Robert Bosch Gmbh | Arrangement for detecting the position of an accelerator pedal and/or a power-determining element of the internal combustion engine of a motor vehicle |
US5654888A (en) * | 1992-06-20 | 1997-08-05 | Robert Bosch Gmbh | Control arrangement for vehicles |
DE4220247A1 (de) * | 1992-06-20 | 1993-12-23 | Bosch Gmbh Robert | Steuereinrichtung für Fahrzeuge |
FR2694341B1 (fr) * | 1992-07-31 | 1994-10-07 | Robin Centre Est Aeronautique | Système de commande d'alimentation, en particulier pour moteurs à combustion interne d'avions légers. |
DE4231449C2 (de) * | 1992-09-19 | 2002-04-11 | Bosch Gmbh Robert | Vorrichtung zur Steuerung der Antriebsleistung eines aus wenigstens zwei Zylinderbänken aufgebauten Motors |
US5546306A (en) * | 1992-10-27 | 1996-08-13 | Honda Giken Kogyo Kabushiki Kaisha | Multiple processor throttle control apparatus for an internal combustion engine |
FR2697585B1 (fr) * | 1992-10-29 | 1995-01-06 | Solex | Système de contrôle moteur à corps de papillon motorisé. |
DE4314118B4 (de) * | 1993-04-29 | 2006-08-31 | Robert Bosch Gmbh | Verfahren und Vorrichtung zur Steuerung der Antriebsleistung eines Fahrzeugs |
DE19640432C2 (de) * | 1996-09-30 | 2002-09-26 | Siemens Ag | Verfahren zum Überwachen einer Brennkraftmaschine |
DE19743463A1 (de) * | 1997-10-01 | 1999-04-08 | Itt Mfg Enterprises Inc | Verfahren zur Fehlerkennung von Mikroprozessoren in Steuergeräten eines Kfz. |
DE19845220A1 (de) | 1998-10-01 | 2000-04-13 | Bosch Gmbh Robert | Verfahren und Vorrichtung zur Synchronisation und Überprüfung von Prozessor und Überwachungsschaltung |
FR2796420B1 (fr) * | 1999-07-15 | 2005-08-19 | Renault | Dispositif d'injection pour moteur a combustion interne |
DE19947252A1 (de) * | 1999-09-30 | 2001-05-03 | Bosch Gmbh Robert | Vorrichtung und Verfahren zur Steuerung einer Antriebseinheit |
DE10009779A1 (de) * | 2000-03-01 | 2001-09-06 | Bosch Gmbh Robert | Verfahren zur Klopfregelung einer Verbrennungskraftmaschine |
GB2360856B (en) * | 2000-03-30 | 2004-06-23 | Llanelli Radiators Ltd | Intelligent control unit |
DE102011011755A1 (de) | 2011-02-18 | 2012-08-23 | Conti Temic Microelectronic Gmbh | Halbleiterschaltkreis und Verfahren in einem Sicherheitskonzept zum Einsatz in einem Kraftfahrzeug |
CN102890487A (zh) * | 2012-09-24 | 2013-01-23 | 三一重机有限公司 | 多控制器电控系统 |
US10753335B2 (en) | 2018-03-22 | 2020-08-25 | Continental Motors, Inc. | Engine ignition timing and power supply system |
WO2021072617A1 (zh) * | 2019-10-15 | 2021-04-22 | 北京理工大学 | 一种航空器机电复合传动系统容错控制方法 |
Family Cites Families (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPS5810246A (ja) * | 1981-07-13 | 1983-01-20 | Nissan Motor Co Ltd | 車両用ディジタル制御装置 |
DE3303102A1 (de) * | 1983-01-31 | 1984-08-02 | Siemens AG, 1000 Berlin und 8000 München | Anordnung zur regelung der durchflussmenge |
DE3342379A1 (de) * | 1983-11-24 | 1985-06-05 | Robert Bosch Gmbh, 7000 Stuttgart | Notsteuersystem fuer kraftstoffzumesseinrichtungen |
-
1985
- 1985-11-07 DE DE19853539407 patent/DE3539407A1/de not_active Withdrawn
-
1986
- 1986-09-19 EP EP19860905738 patent/EP0245296A1/de not_active Ceased
- 1986-09-19 JP JP50536686A patent/JPS63501303A/ja active Pending
- 1986-09-19 WO PCT/DE1986/000407 patent/WO1987003044A1/de not_active Application Discontinuation
Non-Patent Citations (1)
Title |
---|
See references of WO8703044A1 * |
Also Published As
Publication number | Publication date |
---|---|
WO1987003044A1 (en) | 1987-05-21 |
DE3539407A1 (de) | 1987-05-14 |
JPS63501303A (ja) | 1988-05-19 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP0245296A1 (de) | Rechnersystem mit zwei prozessoren | |
EP0536557B1 (de) | Vorrichtung zur Steuerung der Antriebsleistung eines Fahrzeugs | |
DE10207314B4 (de) | Ansaugluftmengenregelsystem für Verbrennungsmotor | |
EP0446453B1 (de) | Verfahren und Einrichtung zur elektrischen Steuerung und/oder Regelung einer Brennkraftmaschine eines Kraftfahrzeugs | |
DE102006006079B4 (de) | Fehlerdiagnoseverfahren und -vorrichtung für Krümmerdrucksensoren | |
DE4241849C2 (de) | Lenksystem für Fahrzeuge oder Schiffe | |
EP0610316B1 (de) | Verfahren und vorrichtung zur fehlerbehandlung in elektronischen steuergeräten | |
DE68920922T2 (de) | Fahrzeugsteuerungsgerät. | |
EP1092177B1 (de) | Regler bzw. triebwerksregler, triebwerk und verfahren zum regeln eines stell- oder antriebssystems bzw. eines triebwerks | |
EP1493064A2 (de) | Vorrichtung zum fehlersicheren abschalten eines elektrischen verbrauchers, insbesondere in industriellen produktionsanlagen | |
DE69119523T2 (de) | Fehlererkennung in Relaisansteuerungsschaltungen | |
WO2017137222A1 (de) | Rechner- und funktionsarchitektur zur erhöhung der ausfallsicherheit einer hilfskraftlenkung | |
DE19937159B4 (de) | Elektrisch gesteuertes Bremssystem | |
EP0601150B1 (de) | Steuereinrichtung für fahrzeuge | |
WO2007025844A1 (de) | Verfahren zur verfügbarkeitserhöhung von kraftfahrzeugmotoren | |
DE4112665A1 (de) | Einrichtung zur erfassung einer veraenderlichen groesse in kraftfahrzeugen | |
DE4431901B4 (de) | Vorrichtung zur Störerfassung in einem Antischlupf-Bremssteuersystem für Kraftfahrzeuge | |
EP1171332B1 (de) | Lenk- und bremssystem für ein fahrzeug | |
DE4002389A1 (de) | Kraftstoffzumesssystem mit redundanter regeleinrichtung | |
EP1506616A1 (de) | Elektronische schaltungsanordnung zur fehlerabgesicherten analog-/digital-umwandlung von signalen | |
DE4314118B4 (de) | Verfahren und Vorrichtung zur Steuerung der Antriebsleistung eines Fahrzeugs | |
DE102012221277A1 (de) | Fahrzeugsteuervorrichtung | |
DE102005025994A1 (de) | Verfahren zum Betreiben einer elektrischen Maschine und Ansteuersystem hierzu | |
DE4117393A1 (de) | Einrichtung zur steuerung der kraftstoffeinspritzung einer brennkraftmaschine | |
DE102005052260A1 (de) | Verfahren zur Überwachung mehrerer Sensoren |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 19870604 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AT DE FR |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: EXAMINATION IS IN PROGRESS |
|
17Q | First examination report despatched |
Effective date: 19880225 |
|
18R | Application refused |
Effective date: 19880814 |
|
RIN1 | Information on inventor provided before grant (corrected) |
Inventor name: WAHLER, ROLF Inventor name: WEISCHEDEL, GUIDO Inventor name: SIEBER, ALBRECHT Inventor name: FLAIG, ULRICH |