EP3439949B1 - Système de commande de moteur avec fonction de sécurité - Google Patents

Système de commande de moteur avec fonction de sécurité Download PDF

Info

Publication number
EP3439949B1
EP3439949B1 EP16721848.6A EP16721848A EP3439949B1 EP 3439949 B1 EP3439949 B1 EP 3439949B1 EP 16721848 A EP16721848 A EP 16721848A EP 3439949 B1 EP3439949 B1 EP 3439949B1
Authority
EP
European Patent Office
Prior art keywords
key
engine control
user
hmi
function
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP16721848.6A
Other languages
German (de)
English (en)
Other versions
EP3439949A1 (fr
Inventor
Peter ÖSTERBACK
Anssi KOIVULA
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Wartsila Finland Oy
Original Assignee
Wartsila Finland Oy
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Wartsila Finland Oy filed Critical Wartsila Finland Oy
Publication of EP3439949A1 publication Critical patent/EP3439949A1/fr
Application granted granted Critical
Publication of EP3439949B1 publication Critical patent/EP3439949B1/fr
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D11/00—Arrangements for, or adaptations to, non-automatic engine control initiation means, e.g. operator initiated
    • F02D11/06—Arrangements for, or adaptations to, non-automatic engine control initiation means, e.g. operator initiated characterised by non-mechanical control linkages, e.g. fluid control linkages or by control linkages with power drive or assistance
    • F02D11/10—Arrangements for, or adaptations to, non-automatic engine control initiation means, e.g. operator initiated characterised by non-mechanical control linkages, e.g. fluid control linkages or by control linkages with power drive or assistance of the electric type
    • F02D11/107—Safety-related aspects
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B63—SHIPS OR OTHER WATERBORNE VESSELS; RELATED EQUIPMENT
    • B63H—MARINE PROPULSION OR STEERING
    • B63H21/00—Use of propulsion power plant or units on vessels
    • B63H21/22—Use of propulsion power plant or units on vessels the propulsion power units being controlled from exterior of engine room, e.g. from navigation bridge; Arrangements of order telegraphs

Definitions

  • the present invention relates to a control system for an engine such as a diesel engine, a gas engine or a liquid natural gas (LNG) engine, where the control system is equipped with a safety control means that may be employed e.g. to ensure safety of the maintenance personnel during maintenance operations applied to the engine.
  • a safety control means that may be employed e.g. to ensure safety of the maintenance personnel during maintenance operations applied to the engine.
  • Engines of several types such as internal combustion engines (ICE) like diesel engines, gas engines and LNG engines, are commonly used for various industrial purposes to supply power e.g. in power plants, in marine vessels, in offshore platforms such as oil rigs, etc.
  • ICE internal combustion engines
  • LNG engines LNG engines
  • a single engine or an engine system of a plurality (e.g. two or more) engines may be employed as the power source.
  • a high operational reliability and early reaction to any need for maintenance of an engine is typically a critical characteristic for the performance of the engine or engine system, while any maintenance operation to be carried out for an engine preferably requires as short downtime of the engine as possible to limit the interruptions or reductions in the power supply from the engine or engine system.
  • a maintenance operation performed on a large engine typically employed in such usage scenarios requires special attention to the safety of the maintenance personnel.
  • there is typically a need to ensure that the engine is not accidentally started during a maintenance operation for safety reasons which in known solutions is typically provided via a mechanical or electro-mechanical switch provided for the purpose of switching off the power from the engine.
  • this may lead to a cumbersome and/or unsatisfactory solution that may result in prolonged or sometimes even unnecessary downtime of the engine in view of the characteristics of the maintenance operation in question.
  • US 2007/227429 A1 discloses an outboard motor control system that can have a first PTT switch and a second PTT switch in a first steering station and in a second steering station respectively, and a third PTT switch in a location outside of a boat hull.
  • Operation instruction given by each PTT switch can be input to a first microcomputer of a first ECU.
  • the first microcomputer can determine if the inputted operation instruction is to be sent to the outboard motor, based on which PTT switch the operation instruction came from, whether the main switch is ON or OFF, and which steering station has precedence in boat control.
  • US 2005/181685 A1 discloses a main switch apparatus of a small watercraft.
  • the main switch apparatus of a small watercraft having a main switch.
  • the main switch apparatus includes a plurality of keys, each for operating the main switch, each assigned a different user ID information.
  • the main switch apparatus may further include an ID information detector for detecting the user ID information assigned to one of the plurality of keys applied to the main switch, a controller for controlling the small watercraft, configured to be activated by each one of the plurality of keys, and a control pattern memory for storing a plurality of control patterns of the controller corresponding to the respective user ID information.
  • the controller is typically configured to read out the control pattern stored in the control pattern memory corresponding to the user ID information detected by the user ID information detector and to execute a control of the watercraft based on the read out control pattern
  • an engine control system for controlling user access to one or more engine control functions, where the engine control system is communicatively coupled to an engine via an engine control interface and where the engine control system comprises two or more human-machine interface, HMI, units, each HMI unit comprising a respective user interface, UI, for providing user access to respective one or more engine control functions, wherein at least two HMI units comprise a respective lock means for receiving a safety key that represents a key identification, ID, of a plurality of key IDs, wherein each key ID has respective at least one engine control function associated therewith, wherein the engine control system is arranged to, when the lock means in a first HMI unit is in receipt of the safety key that represents a first key ID of said plurality of key IDs, selectively enable via the UI of said first HMI unit one of the following: a user-operable locking function for locking, by the first key ID, said respective at least one engine control function associated with the first key ID to disable user access, via said Uls, to said respective
  • an engine control arrangement comprising one or more engine control systems according to the example embodiment described in the foregoing and a local central control unit, LCCU, communicatively coupled to said one or more engine control systems, wherein the LCCU comprises a UI for providing user access to one or more engine control functions in said one or more engine control systems and further comprises at least one lock means for receiving a safety key that represents a key ID of said plurality of key IDs, which key ID has respective at least one engine control function associated therewith, and wherein the engine control arrangement is configured to, when the lock means in the LCCU is in receipt of the safety key that represents said first key ID, selectively enable via the UI of the LCCU one of the following: a user-operable locking function for locking, by the first key ID, the respective at least one engine control function associated with the first key ID to disable user access, via all UIs in the engine control arrangement, to said respective at least one engine control function or a user-operable unlocking function for
  • a method for controlling user access to one or more engine control functions in an engine control system that is communicatively coupled to an engine via an engine control interface comprising operating two or more HMI units, each HMI unit comprising a respective UI for providing user access to respective one or more engine control functions, wherein at least two HMI units comprise a respective lock means for receiving a safety key that represents a key ID of a plurality of key ID, wherein each key ID has respective at least one engine control function associated therewith, and selectively enabling, via the UI of a first HMI unit, when the lock means in the first HMI unit is in receipt of the safety key that represents a first key ID of said plurality of key IDs, one of the following: a user-operable locking function for locking, by the first key ID, said respective at least one engine control function associated with the first key ID to disable user access, via said Uls, to said respective at least one engine control function or a user-operable unlocking function for releasing said respective at least one
  • a computer program comprising computer readable program code configured to cause performing at least the method according to the example embodiment described in the foregoing when said program code is executed on one or more computing apparatuses.
  • the computer program referred to above may be embodied on a volatile or a non-volatile computer-readable record medium, for example as a computer program product comprising at least one computer readable non-transitory medium having program code stored thereon, the program which when executed by an apparatus cause the apparatus at least to perform the operations described hereinbefore for the computer program according to an example embodiment of the invention.
  • FIG. 1 illustrates a block diagram of some components of an engine control system 100 according to an example.
  • the engine control system 100 is illustrated with local human-machine interface (HMI) units 110-1, 110-2, ..., 110-K.
  • HMI unit 110-k comprises a user interface (UI) that provides user access to one or more engine control functions for controlling operation of an engine 102.
  • UI user interface
  • ECI engine control interface
  • the ECI 101 is coupled to an engine 102 and it serves to convert the engine control information received from the HMI units 110 to respective control actions for controlling the engine 102 (e.g. by using respective drivers or actuators provided as part of the ECI 101) and to convert the engine status information (obtained e.g. by using respective sensors provided as part of the ECI 101) in format suitable for provision to the HMI units 110.
  • the ECI 101 may be provided by hardware or as a combination of hardware and software.
  • the engine 102 may be, for example, an internal combustion engine such as a diesel engine, a gas engine or a LNG engine, and the engine 102 may be a stand-alone engine or the engine 102 may operate as part of an engine system of a plurality (e.g. two or more) engines.
  • the details of operation of the ECI 101 and/or the engine 102 are not directly relevant to embodiments of the present invention but they are outlined here to illustrate the relationship between the engine 102 and the engine control system 100.
  • the HMI units 110-1, 110-2, ..., 110-k illustrated in Figure 1 represent one or more HMI units 110 and for a given engine the number of HMI units 110 may be one, two, three, etc., depending on the physical size of the engine 102 in view of the desired 'ease' of accessing the HMI units 110 by the persons operating the engine 102.
  • an engine that is small in size may require only single HMI unit 110, whereas an engine that is large in size likely benefits from a plurality of HMI units 110 to enable timely and convenient access to the control functions enabled by the HMI units 110 at multiple locations.
  • the engine control system 100 further comprises a safety control database (SCDB) 120, which may be provided in a data storage means that is communicatively coupled to the HMI units 110.
  • the data storage means applied for storing the SCDB 120 may be provided e.g. as a dedicated data storage entity (as depicted in the example of Figure 1 ), as part of the ECI 101 or as part of one of the HMI units. Due to the communicative coupling, each of the HMI units 110-k is able to read data from the SCDB 120 and write data to the SCDB 120.
  • the information content and purpose of the SCDB 120 is described later in this text.
  • a bus 105 which may comprise e.g. a controller area network (CAN) bus or another suitable bus known in the art.
  • CAN controller area network
  • the bus 105 may be provided as one or more separate buses.
  • a HMI unit 110-k may be integrated to a component or part of the engine 102, e.g. by arranging the HMI unit 110-k in a housing of the engine 102. As another example, the HMI unit 110-k may be arranged in close proximity to the engine 102, e.g. in a respective 'control desk' arranged in immediate proximity to the engine 102, in an engine room or in an engine control room.
  • the HMI unit 110 comprises a UI that provides access to one or more user functions that enable a user to control a respective aspect of the engine operation.
  • Figure 2 schematically illustrates the UI aspect of the HMI unit 110 according to an example.
  • the HMI unit 110 comprises display means 112 for displaying visual information to a user.
  • the display means may be provided as an electronic display, such as a light-emitting diode (LED) display, an organic light-emitting diode (OLED) display, an electroluminescent display (ELD), a liquid crystal display (LCD), etc.
  • the HMI unit 110 further comprises a user input means 114 for receiving input from the user.
  • the user input means 114 includes an arrangement of programmable push-buttons, which may referred to as softkeys.
  • the function invoked by operating a given softkey may be described by a text or by a visual identifier in a portion of the display means 112 adjacent to the given softkey, whereas the remaining part of the display 112 may be employed e.g. for displaying information that is indicative of the current status one or more aspects of the engine operation.
  • the user input means may comprise elements or components of other type, e.g. one or more of the following: one or more further arrangements of keys or buttons (in another location(s)) of the UI, a keyboard, a mouse or a pointing device of other type, a touchpad, etc.
  • the display means 112 is provided as a touchscreen, thereby providing at least part of the user input means 114 as a component integrated to the display means 112.
  • the engine control functions accessible by the user via the softkeys of the user input means 114 are described in a generic manner as "Func 1", “Func 2" and “Func 3" and they serve to represent any suitable respective engine control functions.
  • the engine functions that are controllable via the UI provided in the HMI unit 110-k typically include at least an engine control function for starting the engine 102 and an engine control function for stopping the engine 102.
  • the UI may provide a number of additional control functions for adjusting a certain operating characteristic of the engine 102 and/or for selecting information indicative of a certain operating characteristic of the engine 102 to be displayed via the display means 112.
  • control functions for adjusting an operating characteristic of the engine 102 or for selecting information indicative of a certain operating characteristic of the engine 102 to be displayed may comprise one or more of the following:
  • the engine control functions available via user functions provided in the respective UIs of the HMI units 110 may vary from one HMI unit 110 to another.
  • a first set of engine control functions that are accessible via the UI in a first HMI unit 110-k need not be the same as a second set of engine control functions that are accessible via a second HMI unit 110-j (where k ⁇ j).
  • the engine control functions available in different HMI units 110 e.g. the first and second sets of engine control functions, share one or more engine control functions, e.g. the engine control function for starting the engine 102 and/or the engine control function for stopping the engine 102.
  • At least one of the HMI units of the engine control system 100 further comprises a lock means 116 for receiving a safety key.
  • the HMI unit 110-k is configured to selectively provide via its UI a locking function or unlocking function for controlling availability of one or more engine control functions (otherwise) provided via respective UIs of one or more HMI units 110 of the engine control system 100 when the lock means 116 is in receipt of the safety key.
  • a safety key represents a predefined key identifier (ID) assigned therefor, which key ID serves as a unique identification of the particular safety key.
  • ID key identifier
  • Each key ID, and hence each safety key is associated with one or more engine control functions that are (normally) available via respective UI of at least one HMI unit 110 of the engine control system 100.
  • the information that defines the mapping between a key ID and the associated engine control function may be stored in the SCDB 120.
  • the SCDB 120 may include a key information table that comprises a respective table entry for each key ID configured for use in the engine control system 100.
  • each table entry includes the respective key ID, identifications of one or more associated engine control functions associated with the key ID (i.e. one or more engine control functions whose availability via the HMI units 110 is controllable by the key ID) of the same table entry, and an indication whether the respective key ID is currently applied to lock the associated engine control function(s).
  • Table 1 in the following provides an illustrative example of a content of a key information table.
  • three key IDs (#1, #2 and #3) are considered, where the key IDs #1 and #2 are associated with the engine control functions "Func 1" and “Func 2", whereas the key ID #3 is associated with the engine control functions "Func 1", “Func 2" and “Func 3".
  • the example of Table 1 further indicates the key ID #2 is currently being applied to lock the engine control functions associated therewith (i.e. the engine control function "Func 1"), whereas there is no indication of other key IDs being currently applied to lock the respective associated engine control functions.
  • Table 1 Key ID Associated engine control functions Active? #1 "Func 1" #2 "Func 1" YES #3 "Func 1", "Func 2, "Func 3"
  • the SCDB 120 may additionally include information that defines for each engine control function that is accessible via at least one of the HMI units 110 of the engine control system 100 and whose availability is controllable through at least one key ID whether it is currently available (and/or currently non-available).
  • the SCDB 120 may additionally include a control function status table that comprises a respective table entry for each engine control function whose availability is controllable though at least one key ID configured for use in the engine control system 100.
  • each table entry includes an identification of the respective engine control function and an indication whether any key IDs are currently applied to lock this engine control function.
  • the latter piece of information may be provided as a list of zero or more key IDs that identify those safety keys that are currently applied to lock this engine control function or as an indication of the number of key IDs that are currently applied to lock this engine control function.
  • Table 2 in the following provides an illustrative example of a content of a control function status table.
  • three engine control functions (“Func 1", “Func 2" and “Func 3" are considered.
  • the control function "Func 1" is indicated as currently locked via usage of the key ID #1
  • the control function "Func 2" is indicated currently locked via usage of the key IDs #1 and #3 (the Table 2 hence exemplifying the approach where the indication whether any key IDs are currently applied to lock this engine control function is provided by listing the associated key IDs), while no key IDs are currently applied to lock the engine control function "Func 3".
  • Table 2 Control function Currently locked by "Func 1" #1 "Func 2" #1 #3 "Func 3"
  • a key ID read from a safety key received by the lock means 116 in a HMI unit 110-k is the key ID(k).
  • the key ID(k) is obtained (e.g. read) from the safety key and the SCDB 120 is accessed to determine whether the key ID(k) is currently being applied to lock the one or more engine control functions associated therewith. This determination may be carried out e.g. by identifying the table entry of the key information table in the SCDB 120 that corresponds to the key ID(k) and determining whether the identified table entry indicates locking of the associated control function(s).
  • the UI of the HMI unit 110-k is updated to enable the locking function that serves to disable the engine control functions associated with the key ID(k).
  • An illustrative example in this regard is provided in Figure 3A , where the lowermost softkey of the user input means 114 (identified by the text "LOCK" in a portion of the display means 112 adjacent thereto) enables locking of the associated engine control functions by using the key ID(k).
  • the UI of the HMI unit 110-k is updated to enable the unlocking function that serves to release (unlock) the engine control functions associated with the key ID(k) from being locked by using the key ID(k).
  • An illustrative example in this regard is provided in Figure 3B , where the lowermost softkey of the user input means 114 (identified by the text "UNLOCK" in a portion of the display means 112 adjacent thereto) enables unlocking of the associated engine control functions.
  • FIG. 3B further shows the engine control function "Func 1" associated with the key ID(k) being disabled (indicated by the de-emphasized associated text "Func 1" in a portion of the display means 112 adjacent to the uppermost softkey of the user input means 114) due to locking (at least) by the key ID(k).
  • the locking function or the unlocking function for controlling availability of one or more engine control functions associated with the key ID(k) is available only when the lock means 116 in the HMI unit 110-k is in receipt of the safety key that represents the key ID(k).
  • the UI of the HMI unit 110-k is updated such that the locking function or the unlocking function is no longer available via the UI.
  • the locking function or the unlocking function for controlling availability of one or more engine control functions associated with the key ID(k) is available only via the UI of the HMI unit 110-k in which the lock means 116 is in receipt of the safety key representing the key ID(k). This ensures that only the person accessing the engine control functions via the UI in the HMI unit 110-k has the control for locking or unlocking the associated engine control functions, thereby facilitating prevention of unauthorized persons from disabling or re-enabling the associated engine control functions.
  • the user may use his/her safety key to (first) enable and engage the locking function to lock the engine control functions associated with the key ID represented by his/her safety key via the UI of the HMI unit 110-k, carry out desired maintenance operations on the engine 102, and (subsequently) enable and engage the unlocking function to release the respective associated engine control functions via the UI of the same HMI unit 110-k.
  • the user uses his/her safety key to (first) enable and engage the locking function to lock the associated engine control functions via the UI of the HMI unit 110-k, carry out desired maintenance operations on the engine 102, and (subsequently) enable and engage the unlocking function to release the respective associated engine control functions via the UI of another HMI unit 110-j (where j ⁇ k).
  • locking of the associated engine control functions may further require, in addition to the user engaging the locking function via the UI of the HMI-unit 110-k, receiving a valid personal identification code via the UI of the HMI-unit 110-k.
  • releasing (unlocking) of the associated engine control functions may further require, in addition to the user engaging the unlocking function via the UI of the HMI-unit 110-k, receiving the valid personal identification code via the UI of the HMI-unit 110-k.
  • the user engaging the locking or unlocking function may be followed by the HMI unit 110-k requesting, via the UI, the user to enter the personal identification code, such as a password or a PIN code, assigned to the key ID(k) before the HMI unit 110-k proceeds with implementing the locking or release of the associated engine control functions.
  • the user may apply e.g. a keyboard provided in the HMI unit 110-k or a touchscreen of the HMI unit 110-k to enter the personal identification code.
  • the code entered by the user is compared to the personal identification code assigned to the key ID(k) and the HMI unit 110-k may proceed with implementing the locking or release of the associated engine control functions in response to the user-entered code matching the personal identification code assigned to the key ID(k).
  • Usage of the personal identification code serves as an additional safety measure that facilitates prevention of unauthorized persons from locking or releasing the associated engine control functions.
  • the lock means 116 and the safety key(s) are provided using universal serial bus (USB) technology known in the art.
  • USB universal serial bus
  • the lock means 116 may be provided as an USB port and one or more safety keys may be provided as respective USB devices, e.g. as respective US memory sticks, each arranged to store information that serves as an indication of the respective key ID assigned thereto in a predefined format.
  • the lock means 116 is in receipt of a safety key when the USB device is connected to the USB port such that HMI unit 110-k is able to read the key ID therefrom.
  • the lock means 116 and the safety key(s) are provided by employing a radio frequency identification (RFID) technique known in the art.
  • RFID radio frequency identification
  • the lock means 116 may be provided as an RFID reader and one or more safety keys may be provided as respective RFID tags, each arranged to store information that serves an indication of the respective key ID assigned thereto.
  • the lock means 116 is in receipt of a safety key when the RFID reader is able to read the key ID from the ID tag.
  • the lock means 116 and the safety key(s) are provided by employing a near field communication (NFC) technique known in the art.
  • NFC near field communication
  • the lock means 116 may be provided as a first NFC device and one or more safety keys may be provided as respective second NFC devices, each arranged to store information that serves an indication of the respective key ID assigned thereto.
  • the lock means 116 is in receipt of a safety key when the first NFC device is able to read the key ID from the second NFC device.
  • the lock means 116 and the safety key(s) are provided by employing a fingerprint recognition technique known in the art.
  • the lock means 116 may be comprise a fingerprint sensor and a safety key for a certain user comprises a finger of the certain user.
  • the lock means 116 may store one or more predefined fingerprint templates, each fingerprint template associated with a respective key ID.
  • the lock means 116 further compares a fingerprint obtained via the fingerprint sensor to the stored one or more predefined fingerprint templates and obtains the key ID as the key ID associated with the predefined fingerprint template recognized to match (e.g. to be similar or substantially similar to) the fingerprint obtained via the fingerprint sensor.
  • the lock means 116 and the safety key(s) are provided by employing a facial recognition system or technique known in the art.
  • the lock means 116 may comprise imaging means (such as a digital camera) and a safety key for a certain user comprises the face of the certain user (or part thereof).
  • the lock means 116 may store one or more sets of predefined facial features, each set associated with a respective key ID.
  • the lock means 116 further compares facial features extracted from an image of a face obtained from the imaging means to the stored one or more sets of predefined facial features and obtains the key ID as the key ID associated with the set of predefined facial features found to match (e.g. to be similar or substantially similar to) the facial features extracted from the image of a face obtained from the imaging means.
  • the lock means 116 and the safety key(s) are provided by employing an iris recognition system or technique known in the art.
  • the lock means 116 may comprise imaging means (such as a digital camera) and a safety key for a certain user comprises an iris of the certain user (or part thereof).
  • the lock means 116 may store one or more predefined iris templates, each associated with a respective key ID.
  • the lock means 116 further compares an image of an iris obtained from the imaging means to the stored one or more iris templates and obtains the key ID as the key ID associated with the predefined iris template found to match (e.g. to be similar or substantially similar to) the image of an iris obtained from the imaging means.
  • FIG. 4 illustrates a block diagram of some components of an engine control system 200 according to an example, which is a variation of the engine control system 100, operation of which is described in the foregoing by a number of examples.
  • the engine control system 200 further comprises a local central control unit (LCCU) 130 that is communicatively coupled to the SCDB 120 and to the ECI 101, and possibly also to the HMI units 110.
  • LCCU local central control unit
  • the LCCU 130 comprises a UI that provides one or more engine control functions for controlling operation of an engine 102.
  • the UI of the LCCU 130 provides an enlarged selection of engine control functions in comparison to the respective Uls of the HMI units 110.
  • the UI of the LCCU 130 may provide all those engine control functions that are available via the respective Uls of any of the HMI units 110 of the engine control system 200 and it may provide one or more further engine control functions that are not available via the respective Uls of any of the HMI units 110 of the engine control system 200.
  • the LCCU 130 is, typically, provided in a control center or in a control room that is located in the site of the engine 102, e.g. in or close to an engine room of a marine vessel (at least in part) powered by the engine 102 or in or close to engines of an engine-powered power plant that is (at least in part) powered by the engine 102.
  • the control center/room that hosts the LCCU 130 is typically provided somewhat further away from the engine 102 (and possible other engines of the site) than any of the HMI units 110 of the engine control system 200.
  • the LCCU 130 Due to the communicative coupling, the LCCU 130 is able to read data from the SCDB 120 and write data to the SCDB 120. Therefore, in case the any of the HMI units 110 have been applied to engage the locking function to lock some of the engine control functions available in the engine control system 200, the LCCU 130 may access the SCDB 120 (e.g. the key information table and/or the control function status table therein) to obtain an indication in this regard and disable access to the associated engine control functions via the UI of the LCCU 130 accordingly.
  • the SCDB 120 e.g. the key information table and/or the control function status table therein
  • the LCCU 130 may access the SCDB 120 (e.g. the key information table and/or the control function status table therein) to obtain an indication in this regard and re-enable access to the associated engine control functions via the UI of the LCCU 130 accordingly.
  • SCDB 120 e.g. the key information table and/or the control function status table therein
  • the LCCU 130 may comprise a lock means 136 for receiving the safety key.
  • the operation of the LCCU 130 when in receipt of the safety key is similar to that described in the foregoing in context of the HMI unit 110-k, mutatis mutandis.
  • a safety key may be applied in the LCCU 130 to enable, via the UI of the LCCU 130, locking or releasing (unlocking) the associated engine control functions in the HMI units 110 (as well as via the UI of the LCCU 130) of the engine control system 200.
  • FIG. 5 illustrates a block diagram of some components of an engine control arrangement that comprises the engine control system 100 and the LCCU 130.
  • the LCCU 130 connects to the engine control system 100 via the bus 105.
  • the LCCU 130 is provided outside the engine control system 100 and it is connected to one or more further engine control systems 100' (represented in the Figure 5 by two instances denoted by the reference designator 100').
  • Each of the engine control systems 100' is arranged to control operation of the respective engine via a respective ECI (e.g. along the lines described in the foregoing for the engine control system 100).
  • the LCCU 130 serves to provide control over a plurality of (e.g. two or more) engines via the respective engine control systems 100, 100'.
  • the LCCU 130 is provided with a single lock means via which control over availability of the engine control functions in each of the engine control systems 100, 100' coupled thereto may be provided by using a single safety key (e.g. by reading/writing the respective SCDBs 120 of the engine control systems 100, 100' and controlling availability of the engine control functions via respective Uls of the HMI units 110 in the engine control systems 100, 100' (and via the UI of the LCCU 130) accordingly, e.g. as described in the foregoing in context of the HMI units 110 of the engine control system 100).
  • the UI of the LCCU 130 may enable the user selecting the engine control systems 100, 100' to be affected in response to receiving the safety key in the lock means.
  • the LCCU 130 in the engine control arrangement of Figure 5 ) may be provided with a dedicated lock means for each of the engine control systems 100, 100' coupled to the LCCU 130.
  • a single safety key is useable to control availability of the engine control functions in single one of the engine control systems 100, 100' coupled to the LCCU 130 at a time, in the engine control system 100, 100' that is associated with the lock means that is currently in receipt of the safety key.
  • Figure 6 depicts a flowchart that outlines a method 300 according to an example embodiment.
  • the method 300 may implement some aspects of the engine control system 100 described in the foregoing by a number of examples.
  • the method 300 may be carried out by one or more computing devices that are arranged to implement at least the one or more HMI units 110 and the SCDB 120.
  • the method 300 serves to control user access to one or more engine control functions in the engine control system 100 that is communicatively coupled to the engine 102 via the ECI 101.
  • the method 300 comprises operating the one or more HMI units 110, each HMI unit 110 comprising a respective UI for providing user access to respective one or more engine control functions, wherein at least one HMI unit 110 comprises the respective lock means 116 for receiving a safety key storing a key ID, which key ID has at least one engine control function associated therewith, as indicated in block 310.
  • the method further comprises selectively providing, via the UI of a first HMI unit, when the lock means 116 in the first HMI unit is in receipt of the safety key storing a first key ID one of the following: a locking function for locking said at least one engine control function by the first key ID and an unlocking function for releasing said at least one engine control function from locking by the first key ID, as indicated in block 320.
  • the method 300 may further comprise one or more of operations described in blocks 330A and 330B: disable, via the respective UI of each of the HMI units 100, in response to a user engaging the locking function via the UI of the first HMI unit, user access to said at least one engine control function associated with the first key ID (block 330A) and/or re-enable, via the respective UI of each of the HMI units 100, in response to a user engaging the unlocking function via the UI of the first HMI unit, user access to those ones of said at least one engine control function associated with the first key ID that are not locked by one or more other key IDs (block 330B).
  • the method 300 outlined herein may be varied in a number of ways, e.g. as described in context of the engine control system 100, 100' or the engine control arrangement described with references to Figure 5 .
  • Components of the engine control system 100, 100' may be provided by using respective hardware means, respective software means, or respective combination of hardware means and software means.
  • each of the HMI units 110, the SCDB 120 and the LCCU 130 may be provided respective hardware means, respective software means, or respective combination of hardware means and software means.
  • FIG. 7 schematically illustrates some components of an exemplifying apparatus 400 suited for this purpose.
  • the apparatus 400 comprises a processor 402 and a memory 404 for storing data and computer program code 406.
  • the memory 404 may store information that constitutes the SCDB 120.
  • the processor 402 is configured to read from and write to the memory 404.
  • the apparatus 400 further comprises a communication means 408 for communicating with another apparatuses or devices, e.g. with other components of the engine control system 100, 100'.
  • the apparatus 400 further comprise user I/O (input/output) components 410 that may be arranged, together with the processor 402 and a portion of the computer program code 406, to provide a user interface for receiving input from a user and/or providing output to the user.
  • the user I/O components 410 may comprise hardware components such as a display, a touchscreen, a touchpad, a mouse, a keyboard and/or an arrangement of one or more keys or buttons, etc.
  • at least some of the user I/O components 410 may serve to provide the display means 112 and the user input means 114 of a HMI unit 110 described in the foregoing.
  • the processor 402 may be arranged to control operation of the apparatus 400 in accordance with a portion of the computer program code 406 stored in the memory 404 and possibly further in accordance with the user input received via the user I/O components 410 and/or in accordance with information received via the communication means 408.
  • the memory 404 and a portion of the computer program code 406 stored therein may be further arranged, with the processor 402, to provide a control function or control means for controlling operation of the apparatus 400.
  • the processor 402, the memory 404, the communication means 408 and the user I/O components 410 may be interconnected by a bus 412 that enables transfer of data and control information.
  • the apparatus 400 may comprise further components in addition to those shown in the illustration of Figure 7 .
  • processor 402 is depicted as a single component, the processor 402 may be implemented as one or more separate processing components.
  • the memory 402 is depicted as a single component, the memory 404may be implemented as one or more separate components, some or all of which may be integrated/removable and/or may provide permanent / semi-permanent/ dynamic/cached storage.
  • the computer program code 406 stored in the memory 404 may comprise computer-executable instructions that control the operation of the apparatus 400 when loaded into the processor 402.
  • the computer program code 406 may include one or more sequences of one or more instructions.
  • the processor 402 is able to load and execute the computer program code 406 by reading the one or more sequences of one or more instructions included therein from the memory 404.
  • the one or more sequences of one or more instructions may be configured to, when executed by the processor 402, cause the apparatus 400 to carry out operations, procedures and/or functions described in the foregoing in context of the respective component of the engine control system 100, 100', e.g. those described for the HMI unit 110, the SCDB 120 or the LCCU 130.
  • the computer program code 406 may be provided e.g. as a computer program product comprising at least one computer-readable non-transitory medium having program code stored thereon, the computer program code 406, when executed by the apparatus 400, arranged to cause the apparatus 400 to carry out operations, procedures and/or functions described in the foregoing in context of the respective component of the engine control system 100, 100', e.g. those described for the HMI unit 110, the SCDB 120 or the LCCU 130.
  • the computer-readable non-transitory medium may comprise a memory device or a record medium such as a CD-ROM, a DVD, a Blu-ray disc or another article of manufacture that tangibly embodies the computer program.
  • the computer program may be provided as a signal configured to reliably transfer the computer program.
  • references(s) to a processor should not be understood to encompass only programmable processors, but also dedicated circuits such as field-programmable gate arrays (FPGA), application specific circuits (ASIC), signal processors, etc.
  • FPGA field-programmable gate arrays
  • ASIC application specific circuits
  • signal processors etc.

Landscapes

  • Engineering & Computer Science (AREA)
  • Chemical & Material Sciences (AREA)
  • Combustion & Propulsion (AREA)
  • Mechanical Engineering (AREA)
  • General Engineering & Computer Science (AREA)
  • Lock And Its Accessories (AREA)

Claims (13)

  1. Système de commande de moteur (100) pour commander l'accès utilisateur à une ou plusieurs fonction(s) de commande de moteur, le système de commande de moteur (100) étant couplé en communication à un moteur (102) par le biais d'une interface de commande de moteur (101) et le système de commande de moteur (100) comprenant
    deux ou plusieurs unités d'interface homme-machine, HMI, (110), chaque unité HMI (110) comprenant une interface utilisateur, UI, respective pour fournir un accès utilisateur à une ou plusieurs fonction(s) de commande de moteur respective, dans lequel au moins deux unités HMI (110) comprennent un moyen de verrouillage (116) respectif pour recevoir une clé de sécurité qui représente une identification, ID, par clé, d'une pluralité d'ID par clé, dans lequel chaque ID par clé a au moins une fonction de commande de moteur respective associée à celle-ci,
    dans lequel le système de commande de moteur (100) est agencé pour, lorsque le moyen de verrouillage (116) dans une première unité HMI est en réception de la clé de sécurité qui représente une première ID par clé de ladite pluralité d'ID par clé, activer de manière sélective, par le biais de l'UI de ladite première unité HMI, une de ce qui suit :
    une fonction de verrouillage actionnable par l'utilisateur pour verrouiller, par la première ID par clé, ladite au moins une fonction de commande de moteur respective associée à la première ID par clé pour désactiver l'accès utilisateur, par le biais desdites UI, à ladite au moins une fonction de commande de moteur respective, ou
    une fonction de déverrouillage actionnable par l'utilisateur pour défaire ladite au moins une fonction de commande de moteur respective du verrouillage par la première ID par clé, pour ré-activer l'accès utilisateur, par le biais desdites UI, à celles de ladite au moins une fonction de commande de moteur respective qui ne sont actuellement pas verrouillées par une ou plusieurs autres ID par clé de ladite pluralité d'ID par clé.
  2. Système de commande de moteur (100) selon la revendication 1, dans lequel le système de commande de moteur (100) est agencé pour activer la fonction de verrouillage actionnable par l'utilisateur par le biais de l'UI de ladite première unité HMI lorsque le moyen de verrouillage (116) dans ladite première unité HMI est en réception de la clé de sécurité stockant la première ID par clé, et
    activer, ensuite la fonction de déverrouillage actionnable par l'utilisateur par le biais de l'UI d'une seconde unité HMI lorsque le moyen de verrouillage (116) dans ladite seconde unité HMI est en réception de la clé de sécurité stockant la première clé par ID.
  3. Système de commande de moteur (100) selon la revendication 1 ou 2, dans lequel ladite première unité HMI (110) est agencée pour activer la fonction de verrouillage actionnable par l'utilisateur au cas où la première ID par clé n'est pas actuellement appliquée pour verrouiller l'au moins une fonction de commande de moteur respective associée à celle-ci.
  4. Système de commande de moteur (100) selon l'une quelconque des revendications 1 à 3, dans lequel ladite première unité HMI (110) est agencée pour activer la fonction de déverrouillage actionnable par l'utilisateur au cas où la première ID par clé est actuellement appliquée pour verrouiller l'au moins une fonction de commande de moteur respective associée à celle-ci.
  5. Système de commande de moteur (100) selon l'une quelconque des revendications 1 à 3, agencé pour désactiver, par le biais de l'UI respective de chacune des unités HMI, en réponse à un utilisateur engageant la fonction de verrouillage actionnable par l'utilisateur par le biais de l'UI de la première unité HMI, l'accès utilisateur à ladite au moins une fonction de commande de moteur respective associée à la première ID par clé, et
    ré-activer, par le biais de l'UI respective de chacune des unités HMI, en réponse à un utilisateur engageant la fonction de déverrouillage actionnable par l'utilisateur par le biais de l'UI de la première unité HMI, l'accès utilisateur à celles de ladite au moins une fonction de commande de moteur respective associée à la première ID par clé qui ne sont pas verrouillées par une ou plusieurs autres ID par clé de ladite pluralité d'ID par clé.
  6. Système de commande de moteur (100) selon la revendication 5, agencé pour, lorsque le moyen de verrouillage (116) dans la première unité HMI est en réception de la clé de sécurité qui représente la première ID par clé, activer de manière sélective une de la fonction de verrouillage actionnable par l'utilisateur ou des fonctions de déverrouillage actionnables par l'utilisateur en réponse à la réception, par le biais de l'UI de la première unité HMI, d'un code d'identification personnel valide.
  7. Système de commande de moteur (100) selon l'une quelconque des revendications 1 à 6, comprenant en outre une base de données de contrôle de sécurité, SCBD, (120), pour stocker au moins :
    des informations qui définissent un mappage entre une ID par clé et l'au moins une fonction de commande de moteur respective associée à celle-ci pour ladite pluralité d'ID par clé,
    des informations qui définissent pour chaque fonction de commande de moteur accessible par le biais d'au moins une unité HMI (110) et dont la disponibilité peut être commandée par au moins une ID par clé de ladite pluralité d'ID par clé, si elle est actuellement accessible par un utilisateur.
  8. Système de commande de moteur (100) selon l'une quelconque des revendications 1 à 7, dans lequel le moyen de verrouillage (116) comprend un des suivants :
    un port de bus en série universel, USB, pour recevoir un dispositif USB qui stocke des informations qui définissent une ID par clé respective,
    un lecteur d'identification par radio-fréquences, RFID, pour relier une balise RFID qui stocke des informations qui définissent une ID par clé respective,
    un dispositif de communication en champ proche, NFC, pour connecter un autre dispositif NFC qui stocke des informations qui définissent une ID par clé respective,
    un capteur d'empreinte digitale pour obtenir une empreinte digitale d'un utilisateur pour la comparaison à un ou plusieurs modèle(s) d'empreinte prédéfini(s) qui est/sont associé(s) à une ou plusieurs ID par clé respective(s),
    un moyen d'imagerie pour obtenir une image du visage d'un utilisateur pour la comparaison de caractéristiques faciales extraites d'une image obtenue à un ou plusieurs jeu(x) de caractéristiques faciales prédéfinies qui sont associées à une ou plusieurs ID par clé respective(s),
    un moyen d'imagerie pour obtenir une image d'un iris d'un utilisateur pour la comparaison à un ou plusieurs modèle(s) d'iris prédéfini(s) qui est/sont associé(s) à une ou plusieurs ID par clé respective(s).
  9. Agencement de commande de moteur comprenant
    un ou plusieurs système(s) de commande de moteur (100, 100') selon l'une quelconque des revendications 1 à 8 ; et
    une unité de commande centrale locale, LCCU, (130), couplée en communication avec lesdits un ou plusieurs système(s) de commande de moteur (100, 100'), dans lequel la LCCU (130) comprend une UI pour fournir un accès utilisateur à une ou plusieurs fonction(s) de commande de moteur dans ledit au moins un un ou plusieurs système(s) de commande de moteur (100, 100') et comprend en outre au moins un moyen de verrouillage pour recevoir une clé de sécurité qui représente une ID par clé de ladite pluralité d'ID par clé, laquelle ID par clé a au moins une fonction de commande de moteur respective associée à celle-ci, et
    dans lequel l'agencement de commande de moteur est configuré pour, lorsque le moyen de verrouillage dans la LCCU (130) est en réception de la clé de sécurité qui représente ladite première ID par clé, activer de manière sélective, par le biais de l'UI de la LCCU (130), une de ce qui suit :
    une fonction de verrouillage actionnable par l'utilisateur pour verrouiller, par la première ID par clé, l'au moins une fonction de commande de moteur respective associée à la première ID par clé pour désactiver l'accès utilisateur, par le biais de toutes les U dans l'agencement de commande de moteur, à ladite au moins une fonction de commande de moteur respective, ou
    une fonction de déverrouillage actionnable par l'utilisateur pour défaire l'au moins une fonction de commande de moteur respective du verrouillage par la première ID par clé, pour ré-activer l'accès utilisateur, par le biais de toutes les UI dans l'agencement de commande de moteur, à celles de ladite au moins une fonction de commande de moteur respective qui ne sont actuellement pas verrouillées par une ou plusieurs autres ID par clé de ladite pluralité d'ID par clé.
  10. Agencement de commande de moteur selon la revendication 9, dans lequel la LCCU (130) comprend un seul moyen de verrouillage pour commander l'activation sélective de la fonction de verrouillage ou de déverrouillage dans chacun desdits systèmes de commande de moteur (100, 100') couplés à la LCCU (130).
  11. Agencement de commande de moteur selon la revendication 10, dans lequel la LCCU (130) comprend un moyen de verrouillage dédié pour chacun des systèmes de commande de moteur couplés à la LCCU (130) pour commander l'activation sélective de la fonction de verrouillage ou de déverrouillage dans les systèmes de commande de moteur (100, 100') respectifs.
  12. Procédé (300) de commande de l'accès utilisateur à une ou plusieurs fonction(s) de commande de moteur dans un système de commande de moteur (100) qui est couplé en communication à un moteur (102) par le biais d'une interface de commande de moteur (101), le procédé comprenant
    le fonctionnement (310), de deux ou plusieurs unités d'interface homme-machine, HMI, (110), chaque unité HMI (110) comprenant une interface utilisateur, UI, respective pour fournir un accès utilisateur à une ou plusieurs fonction(s) de commande de moteur respective, dans lequel au moins deux unités HMI (110) comprennent un moyen de verrouillage (116) respectif pour recevoir une clé de sécurité qui représente une identification, ID, par clé, d'une pluralité d'ID par clé, dans lequel chaque ID par clé a au moins une fonction de commande de moteur respective associée à celle-ci, et
    l'activation sélective (320), par le biais de l'UI d'une première unité HMI, lorsque le moyen de verrouillage (116) dans la première unité HMI est en réception de la clé de sécurité qui représente une première ID par clé de ladite pluralité d'ID par clé, une de ce qui suit :
    une fonction de verrouillage actionnable par l'utilisateur pour verrouiller, par la première ID par clé, ladite au moins une fonction de commande de moteur respective associée à la première ID par clé pour désactiver l'accès utilisateur, par le biais desdites UI, à ladite au moins une fonction de commande de moteur respective, ou
    une fonction de déverrouillage actionnable par l'utilisateur pour défaire ladite au moins une fonction de commande de moteur du verrouillage par la première ID par clé, pour ré-activer l'accès utilisateur, par le biais desdites UI, à celles de ladite au moins une fonction de commande de moteur respective qui ne sont actuellement pas verrouillées par une ou plusieurs autres ID par clé de ladite pluralité d'ID par clé.
  13. Programme informatique incluant un ou plusieurs séquence(s) d'une ou plusieurs instruction(s) qui, lorsqu'elles sont exécutées par un ou plusieurs processeur(s), font qu'un agencement d'un ou plusieurs appareils exécute au moins le procédé selon la revendication 12.
EP16721848.6A 2016-04-07 2016-04-07 Système de commande de moteur avec fonction de sécurité Active EP3439949B1 (fr)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/FI2016/050218 WO2017174857A1 (fr) 2016-04-07 2016-04-07 Système de commande servant à un moteur à commande de sécurité

Publications (2)

Publication Number Publication Date
EP3439949A1 EP3439949A1 (fr) 2019-02-13
EP3439949B1 true EP3439949B1 (fr) 2020-01-01

Family

ID=55963391

Family Applications (1)

Application Number Title Priority Date Filing Date
EP16721848.6A Active EP3439949B1 (fr) 2016-04-07 2016-04-07 Système de commande de moteur avec fonction de sécurité

Country Status (2)

Country Link
EP (1) EP3439949B1 (fr)
WO (1) WO2017174857A1 (fr)

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5513107A (en) * 1992-12-17 1996-04-30 Ford Motor Company Methods and apparatus for controlling operating subsystems of a motor vehicle
US6271745B1 (en) * 1997-01-03 2001-08-07 Honda Giken Kogyo Kabushiki Kaisha Keyless user identification and authorization system for a motor vehicle
JP3992196B2 (ja) * 2004-02-17 2007-10-17 川崎重工業株式会社 小型滑走艇のメインスイッチ装置
JP4925701B2 (ja) * 2006-03-28 2012-05-09 ヤマハ発動機株式会社 船舶
JP4317861B2 (ja) * 2006-08-31 2009-08-19 株式会社東海理化電機製作所 ハイブリッド車の走行モード設定装置
US20090050093A1 (en) * 2007-01-31 2009-02-26 Peter William Petersen Twin Ignition System

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
None *

Also Published As

Publication number Publication date
EP3439949A1 (fr) 2019-02-13
WO2017174857A1 (fr) 2017-10-12

Similar Documents

Publication Publication Date Title
US9302398B2 (en) Robot system for determining operator by biometric authentication
CN104008582B (zh) 车辆的钥匙的紧急转移的系统和方法
CN104182668B (zh) 基于屏幕解锁的身份识别方法
EP3607533B1 (fr) Systèmes destinés à actionner un véhicule et procédés associés
US9738258B2 (en) Method of managing an electronic control unit of an automobile through an integrated fingerprint recognition system
US20160246955A1 (en) Fingerprint encoding method and system, and fingerprint authenticating method and system
CN103765500B (zh) 可编程显示器
US20200339064A1 (en) Systems and methods for multi-keyholder digital lockout
US20140026210A1 (en) Method for authenticating mobile devices
US10496062B2 (en) Programmable controller for controlling automatic machines, having CPU to received control with respect to own apparatus, when external storage is authenticated based on authentication information
EP3439949B1 (fr) Système de commande de moteur avec fonction de sécurité
US9349266B2 (en) Security cable for a mobile platform with electronically controlled lock
JP2008197753A (ja) プロセス制御システム
CN107360140B (zh) 一种带指纹识别功能的触控单兵通讯装置
CN103679135A (zh) 使用驾驶员生物测定信息的列车控制系统
JP6495794B2 (ja) カスタマイズ装置
EP2383155B1 (fr) Système de sécurité de véhicule agricole
US9122892B2 (en) Protection device, protection software, and protection method for controlling external device
US20070155322A1 (en) Security methods for input device
JP5361550B2 (ja) エレベータ用セキュリティシステム及びリーダ装置
CN108376213A (zh) 电子设备
CN106127058A (zh) 一种提高智能自动化设备安全性的方法
JP2007293434A (ja) 無線ｉｃタグを利用した制御機器とそれを備えた制御システム
US11321429B2 (en) Safety system for an electronic device of a vehicle, electronic device, vehicle and method
KR102389130B1 (ko) 시동 인가 시스템을 포함하는 건설기계

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: UNKNOWN

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20181105

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20190812

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

Ref country code: AT

Ref legal event code: REF

Ref document number: 1219481

Country of ref document: AT

Kind code of ref document: T

Effective date: 20200115

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602016027285

Country of ref document: DE

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20200101

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200401

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200527

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200501

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200401

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200402

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602016027285

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

REG Reference to a national code

Ref country code: AT

Ref legal event code: MK05

Ref document number: 1219481

Country of ref document: AT

Kind code of ref document: T

Effective date: 20200101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

26N No opposition filed

Effective date: 20201002

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200430

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200407

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200430

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200430

Ref country code: AT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20200430

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200430

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20200407

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200407

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20200407

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200101

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20230420

Year of fee payment: 8