JPS63501303A - Computer system with two processors - Google Patents

Computer system with two processors

Info

Publication number
JPS63501303A
JPS63501303A JP50536686A JP50536686A JPS63501303A JP S63501303 A JPS63501303 A JP S63501303A JP 50536686 A JP50536686 A JP 50536686A JP 50536686 A JP50536686 A JP 50536686A JP S63501303 A JPS63501303 A JP S63501303A
Authority
JP
Japan
Prior art keywords
processors
processor
computer system
transmitter
adjustment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
JP50536686A
Other languages
Japanese (ja)
Inventor
ヴアイシエデル，グイド
フライヒ，ウルリツヒ
ズイバー，アルブレヒト
ヴアーラー，ロルフ
Original Assignee
ロ−ベルト　ボツシユ　ゲゼルシヤフト　ミツト　ベシユレンクテル　ハフツング
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ロ−ベルト　ボツシユ　ゲゼルシヤフト　ミツト　ベシユレンクテル　ハフツング filed Critical ロ−ベルト　ボツシユ　ゲゼルシヤフト　ミツト　ベシユレンクテル　ハフツング
Publication of JPS63501303A publication Critical patent/JPS63501303A/en
Pending legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16—Error detection or correction of the data by redundancy in hardware
    • G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
    • G06F11/2035—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant without idle spare hardware
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02D—CONTROLLING COMBUSTION ENGINES
    • F02D41/00—Electrical control of supply of combustible mixture or its constituents
    • F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
    • F02D41/26—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
    • F02D41/266—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor the computer being backed-up or assisted by another circuit, e.g. analogue
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B9/00—Safety arrangements
    • G05B9/02—Safety arrangements electric
    • G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
    • F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
    • F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
    • F02B—INTERNAL-COMBUSTION PISTON ENGINES; COMBUSTION ENGINES IN GENERAL
    • F02B3/00—Engines characterised by air compression and subsequent fuel addition
    • F02B3/06—Engines characterised by air compression and subsequent fuel addition with compression ignition
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16—Error detection or correction of the data by redundancy in hardware
    • G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
    • G06F11/2023—Failover techniques
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16—Error detection or correction of the data by redundancy in hardware
    • G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
    • G06F11/2023—Failover techniques
    • G06F11/203—Failover techniques using migration

Abstract

(57)【要約】本公報は電子出願前の出願データであるため要約のデータは記録されません。 (57) [Summary] This bulletin contains application data before electronic filing, so abstract data is not recorded.

Description

【発明の詳細な説明】 ２つのプロセッサを有するコンピュータシステム技術水準 本発明はメインクレームの上位概念による内燃機関の特性量の制御のため２つの プロセッサを有するコンピュータシステムを基礎とする。[Detailed description of the invention] Computer system technology level with two processors The present invention provides two methods for controlling characteristic quantities of an internal combustion engine according to the generic concept of the main claim. Based on a computer system with a processor.

障害のない状態である通常作動状態において主（メイン）コンピュータが所要の 制御、調整機能に対するコンピュータ負荷全体を引受けるようにして、機能分担 全行なうコンピュータシステムは公知である。もっばら非常緊急コンピュータと して用いられる第２コンピユータはメインコンピュータの障害の際非常緊急機能 を引受け、もって制限的動作を維持できる。但し通常動作用のメインコンぎユー タは回転数及びアクセル発信器位置に依存して噴射量及び噴射時点の決定のため すべてのコンピュータ機能を引受けなければならないので、メインコンピュータ には相応に大きなメモリー及び計算容量が必要である。更に必要な非常緊急コン ぎユータは障害の場合にのみ用いられよって、一般には非利用状態におかれる。Under normal operating conditions, which is a non-fault condition, the main computer Functional division by taking over the entire computer load for control and adjustment functions All performing computer systems are known. An emergency computer and A second computer, which is used as a can maintain the restrictive behavior. However, the main controller for normal operation for determining the injection amount and injection time depending on the rotation speed and the accelerator transmitter position. The main computer, as it must assume all computer functions. requires a correspondingly large memory and computational capacity. Furthermore, the necessary emergency This user is used only in the event of a failure and is generally left inactive.

発明の利点 本発明の特徴事項による構成要件により、通常動作中のコンぎユータ負荷の、２ つのプロセッサへの分布、分配に基づき、重要な調整量の決定の際の高いコンピ ュータ速度全可能にするという利点が奏される。その際、ディーゼル噴射ポンプ の制御ロンドの制御のため設定値の決定が一方のプロセッサで行なわれ、かつ、 調整量の計算が設定値と実際値との量に依存して他方のコンピュータにて行なわ れるようにすると有利である。この手段によって制御速度が著しく高められ得、 その際、両プロセッサにより行なわれるべき他の制御−１監視作用、役割が損な われることはない。Advantages of invention Due to the configuration requirements according to the features of the present invention, the computer load during normal operation can be reduced to 2. Based on the distribution,distribution to two processors, high computation efficiency when,determining important adjustment amounts. The advantage is that it allows full computer speeds. At that time, the diesel injection pump One of the processors determines the setting value for controlling the control rond, and The calculation of the adjustment amount is carried out on the other computer depending on the amount between the set value and the actual value. It would be advantageous to make this possible. By this means the control speed can be significantly increased, In this case, other control-1 monitoring functions and roles to be performed by both processors may be impaired. You won't be hit.

動作確実性を高めるために両プロセッサに主要な動作状態が、そのつど２重化さ れた発信器を介して供給される。殊に、回転数発信器、アクセル発信器、ブレー キ位置を監視する発信器は２重に設けられ得る。これら発信器の障害の際相応の 他方の発信器への切換えが行なわれる。To increase operational reliability, the main operating states of both processors are duplicated each time. The signal is supplied via a transmitted transmitter. In particular, the rotation speed transmitter, accelerator transmitter, brake The transmitter for monitoring the key position can be provided in duplicate. In case of failure of these transmitters, A switch to the other oscillator takes place.

噴射ポンプの調整度ないし制御ロンドの位置の監視のため、実際値をプロセッサ へ伝える制御−変位量発信器が設けられている。制御変位量発信器にて欠陥が生 じると、制御ロンドは設定値を介してＰＤ−位置調整制御器によシ調整され得る 。それによシ、少なくとも近似的に制御ロンドは夫々の動作状態に相応して調整 される。Processing of actual values for monitoring the degree of adjustment of the injection pump or the position of the control rod A control-displacement transmitter is provided for transmitting information to the control-displacement transmitter. A defect occurred in the control displacement amount transmitter. Then, the control rond can be adjusted by the PD-position adjustment controller via the setpoint. . In addition, at least approximately, the control ronds can be adjusted accordingly to the respective operating state. be done.

図　面 本発明を次に図示の実施例を用いて詳述する。drawing The invention will now be explained in detail using the illustrated embodiments.

ブロック接続図に示されているのは第１プロセツサＰ１と第２プロセッサＰ２ｔ −有するコンピュータシステムでアシ、これらプロセッサは部分的に同一の制御 、調整装置を有する。プロセッサＰ１は量制御装置１１を有し、この量制御装置 には入力側にてブレーキ、アクセル発信器ＦＦ０％第１回転数発信器Ｄ１から発 信器信号が供給される。回転数発信器Ｄ１は可制御切換スイッチ５１１ｔ−介し て量制御装置１１と接続されている。設定値Ｕｓ０１□を形成する、量制御装置 の出力信号はＦＤ（比例−微分）−調整移動制御器１２と、比較器１３の正入力 側とに供給される。比較器１３の負入力側には噴射ポンプの制御ロンドの位置を 表わす実際値ＵＩＳＴが加わる。比較器１３の出力差信号は調整制御器１４に供 給される。ＰＤ調整移動制御器１２及び調整制御器１４の出力側は選択的に後置 接続の可制御切換スイッチＳ１２と、２つの別の外部切換スイッチ８１　、Ｓ２ を介して終段Ｅの入力側と接続可能であシ、上記終段は噴射ポンプの、調整操作 機構として用いられる制御ロッドの作動のため用いられる。The block connection diagram shows a first processor P1 and a second processor P2t. - In some computer systems, these processors have partially identical control. , having an adjustment device. The processor P1 has a quantity control device 11, which quantity control device On the input side, the brake and accelerator transmitters FF0% are emitted from the first rotation speed transmitter D1. signal is supplied. The rotation speed transmitter D1 is connected to the controllable changeover switch 511t. and is connected to the quantity control device 11. Quantity control device that forms the set value Us01□ The output signal of Supplied on the side. The negative input side of the comparator 13 indicates the position of the control iron of the injection pump. The representing actual value UIST is added. The output difference signal of the comparator 13 is provided to the adjustment controller 14. be provided. The output sides of the PD adjustment movement controller 12 and adjustment controller 14 are selectively connection controllable changeover switch S12 and two other external changeover switches 81, S2 It can be connected to the input side of the final stage E through the Used for actuation of control rods used as mechanisms.

第２プロセツサＰ２は同様に量制御装置２１を有し、この量制御装置は量制御装 置１１にて又はプロセッサＰ１にて欠陥障害の際のみ作用接続される。このこと を示すため相応の信号線路（これはプロセッサＰ１にて又は量制御装置１１にて 欠陥の際のみロジック″１”を有する）はオア回路を介して切換スイッチＳ２５ の制御入力側と接続されておシ、この切換スイッチ３２３はロジック“１”印加 の際ここでは図示してない別の位置を占め、量制御装置２１の出力側１ＰＤ−調 整制御器２２の入力側と接続する。The second processor P2 likewise has a quantity control device 21, which is a quantity control device. It is activated only in the event of a fault at processor P1 or at processor P1. this thing In order to indicate the (having logic "1" only in the case of a defect) is connected to the selector switch S25 via an OR circuit. This selector switch 323 is connected to the control input side of the occupies another position (not shown here) and controls the output 1PD of the quantity control device 21. Connected to the input side of the adjustment controller 22.

プロセッサＰ２にて設けられた切換スイッチ８２１、比較器２３、調整制御器２ ４、可制御切換スイッチＳ２２はその機能の点で相応の上述の装置に相応する。Changeover switch 821, comparator 23, and adjustment controller 2 provided in processor P2 4. The controllable changeover switch S22 corresponds in terms of its function to the corresponding device described above.

同様にして、量制御装置２１にも回転数発信器Ｄ２、アクセル発信器ＦＦＧ　、 ブレーキ位置を表わす発信器からの発信器信号が供給される。Similarly, the quantity control device 21 also includes a rotational speed transmitter D2, an accelerator transmitter FFG, An oscillator signal is provided from an oscillator representative of brake position.

実施例中で示すスイッチ位置は障害のない通常動作状態に相応する。この場合設 定値Ｕｓｏ１１は直列インターフェースと、切換スイッチ８２３とを介して量制 御装置１１からノロセッサＰ２の比較器２３へ伝送される。そこで、実際値ＵＩ ＳＴとの比較が行なわれ、検出された差に依存して調整制御器２４は切換スイッ チＳ２２を介して調整値ＵＳ置Ｌ　ｋ、制御ロッドの調整操作のため終段Ｅへ伝 送する。量制御装置２１はこの状態では作用しない。The switch positions shown in the examples correspond to normal operating conditions without faults. In this case the setting The fixed value Uso11 is controlled via the series interface and the changeover switch 823. The signal is transmitted from the controller 11 to the comparator 23 of the processor P2. Therefore, the actual value UI A comparison with ST is made and depending on the detected difference, the regulation controller 24 switches the changeover switch. The adjustment value US setting Lk is transmitted to the final stage E for adjustment operation of the control rod via the switch S22. send The quantity control device 21 does not operate in this state.

回転数発信器ＤＩ、Ｄ２のうちの１つが故障すると、そのつど所属する制御部１ ５又は２５によって所属の切換スイッチ８１１又は８２１の切換えが行なわれる 。If one of the rotational speed transmitters DI, D2 fails, the associated control unit 1 5 or 25 switches the associated changeover switch 811 or 821. .

例えば回転数発信器Ｄ１にて障害欠陥が起ると、切換スイッチＳ１１は所属の制 御部１５を介して図示してない他方の位置にもたらされ、その結果ゾリツジを介 して回転数発信器Ｄ２の発信器信号は量制御装置１１の入力側へ達し得る。For example, if a fault occurs in the speed transmitter D1, the changeover switch S11 will is brought to the other position (not shown) through the control section 15, and as a result, the The transmitter signal of the rotational speed transmitter D2 can then reach the input of the quantity control device 11.

切換スイッチＳ１２．Ｓ２２には制御部１６．２６が配属されておシ、これらの 制御部は制御変位量（距離）発信器にて欠陥障害の際切換“全行なわせ、それに より調整制御器１４．２４は非作用状態におかれＰＤ−調整移動制御器１２．２ ２は作用状態におかれる。Changeover switch S12. A control section 16.26 is assigned to S22, and these The control unit uses a control displacement amount (distance) transmitter to switch in the event of a defect or failure, and then The adjustment controller 14.24 is then inactive and the PD-adjustment movement controller 12.2 2 is put into action.

両プロセッサＰｉ、Ｐ２は所属の監視装置ＵＥｉ　。Both processors Pi and P2 belong to the monitoring device UEi.

ｕＥ２ｔ＝用いてその機能の点で監視される。両監視回路ＵＥ１　、ＵＦ４が所 属のプロセッサＰ１．Ｐ２における障害全検出すると、後置接続のアンドｙ−ト ’ｅ介してスイッチＳ２の切換え、ひいては終段Ｅの遮断が行なわれる。プロセ ッサＰ２にて又はＰＩＫおける残存制御偏差がプロセッサＰ２にて欠陥障害の同 時生起の際検出される場合でも燃料供給の電子的遮断が行なわれる。これらの動 作機能はアンド回路３１．３２、及びオア回路３３によって形成されている。オ ア回路３３にはシンボリツクにトランジスタとして示されている電子的スイッチ ３４が後置接続されており、この電子的スイッチによシ燃料供給の遮断が行なわ れる。uE2t= is used to monitor its functionality. Both monitoring circuits UE1 and UF4 are located Processor P1. When all failures in P2 are detected, the post-connection andy-t The switching of the switch S2 and thus the switching off of the final stage E takes place via 'e. process Residual control deviation in processor P2 or in PIK is similar to defective fault in processor P2. An electronic cut-off of the fuel supply is also carried out if an event is detected. These movements The operating function is formed by AND circuits 31, 32 and OR circuit 33. O The circuit 33 includes an electronic switch symbolically shown as a transistor. 34 is connected at the rear, and this electronic switch cuts off the fuel supply. It will be done.

国際調査報告 ＡＮＮＥＸ　Ｔｏ　ＴＨＥ　ＩＮＴＥＲＮＡＴＩＯＮＡＬ　５ＥＡＲＣＨＲＥＰ ＯＲＴ　ＯＮinternational search report ANNEX To THE INTERNATIONAL 5EARCHREP ORT ON

Claims (7)

【特許請求の範囲】[Claims] １．内燃機関の特性量制御のため、例えばデイーゼル噴射ポンプのデジタル調整 制御器の制御のための２つのプロセツサを有するコンピユータシステムにおいて 、障害の左い動作中コンピユータ負荷が両プロセッサ（Ｐ１，Ｐ２）にできるだ け均一に分布されており、更に、一方のプロセッサ（Ｐ１：Ｐ２）にて又はその 周辺の領域にて障害の生起の際他方のプロセッサ（Ｐ１；Ｐ２）が相応の非常緊 急機能作用を引受けるように構成されていることを特徴とする２つのプロセッサ を有するコンピユータシステム。1. Digital regulation of diesel injection pumps, for example, for characteristic variable control of internal combustion engines In a computer system with two processors for controlling a controller , the computer load on both processors (P1, P2) during the operation of the fault is are uniformly distributed, and furthermore, one processor (P1:P2) or the other When a failure occurs in the surrounding area, the other processor (P1; P2) Two processors characterized in that they are configured to take on acute functional functions. A computer system with ２．車両および／又は内燃機関の主要動作状態が夫々２重化発信器（Ｄ１，Ｄ２ ）を介してプロセツサ（Ｐ１，Ｐ２）に伝えられる特許請求の範囲第１項記載の コンピュータシステム。2. The main operating states of the vehicle and/or the internal combustion engine are detected by respective dual transmitters (D1, D2). ) is transmitted to the processor (P1, P2) via the processor (P1, P2). computer system. ３．両プロセツサ（Ｐ１，Ｐ２）の各々に回転数発信器（Ｄ１，Ｄ２）、アクセ ル（踏込量）発信器（ＦＦＧ）、ブレーキペダルの位置を監視する発信器が配属 されている特許請求の範囲第１項又は第２項記載のコンピユータシステム。3. Both processors (P1, P2) each have a rotation speed transmitter (D1, D2) and an access Equipped with a brake pedal (depression amount) transmitter (FFG) and a transmitter that monitors the position of the brake pedal. A computer system according to claim 1 or 2. ４．無障害動作中第１プロセッサ（Ｐ１）は燃料量に対する設定値（ＵＳＯＬＬ ）を決定し、第２プロセッサ（Ｐ２）は設定値（ＵＳＯＬＬ）と実際値（ＵＩＳ Ｔ）との差から噴射ポンプに対する調整量（ＵＳＴＥＬＬ）を決定する前記特許 請求の範囲各項記載のうちいずれか１に記載のコンピユータシステム。4. During fault-free operation, the first processor (P1) sets the set value (USOLL) for the fuel amount. ), and the second processor (P2) determines the set value (USOLL) and the actual value (UIS The above-mentioned patent determines the adjustment amount (USTELL) for the injection pump from the difference between T) and T). A computer system according to any one of the claims. ５．制御変位量発信器（ＲＷＧ）は噴射ポンプの制御ロッドの実際値（ＵＩＳＴ ）をプロセッサ（Ｐ１，Ｐ２）に伝え、更に、調整制御器（１４，２４）は設定 値（ＵＳＯＬＬ）と実際値（ＵＩＳＴ）との差に依存して制御ロッドを作動し、 更に、制御変位量発信器（ＲＷＧ）にて欠陥障害の際設定値（ＵＳＯＬＬ）がＰ Ｄ調整移動制御器（１２，２２）に直接供給され、該制御器の出力信号によつて 制御ロッドが調整される前記特許請求の範囲各項記載のうちいずれか１に記載の コンピユータシスアム。5. The control displacement transmitter (RWG) transmits the actual value (UIST) of the control rod of the injection pump. ) to the processors (P1, P2), and furthermore, the adjustment controllers (14, 24) actuating the control rod depending on the difference between the value (USOLL) and the actual value (UIST); Furthermore, the set value (USOLL) is set to P in the event of a defective failure in the controlled displacement amount transmitter (RWG). directly to the D adjustment movement controller (12, 22), and by the output signal of said controller. According to any one of the claims, the control rod is adjusted. computer system. ６．各プロセツサ（Ｐ１，Ｐ２）に１つの監視回路（ＵＥ１，ＵＥ２）が配属さ れており、該監視回路は両プロセッサ（Ｐ１，Ｐ２）にて障害の同時発生の除、 燃料量調整のために設けられた終段（Ｅ）を遮断するように構成されている前記 特許請求の範囲各項記載のうちいずれか１に記載のコンピュータシステム。6. One monitoring circuit (UE1, UE2) is assigned to each processor (P1, P2). The monitoring circuit eliminates the simultaneous occurrence of failures in both processors (P1, P2), The said stage is configured to shut off the final stage (E) provided for fuel amount adjustment. A computer system according to any one of the claims. ７．両プロセッサ（Ｐ１，Ｐ２）にて制御偏差の存続する場合燃料供給の電気遮 断が行なわれる前記特許請求の範囲各項記載のうちいずれか１に記載のコンピュ ータシステム。7. If control deviation persists in both processors (P1, P2), electrical cutoff of fuel supply is performed. A computer according to any one of the claims in which the invention is made data system.
JP50536686A 1985-11-07 1986-09-19 Computer system with two processors Pending JPS63501303A (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE3539407.2 1985-11-07
DE19853539407 DE3539407A1 (en) 1985-11-07 1985-11-07 COMPUTER SYSTEM WITH TWO PROCESSORS

Publications (1)

Publication Number Publication Date
JPS63501303A true JPS63501303A (en) 1988-05-19

Family

ID=6285322

Family Applications (1)

Application Number Title Priority Date Filing Date
JP50536686A Pending JPS63501303A (en) 1985-11-07 1986-09-19 Computer system with two processors

Country Status (4)

Country Link
EP (1) EP0245296A1 (en)
JP (1) JPS63501303A (en)
DE (1) DE3539407A1 (en)
WO (1) WO1987003044A1 (en)

Families Citing this family (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3700986C2 (en) * 1987-01-15 1995-04-20 Bosch Gmbh Robert Device for monitoring a computer system with two processors in a motor vehicle
DE3726489C2 (en) * 1987-08-08 1995-04-20 Bosch Gmbh Robert Device for monitoring a computer system with two processors in a motor vehicle
DE3733623A1 (en) * 1987-10-05 1989-04-13 Bosch Gmbh Robert DEVICE FOR ADJUSTING THE OPERATING CHARACTERISTICS OF AN INTERNAL COMBUSTION ENGINE
US5448480A (en) * 1988-05-11 1995-09-05 Siemens Aktiengesellschaft Fail-safe operation via controller redundancy for steering the back wheels of a road vehicle
DE3816254A1 (en) * 1988-05-11 1989-11-23 Siemens Ag CONTROL UNIT FOR STEERING THE REAR WHEELS OF A ROAD VEHICLE
DE4002389A1 (en) * 1989-05-02 1990-11-08 Bosch Gmbh Robert FUEL METERING SYSTEM WITH REDUNDANT CONTROL DEVICE
DE3926377C2 (en) * 1989-08-04 2003-03-06 Bosch Gmbh Robert Electronic control device for an internal combustion engine
DE4128658A1 (en) * 1991-08-29 1993-03-04 Bosch Gmbh Robert METHOD FOR CONTROLLING OPERATING PARAMETER DEPENDENT AND CYCLICALLY REPEATING OPERATING PROCESSES OF INTERNAL COMBUSTION ENGINES
DE4133268A1 (en) * 1991-10-08 1993-04-15 Bosch Gmbh Robert DEVICE FOR CONTROLLING THE DRIVE POWER OF A VEHICLE
US5320076A (en) * 1991-10-10 1994-06-14 Robert Bosch Gmbh Arrangement for detecting the position of an accelerator pedal and/or a power-determining element of the internal combustion engine of a motor vehicle
DE4220247A1 (en) * 1992-06-20 1993-12-23 Bosch Gmbh Robert Control device for vehicles
US5654888A (en) * 1992-06-20 1997-08-05 Robert Bosch Gmbh Control arrangement for vehicles
FR2694341B1 (en) * 1992-07-31 1994-10-07 Robin Centre Est Aeronautique Power control system, in particular for internal combustion engines of light aircraft.
DE4231449C2 (en) * 1992-09-19 2002-04-11 Bosch Gmbh Robert Device for controlling the drive power of an engine constructed from at least two cylinder banks
US5546306A (en) * 1992-10-27 1996-08-13 Honda Giken Kogyo Kabushiki Kaisha Multiple processor throttle control apparatus for an internal combustion engine
FR2697585B1 (en) * 1992-10-29 1995-01-06 Solex Motor control system with motorized throttle body.
DE4314118B4 (en) * 1993-04-29 2006-08-31 Robert Bosch Gmbh Method and device for controlling the drive power of a vehicle
DE19640432C2 (en) * 1996-09-30 2002-09-26 Siemens Ag Method for monitoring an internal combustion engine
DE19743463A1 (en) * 1997-10-01 1999-04-08 Itt Mfg Enterprises Inc Fault identification method for microprocessor systems in motor vehicles
DE19845220A1 (en) 1998-10-01 2000-04-13 Bosch Gmbh Robert Process and device for synchronization and checking of processor and monitoring circuit
FR2796420B1 (en) * 1999-07-15 2005-08-19 Renault INJECTION DEVICE FOR INTERNAL COMBUSTION ENGINE
DE19947252A1 (en) * 1999-09-30 2001-05-03 Bosch Gmbh Robert Device and method for controlling a drive unit
DE10009779A1 (en) * 2000-03-01 2001-09-06 Bosch Gmbh Robert Knock regulation in internal combustion engine involves coupling cylinder(s) with faulty evaluation electronics to controler for cylinder(s) with intact evaluation electronics
GB2360856B (en) * 2000-03-30 2004-06-23 Llanelli Radiators Ltd Intelligent control unit
DE102011011755A1 (en) * 2011-02-18 2012-08-23 Conti Temic Microelectronic Gmbh Semiconductor circuit and method in a safety concept for use in a motor vehicle
CN102890487A (en) * 2012-09-24 2013-01-23 三一重机有限公司 Multi-controller electrical control system
WO2019183428A1 (en) 2018-03-22 2019-09-26 Continental Motors, Inc. Engine ignition timing and power supply system
WO2021072617A1 (en) * 2019-10-15 2021-04-22 北京理工大学 Fault tolerance control method of electromechanical composite transmission system of aircraft

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPS5810246A (en) * 1981-07-13 1983-01-20 Nissan Motor Co Ltd Digital controller for vehicle
DE3303102A1 (en) * 1983-01-31 1984-08-02 Siemens AG, 1000 Berlin und 8000 München FLOW RATE CONTROL ARRANGEMENT
DE3342379A1 (en) * 1983-11-24 1985-06-05 Robert Bosch Gmbh, 7000 Stuttgart EMERGENCY CONTROL SYSTEM FOR FUEL MEASURING DEVICES

Also Published As

Publication number Publication date
DE3539407A1 (en) 1987-05-14
WO1987003044A1 (en) 1987-05-21
EP0245296A1 (en) 1987-11-19

Similar Documents

Publication Publication Date Title
JPS63501303A (en) Computer system with two processors
US4515125A (en) Safety arrangement for an internal combustion engine
US5367665A (en) Multi-processor system in a motor vehicle
JPS6122803B2 (en)
JP2002251215A (en) System for controlling and/or monitoring composite controller and method for the same
US3916622A (en) Combustion engine with at least one exhaust gas cleaning arrangement
JP3346769B2 (en) Vehicle control device
US6879891B1 (en) Method and device for monitoring a computing element in a motor vehicle
GB2255422A (en) Monitoring device for an i.c. engine control system.
JPH02502558A (en) Method and device for monitoring drive engine target value generator
US5016587A (en) Brake stop light circuit arrangement for a vehicle having electronic diesel control
JP2983532B2 (en) Electronic control unit for internal combustion engine
GB2256504A (en) A device suitable for controlling the injection of fuel into an internal combustion engine.
US6272408B1 (en) Method and arrangement for transmitting data in a motor vehicle
JP3518262B2 (en) Abnormality handling method for vehicle control computer
JP2018052315A (en) Control device for automobile and control device for internal combustion engine
JP3525478B2 (en) Accelerator control device
JPH0291448A (en) Method and device for safely interrupting injection-quantity regulating actuator of fuel injection pump for diesel type internal combustion engine
JPH06305376A (en) Control device for vehicle
CN113830052B (en) Motor control switching circuit, redundancy backup electronic parking controller and parking system
JPH05508692A (en) A device that adjusts the throttle valve of an internal combustion engine
JP2010182251A (en) Motor control device
JPS611552A (en) Control unit for vehicles
JP2555214B2 (en) Control method of device suspected of failure
JPH03276349A (en) Data duplication controller