EP2598740A1 - Module de sécurité et d'entrée/sortie intégré pour système de commande de moteur - Google Patents
Module de sécurité et d'entrée/sortie intégré pour système de commande de moteurInfo
- Publication number
- EP2598740A1 EP2598740A1 EP11751984.3A EP11751984A EP2598740A1 EP 2598740 A1 EP2598740 A1 EP 2598740A1 EP 11751984 A EP11751984 A EP 11751984A EP 2598740 A1 EP2598740 A1 EP 2598740A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- engine
- safety
- input
- output module
- module
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02D—CONTROLLING COMBUSTION ENGINES
- F02D41/00—Electrical control of supply of combustible mixture or its constituents
- F02D41/22—Safety or indicating devices for abnormal conditions
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B63—SHIPS OR OTHER WATERBORNE VESSELS; RELATED EQUIPMENT
- B63H—MARINE PROPULSION OR STEERING
- B63H21/00—Use of propulsion power plant or units on vessels
- B63H21/21—Control means for engine or transmission, specially adapted for use on marine vessels
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B63—SHIPS OR OTHER WATERBORNE VESSELS; RELATED EQUIPMENT
- B63H—MARINE PROPULSION OR STEERING
- B63H21/00—Use of propulsion power plant or units on vessels
- B63H21/22—Use of propulsion power plant or units on vessels the propulsion power units being controlled from exterior of engine room, e.g. from navigation bridge; Arrangements of order telegraphs
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02D—CONTROLLING COMBUSTION ENGINES
- F02D29/00—Controlling engines, such controlling being peculiar to the devices driven thereby, the devices being other than parts or accessories essential to engine operation, e.g. controlling of engines by signals external thereto
- F02D29/02—Controlling engines, such controlling being peculiar to the devices driven thereby, the devices being other than parts or accessories essential to engine operation, e.g. controlling of engines by signals external thereto peculiar to engines driving vehicles; peculiar to engines driving variable pitch propellers
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02D—CONTROLLING COMBUSTION ENGINES
- F02D29/00—Controlling engines, such controlling being peculiar to the devices driven thereby, the devices being other than parts or accessories essential to engine operation, e.g. controlling of engines by signals external thereto
- F02D29/06—Controlling engines, such controlling being peculiar to the devices driven thereby, the devices being other than parts or accessories essential to engine operation, e.g. controlling of engines by signals external thereto peculiar to engines driving electric generators
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02D—CONTROLLING COMBUSTION ENGINES
- F02D41/00—Electrical control of supply of combustible mixture or its constituents
- F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
- F02D41/26—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02D—CONTROLLING COMBUSTION ENGINES
- F02D41/00—Electrical control of supply of combustible mixture or its constituents
- F02D41/24—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means
- F02D41/26—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor
- F02D41/266—Electrical control of supply of combustible mixture or its constituents characterised by the use of digital means using computer, e.g. microprocessor the computer being backed-up or assisted by another circuit, e.g. analogue
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B63—SHIPS OR OTHER WATERBORNE VESSELS; RELATED EQUIPMENT
- B63H—MARINE PROPULSION OR STEERING
- B63H21/00—Use of propulsion power plant or units on vessels
- B63H21/21—Control means for engine or transmission, specially adapted for use on marine vessels
- B63H2021/216—Control means for engine or transmission, specially adapted for use on marine vessels using electric control means
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02B—INTERNAL-COMBUSTION PISTON ENGINES; COMBUSTION ENGINES IN GENERAL
- F02B61/00—Adaptations of engines for driving vehicles or for driving propellers; Combinations of engines with gearing
- F02B61/04—Adaptations of engines for driving vehicles or for driving propellers; Combinations of engines with gearing for driving propellers
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02D—CONTROLLING COMBUSTION ENGINES
- F02D41/00—Electrical control of supply of combustible mixture or its constituents
- F02D41/22—Safety or indicating devices for abnormal conditions
- F02D2041/227—Limping Home, i.e. taking specific engine control measures at abnormal conditions
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02D—CONTROLLING COMBUSTION ENGINES
- F02D41/00—Electrical control of supply of combustible mixture or its constituents
- F02D41/22—Safety or indicating devices for abnormal conditions
- F02D2041/228—Warning displays
-
- F—MECHANICAL ENGINEERING; LIGHTING; HEATING; WEAPONS; BLASTING
- F02—COMBUSTION ENGINES; HOT-GAS OR COMBUSTION-PRODUCT ENGINE PLANTS
- F02D—CONTROLLING COMBUSTION ENGINES
- F02D31/00—Use of speed-sensing governors to control combustion engines, not otherwise provided for
- F02D31/001—Electric control of rotation speed
- F02D31/007—Electric control of rotation speed controlling fuel supply
Definitions
- Embodiments of the invention relate to systems for engine control and management. Other embodiments relate to engine control systems for marine vessels and stationary generator sets.
- Engine controllers such as diesel engine controllers and/or marine engine controllers, include modules that perform various functions. These functions can include safety, in/out logic, engine control, and alarm functionality.
- Commercially available engine controllers have hardware-based solutions that provide each of the previously identified functions on standalone hardware boards. Generally, these engine controllers have been specialized components constructed for a particular engine-set. These engine controllers can be formed as unitary units, which are created on an engine-set-by-engine- set basis.
- An embodiment of the invention relates to a system for an engine, e.g., an engine of a marine vessel and/or stationary generator set.
- the system comprises a safety and input/output (I/O) module that is physically distinct from an engine control unit of an engine controller of the engine.
- the safety and input/output module includes hardware in addition to software.
- the safety and input/output module is configured to dynamically protect the engine during operation of the engine, and to communicate signals with components external to the engine controller.
- the safety and input/output module provides both safety functionality and I/O functionality, e.g., in a single controller.
- the engine controller comprises an engine control unit and a safety and input/output module.
- the engine control unit comprises hardware as well as software and is operable to regulate engine speed of an engine and to control the engine responsive to commands received from the safety and input/output module.
- the safety and input/output module is physically distinct from the engine control unit.
- the safety and input/output module is configured to receive information relating to sensed conditions from a plurality of sensors, and, if the sensed conditions are outside designated operating thresholds, convey the commands to the engine control unit to change engine operation.
- FIG. 1 shows a schematic diagram of a system for an engine controller in accordance with embodiments of the invention.
- FIG. 2 is a schematic diagram illustrating a system that utilizes a single safety and input/output (I/O) module for an engine-generator in accordance with embodiments of the invention.
- I/O input/output
- FIG. 3 is a schematic diagram illustrating an interface for facilitating unification of marine vehicle engine management in accordance with an embodiment of the invention.
- Embodiments of the invention relate to a system and engine controller having a safety and input/output (I/O) module; other embodiments related to related methods.
- the safety and I/O module can be a single controller implementing safety and I/O functions of the engine controller; that is, in an embodiment, the safety and I/O functions are implemented in a single (one) controller of the safety and I/O module.
- the safety and I/O module can be combined with an engine control unit (ECU) and a human- machine interface (HMI) module when assembling the engine controller.
- ECU engine control unit
- HMI human- machine interface
- the safety and I/O module, the ECU, and the HMI module can each be discrete components that are physically distinct from one another.
- aspects of the invention may be embodied as a system, method, or computer program product.
- Embodiments of the invention may comprise an entirely hardware embodiment, an entirely software embodiment (including firmware, resident software, electronically encoded logic, micro-code, etc.), or an embodiment combining software and hardware.
- module refers to a device or system comprising hardware and/or software.
- Hardware refers to processors or other controllers or other physical electronic parts or components, interconnected or otherwise configured to carry out designated functions.
- Software refers to electronically-accessible (e.g., readable) sets of instructions, that when accessed and executed by hardware causes the hardware to perform one or more designated functions according to the contents of the instructions.
- aspects of the present invention may take the form of a computer program product embodied in one or more computer readable medium(s) having software stored thereon.
- any combination of one or more electronically-readable (e.g., computer readable) medium(s) may be utilized.
- the electronically-readable medium may be an electronically-readable signal medium or an electronically-readable storage medium.
- An electronically-readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing.
- a USB (universal serial bus) flash drive may be utilized to move engine control data between a non-volatile memory of the engine control unit and a configuration file of the engine controller (e.g., engine management system).
- the HMI module can permit information to be directly uploaded and downloaded, such as to or from a USB flash drive.
- the electronically-readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an electrically erasable programmable read-only memory (EEPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
- an electronically-readable storage medium may be any tangible medium that can contain/store software for use by or in connection with hardware (e.g., an instruction execution system, apparatus, or device).
- An electronically-readable signal medium may include a propagated data signal with software embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof.
- An electronically-readable signal medium may be any electronically-readable medium that is not an electronically-readable storage medium and that can communicate, propagate, or transport software for use by or in connection with hardware (e.g., an instruction execution system, apparatus, or device).
- Software embodied on an electronically-readable medium may be transmitted using any appropriate medium, including but not limited to RF or other wireless, wireline, optical fiber cable, etc., or any suitable combination of the foregoing.
- Software for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. Higher level programming languages can also be used, such as MATLAB, SIMULINK, and the like.
- the software may execute entirely on a local computer or other electronic device, partly on the local computer or other electronic device, as a stand-alone software package, partly on the local computer or other electronic device and partly on a remote server, remote computer, or other remote electronic device, or entirely on the remote server, other computer, or other electronic device.
- the remote electronic device may be connected to the local computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection may be made to an external electronic device (for example, through the Internet using an Internet service provider).
- LAN local area network
- WAN wide area network
- the instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus or other electronic device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus or other electronic device, create a means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.
- Software may also be stored in an electronically-readable medium that can direct a computer, other programmable data processing apparatus, or other electronic devices to function in a particular manner, such that the instructions of the software stored in the computer readable medium produce an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks.
- FIG. 1 shows a schematic diagram of a system 100 for an engine controller 101 in accordance with an embodiment of the invention.
- the engine controller 101 may be configured for operable coupling with an engine 128, for controlling the engine 128.
- the engine controller 101 includes an engine control unit (ECU) 102 and a safety and input/output (I/O) module 106 that is physically distinct from the engine control unit 102.
- the safety and I/O module 106 can be a single controller having functionality both for engine protection during operation of the engine 128, and for signal communications into and out of the engine controller 101. That is, in an embodiment, the safety and I/O module 106 is configured to handle all communications to/from the engine controller 101.
- the engine controller 101 can comprise hardware and/or software components configured to control at least the engine portion of a marine generator set (e.g., marine gen-set), a generator set for use in another context (e.g., stationary gen-sets), or a marine direct drive propeller.
- the engine controller 101 can comprise hardware and/or software components configured to control any power generation system able to generate electricity from alternate forms of energy (e.g., gasoline, diesel, bio-diesel, hydrogen, natural gas, or the like).
- the power generation system can be a permanent or semi-permanent structure at a geographic location designed for the production and distribution of electricity, like an on-site small- scale power plant to provide emergency power to a factory.
- the engine controller 101 can include or otherwise be protected by structural components (not shown) like a foundation, walls, and roofing, to protect internal elements from the external environment.
- structural components like a foundation, walls, and roofing, to protect internal elements from the external environment.
- the specific physical external and internal configurations of the various components that can comprise a given embodiment of the engine controller 101 may be selected based on the operational environment in which the engine controller is to be used and/or on the particular functionality implemented by the embodiment in question.
- An embodiment of an implementation for a marine application is shown in view 280 of FIG. 2, for example.
- the engine controller 101 includes the engine control unit (ECU) 102, the safety and input/output (I/O) module 106, and a human-machine interface (HMI) module 104.
- ECU engine control unit
- I/O safety and input/output
- HMI human-machine interface
- the modules 102, 104, and 106 are communicatively linked to each other.
- the safety and I/O module 106 can connect to: the ECU 102 over a first, direct link 114 using a first port 136; the HMI module 104 via a second link 111 using a second port 132; one or more sensors 120 via a third link 113 using third port(s) 134; and to a network 122 via a fourth, Ethernet link 112 using a fourth port 135.
- the HMI module 104 can connect to the ECU 102 through a fifth link 110, which can be an attached resource computer network (ARCnet) connection, or, in other embodiments, another type of communication connection.
- ARCnet attached resource computer network
- the ECU 102 is operable to regulate engine 128 speed, to stop the engine 128 in response to determined emergency conditions (e.g., under control of the safety and I/O module 106), or the like.
- the ECU 102 can include hardware (e.g., one or more microprocessors, memory units, analog to digital converters, output interface units, or other electronic components) and/or software.
- the ECU includes both hardware as well as software.
- the ECU 102 can be tailored to the specific engine 128 and vessel/vehicle/environmental requirements with which it is to be used.
- software of the ECU 102 can allow for adaptation of use, but can be constrained by the hardware (e.g., specifics of the engine 128).
- the ECU 102 may need protection from harsh environmental conditions, and may therefore need to be constructed within an environmental housing and/or be constructed to be resilient within designated environmental limits.
- the ECU 102 may need to be cooled (actively or passively), and may need to be protected from dust, vibrations, moister, salt, and the like.
- the ECU 102 may be the only component of the engine controller 101 that is constrained by the engine 128. This arrangement permits other components of the engine controller 101, such as HMI module 104 and safety and I/O module 106, to be constructed in a standardized manner. Thus, the same HMI module 104 can be manufactured in volume and utilized for a variety of different engine controllers 101. Similarly, the same safety and I/O module 106 can be manufactured in volume and used for a variety of different engine controllers 101.
- HMI module 104 and safety and I/O module 106 Use of a common HMI module 104 and safety and I/O module 106 for supporting a wide variety of different marine vessels (or other vehicles, generator sets, or other systems in which engines 128 are used) can represent a savings in terms of inventory, manufacturing cost, maintenance, training, and the like.
- the software of the HMI module 104 and safety and I/O module 106 can be modified significantly (in a manner largely unconstrained by the specific engine 128 being supported) on a per-engine controller 101 basis and can be configured for each specific marine vessel (or other vehicle, generator set, or other system in which an engine is used) as needed and/or based on designated operator specifications.
- the human-machine interface (HMI) module 104 can be configured as an interface that is useable by one or more users/operators (e.g., technicians, engineers, system manager, vessel operators, etc.) to tune, calibrate, optimize, view, and edit operating parameters of the engine 128. That is, values for the configurable operating parameters of the engine 128 (e.g., which is part of a power generation system) can be adjusted by a user via an integrated HMI module 104.
- the HMI module 104 is a computational fluid dynamics (CFD) module.
- CFD computational fluid dynamics
- the safety and I/O module 106 is configured to handle safety and I/O functionalities of the engine controller 101.
- the safety functionality may include protection of the engine(s) 128, such as engine shutdown if one or more sensed conditions (e.g., operating parameters of the engine, as sensed by the sensors 120) are indicative of conditions harmful to the engine 128.
- the safety functionality can also include logging and alerting features.
- the safety functionality of module 106 can permit an authorized administrator to configure thresholds that define "out-of-bounds" conditions for the engine 128, that is, operating thresholds are designated, and if the operating thresholds are crossed (e.g., sensed conditions are outside the designated operating thresholds), a control action is initiated.
- the safety and I/O module 106 can convey a shutdown command 116 to the ECU 102, as a signal over the direct link 114, upon the occurrence of one or more designated conditions, e.g., conditions where a control action is designated as warranted for safety purposes.
- the safety and I/O module 106 is configured to provide
- TCP/IP Transmission Control Protocol/Internet Protocol
- a portable flash memory device i.e., thumb drive or memory stick
- a USB port 137 can be directly connected to the safety and I/O module 106 via a USB port 137.
- ESATA Serial Advanced Technology Attachment
- FIREWIRE FireWire
- BLUETOOTH Wireless Fidelity
- WIFI Wireless Fidelity
- Other communication protocols and standards e.g., ESATA, FIREWIRE, BLUETOOTH, WIFI, or the like
- ESATA Serial Advanced Technology Attachment
- FIREWIRE FireWire
- BLUETOOTH Wireless Fidelity
- WIFI Wireless Fidelity
- the sensors 120 can include engine sensors, as well as various other sensors distributed throughout a vessel (or other operating environment). Each sensor 120 can be a device that produces a signal containing information/data able to be conveyed to the safety and I/O module 106 over the link 113. The information within the signal can be a value indicative of a condition, e.g., physical condition or event proximate to the sensor(s). Thus, the sensors 120 can detect or otherwise sense conditions relevant to the engines 128, and output information of the sensed conditions for conveyance to the safety and I/O module. In a marine application, sensors can include fuel sensors, speed sensors, fluid flow rate sensors, fluid temperature sensors, pressure sensors, power sensors, ambient condition sensors, or the like. The sensed conditions may include sensing operating parameters of an engine 128, and may additionally or alternatively include conditions external to the engine.
- the off-engine interface 124 is a programmatic interface external to the engine controller 101, which communicates with the engine controller 101 via the safety and I/O module 106.
- the alert module 126 is one example of an off-engine interface.
- the data store 123 is a persistent (non- volatile) memory space external to the engine controller 101 in which data can be maintained.
- the data store 123 can include, for example, a configuration file 127 of parameters of the engine controller 101.
- the data store 123 maintains custom values for the various modules of the controller 1010 (e.g., HMI module 104, ECU 102, and safety and I/O module 106), which can be used by engineers and technicians to calibrate/optimize the engine 128 in a relatively rapid manner.
- the data store 123 can also be used to externally maintain log information obtained from safety and I/O module 106 (specifically, information from logging module 154).
- the safety and I/O module 106 may comprise a number of components
- the safety and I/O module 106 can also include a number of functional sets of programmatic instructions 150 (that is, software), which are stored upon and executable by the components 140.
- the safety and I/O module 106 is implemented on a single integrated circuit board, which is distinct from the HMI module 104 and the ECU 102. In other embodiments, multiple boards and components can be utilized to implement the safety and I/O module 106.
- the programmatic instructions 150 can include, but are not limited to, the following functionally defined modules: a sensor manager 152, a logging module 154, a mode manager 155, an event editor 156, an event handler 158, a notification module 160, a communication manager 161, or the like. Not all of these functional modules need be included in each implementation instance, and additional functional modules can be included in other contemplated embodiments without exceeding the scope of the disclosure.
- the sensor manager 152 is configured to control receiving and processing signals (containing data/information) received from the sensors 120. Different sensors 120 may need to be calibrated to ensure proper readings, which can also be accomplished using the sensor manager 152.
- the sensor manager 152 can convert the signals received from the sensors 120 to quantified values (which may require A/D conversions using the converter(s) 146). These values can be displayed; for example, the HMI module 104 may be configured to control display of a number of different sensor values, e.g., using an interface 310 as shown in FIG. 3. The values can also be used to trigger control actions (via the event handler 158) and can be logged (by the logging module 154). Additionally, the sensor manager 152 can contra 1/adjust a sampling rate, can determine conditions for out-of-bounds values (thereby filtering anomalous values, as appropriate), and the like.
- the logging module 154 is configured to log activity of the engine controller 101. This can include logging values of the sensors over time, logging administrative changes made to the safety and 1/ O module 106, and the like. In one embodiment, the logging module 154 maintains values of sensors in a cache or other buffer, and then selectively writes information from this cache (which can be a volatile memory, which is discarded or written over normally) to a more permanent record, such as one or more log records 162 of a non- volatile memory (or data store) 143.
- this cache which can be a volatile memory, which is discarded or written over normally
- the logging module 154 can gather state information relevant to the incident and record it in the log records 162.
- a sample incident log table 180 is shown in FIG. 1, where uniquely identified records per incident can be recorded along with a set (1..N) of related parameters and values.
- This gathered state information can include past (a few seconds prior, for example) data maintained in a memory (including memory 144), which the logging module 154 has access to.
- the state information can also include present and future information (e.g., state information at the time of the incident and after the incident) also gathered from the sensor(s) 120 or an accessible memory.
- the engine controller 101 is configured to be placed in multiple different modes, each of which may have different designated thresholds for logging (e.g., logging module 154), sensor management (152), event handling (event handler 158), alerts and notifications (notification module 160), and the like.
- the mode manager 155 can be used to manage these different modes and to ensure relevant parameters and settings of other modules are adjusted as appropriate for a current mode of the engine controller 101.
- the different modes handled by the mode manager 155 include a "normal" operating mode (meaning a baseline operating mode), a pre-lube operating mode, and an engine start/stop mode.
- the engine start/stop mode can include an energy saver mode (meaning a mode where an engine is operated to reduce energy usage relative to operations in modes other than the energy saver mode), a low noise mode (meaning a mode where an engine is operated to produce a lower noise output relative to operations in modes other than the low noise mode), a fuel saver mode (meaning a mode where an engine is operated to use less fuel relative to operations in modes other than the fuel saver mode), a low exhaust emissions mode (meaning a mode where an engine is operated to produce less exhaust emissions relative to operations in modes other than the low exhaust emissions mode), and the like.
- Various maintenance modes and test modes can also be established and maintained by the mode manager 155.
- the modes managed by mode manager 155 can depend on implementation instances, and the disclosure is not to be construed as limited to the sample modes detailed herein.
- the event editor 156 permits an authorized administrator to establish a set of conditions that are to be associated with the occurrence of an event. For example, an administrator can define a set of thresholds for sensor values, which is indicative of an event.
- the events recorded via the event editor 156 can be specific to mode, as determined by mode manager 155.
- combinative logic can be established for various events, which can require multiple conditions (values of different parameters) to be evaluated using Boolean logic (or the equivalent), in order for the event to be true. Additionally, some events may require more than one instance of a value to occur over a time period, which ensures that events are not improperly identified based on anomalous values picked up by the sensor(s) 120.
- the event handler 158 is configured to identify previously established events responsive to a satisfaction of associated conditions. An occurrence of an event can result in a corresponding programmatic action linked to this event being initiated. Events handled by the event handler 158 can include the occurrence of designated environmental conditions (external temperatures too hot or too cold, weather conditions, the presence of fire or liquid, etc.), the occurrence of designated operational conditions of the system in which an engine is being used (vessel or other vehicle damage, sudden deceleration or other motive conditions, lack of fuel, the presence of improper fuel, increased resistance on an output of the engine, such as propeller fouling, etc.), and the occurrence of designated operational conditions of the engine (internal temperature too high or too low, the presence or lack of designated air intake or exhaust constituents, the occurrence of internal damage, etc.), which may be identified based on sensed conditions being outside designated operating thresholds or otherwise.
- designated environmental conditions external temperatures too hot or too cold, weather conditions, the presence of fire or liquid, etc.
- Responsive control actions may include logging events (relating to logging module 154), sensor adjustment events (e.g., adjust sampling rate, sensor sensitivity, etc.), notification events (e.g., relating to notification module 160), engine control events (causing a shutdown or other command 116 to be issued to the ECU 102 over the direct link 114), and the like.
- event handler 158 Some events handled by event handler 158 can be specific to the engine
- Event handler 158 can be minimally modifiable by administrators.
- Other events may be customized events programmed via the event editor 156.
- Different types of users e.g., technician, engineer, captain
- the programmatic actions triggered by the event handler 158 can have local effect (only affect operations of the engine controller 101), can have external effects (can cause communications/messages/commands to be sent external to the engine controller 101, such as to off engine interface 124, alarm module 126, data store 123, and the like), or can have both local and external effects.
- the notification module 160 is configured to cause notifications and/or alerts to be issued to suitable devices/people/interface responsive to triggering events.
- the notification module 160 permits customized notifications to be sent to different people/devices.
- an engine overheating event can trigger one type of notification to be sent to the captain on a bridge of a marine vessel and can cause a different notification to be sent to an engine technician in the engine room of the marine vessel.
- the notifications issued by the notification module 160 can vary substantially depending on a mode (handled by mode manager 155) that the vessel (or engine 128) is currently operating in.
- the notification module 160 can communicate alerts 107 to the safety and I/O module 106 via port 138. Additionally, the notification module 160 can cause messages/commands to be sent to off-engine interfaces 124, such as to the alarm module 126.
- the alarm module 126 and/or alarm module 107 are configured to respond to signals and/or commands of the safety and I/O module 106. Each alarm module 126, 107 can alert an operator and/or remote monitoring site of an engine operating parameter that is outside a set range of parameters (or otherwise of sensed conditions being outside designated operating thresholds). That is, an event identified by the event handler 158 can trigger sounding/notification of alarm module 107 and/or 126.
- the alerts by alarm module 107 and/or 126 can range from audio only, to audio and visual, visual only, or the like.
- the communication monitor 161 is a configurable module that monitors the state of communications (I/O) between different engine controller 101 components and between the engine controller 101 and external modules (e.g., alarm module 126, off engine interface 124).
- the state of communications (determined by communication manager 161) can affect operations of other ones of the modules, as communication problems can correspond with data anomalies being reported by the sensors 120 and with an inability of various ones of the modules 106, 104, 102 to interact with each other.
- communication problems with ARCnet 110 (as detected and monitored by communication monitor 161) can cause operating parameters for engine control to not be conveyed between the bridge (or other primary control location) and the engines themselves.
- the communication status (maintained by monitor 161) can be logged (by logging module 154) along with other operational parameters, which can be beneficial to technicians and engineers who are attempting to troubleshoot intermittent operational incidents, which may be difficult to replicate and/or identify in a test (or non-operational) environment.
- the communication monitor 161 can initiate alarms and other safety related actions. Because the I/O and safety functions are integrated, a level of reactiveness to communication issues not previously possible can be implemented. Further, the integration of safety functions and I/O functions in a single module 106 minimizes possible points of failure in the engine controller 101. In previous implementations, safety functions can be disrupted when communications to the safety module were hampered, which could be caused by a problem with the I/O module with a communication link between the I/O module and the safety module, and the like. In harsh environments, such as those of a marine vessel, which has heat, dust, vibration, interference, moisture, and other challenges, minimizing the points of failure can result in a significant operational gain.
- an over- speed condition can be detected (by event handler 158) where the engine is run above a threshold speed level (as set by the event editor 156). Detection of this event causes (among other things) a logging of the event to occur, using logging module 154. More specifically, logging module 154 can log pre and post conditions around a period of the event being detected. The pre-sample time period may be about four seconds, while the post sample time may be relatively less at about one second.
- a sampling rate can be determined of about fifty microseconds. For a determinable rate, the sample rate may be low. This rate may be increased in response to a set of determined (and variable) circumstances. For example, a low rate can be used during a pre and post recording, but a relatively higher rate can be used during a period that the measured parameter is outside the threshold range.
- an injection of fuel or the quantity of injected fuel may affect such engine operating parameters to include engine starting capability, idling efficiency (and on/off fuel saving modes), supplied power levels, engine protection mechanisms, wear and part life, and exhaust emissions.
- these emissions can include a total amount of exhaust per amount of power supplied or consumed, as well as the component breakdown of the emissions themselves.
- Such components can include, for example, the oxides of nitrogen (NOx) content, the CO and C0 2 ratio, the quantity of size of the particulate matter (PM), and the like.
- the incident log 180 can record a snapshot of the event (time stamp, header information, values of the one hundred and forty parameters, etc.), transport data to a quick panel (part of the HMI module 104, or controlled thereby) for display, process local controls from display, operating mode, and the like.
- different quantities of parameters can be recorded in the pre, during, or post stages.
- the safety and I/O module 106 provides more than just logging functions.
- the safety and I/O module is configured, for example, for one or more of the following: safeguard the engine 128 from designated abnormal operating conditions; signal alarms based on sensed conditions being outside designated operating thresholds, e.g., alarms are initiated based on information received from the sensors relative to designated nominal operational parameters of the engine; override manual inputs; provide independent processing for logic confirmation; engage safety instigated shutdown procedures, or perform an engine slowdown to include a force to idle mode; perform an emergency full stop; perform a routine start/stop procedure based on selected inputs; cycle a blow down operation; engage pre-lube pumps; provide data logging; engage a bypass operation of, for example, a cold engine strategy of the pre-lube; or the like.
- the above is not intended to be an exhaustive list of functions supported by the safety and I/O module 106.
- the safety and I/O module 106 can generate commands (e.g.,
- the commands 116 can include speed reference, drop percentage, pop test, overspeed tests, and the like.
- configuration information can be provided to the ECU 102. Configuration information can include, for example, engine type, application type, overspeed limit, acceleration/deceleration rates, and the like.
- the safety and I/O module 106 can receive information from the ECU 102 and can respond to that data by directly creating an alarm signal, or if an alarm module (107 and/or 126) is present, by signaling the alarm module so that a suitable alarm is created.
- ECU 102 As an example of ECU 102, HMI module 104, and safety and I/O module
- an operator may request (via the HMI module 104) an amount of torque or engine speed (power request) via an accelerator pedal potentiometer or the like.
- the power request can be in the form of an electronic signal sent to the ECU 102.
- the ECU 102 based on the request and data collected from various sensors 120, can calculate in real-time the quantity of injected fuel required.
- the operator can input additional commands.
- the additional commands can include an idle speed increase to compensate for power take off (PTO) operation, or the like.
- Condition based monitoring systems like controller 101
- the vehicle speed function can be used to evaluate vehicle speed and include the possibility to activate a speed limiter, or a cruise control function, to maintain or restore a set speed.
- the engine ECU 102 can interface with various other vehicle systems (e.g., traction control) and can carry out self-monitoring (via the safety and I/O module 106) duties and self-diagnostic functions to keep the controller 101 working at or above a desired level.
- self-monitoring via the safety and I/O module 106
- "limp home" mode functions can also be integrated into controller 101. For example, in the event that a pump speed sensor (120) fails, the ECU 102 can use an alternator speed signal function for engine RPM counter as a backup signal.
- the ECU may be configured to control a host of engine related functions.
- engine related functions can include, for example, speed regulation, emergency stop conditions (other than for engine protection), basic protection (OS, COP, LOP), limp home operation, independent processing, configuration setup, interface with local controls, station interface, and interface to external electronics and peripherals (e.g., laptops or tablets).
- the controller 101 is configured to protect the engine
- the engine 128 by monitoring several engine performance parameters while also monitoring the health of its internal components. During situations where internal controller checks or engine parameters fall outside of acceptable limits (designated operating thresholds), a warning or fault is logged. Depending on the situation, the engine 128 can be controlled to respond as one of the following: the engine 128 continues operating as it did before the warning alarm or fault indication; the controller 101 sounds and displays an alarm; the engine is automatically controlled to shut down, or is otherwise controlled to operate in a different manner than before the warning alarm or fault indication.
- the safety and I/O module 106 allows the engine controller 101 to communicate as needed through a communication bus.
- a suitable bus can be a controller area network bus (CANBUS), MODBUS (referring to a serial communications protocol published by MODICON and protocol derivatives), or the like.
- the safety and I/O module 106 can act to protect the engine 128 from experiencing operating conditions known to be damaging to the engine 128. If an alarm module (107 and/or 126) is present, it can communicate that a fault is occurring or has occurred.
- the engine controller 101 has default conditions for warnings and alarms. Different vessels (or other systems in which an engine is used) may be required to respond to events in different ways. Each vessel/system operator can choose to either accept the default values, to edit the default values, or to specify (via custom settings) how events are to be handled.
- FIG. 2 is a schematic diagram illustrating a system 200 that utilizes a single safety and I/O module 237 for an engine-generator 215 of a vessel propulsion system 210 or other system in accordance with embodiments of the invention.
- Components of the vessel propulsion system 210 of particular relevance to the present disclosure can include one or more engine-generators 215, which include an engine management system 225.
- An engine-generator 215 can represent the assemblage of components required for converting a fuel source into electricity.
- the specific configuration of components of an engine-generator 215 can vary based on manufacturer and purpose; however, generally speaking, an engine-generator 215 may include a fuel source, an engine, an engine speed regulator, a generator, a generator voltage regulator, as well as systems for handling exhaust, cooling, and lubrication.
- the engine speed regulator can be a variable speed regulator, while in other applications, a constant engine speed regulator (e.g., a governor) can be used.
- an engine control unit In a marine propulsion application, an engine control unit
- ECU can regulate engine speed from idle to rated based on throttle commands from a primary control location, e.g., the captain's room or bridge.
- a speed command is conveyed over wiring of a ship (e.g., a ship's bridge-to-ECU communications system).
- the HMI 230 can be used to calibrate this communication channel (from 4 to 20 mA typically) and throttle-level, which can be any value between idle and rated. Improper calibration of this throttle command can result in the engines operating at non-desired speeds (e.g., speeds other than those selected by a captain), which can result in loss of fuel efficiency and a lack of marine vessel responsiveness to a captain's directions.
- Safety and I/O module 237 can monitor non-desired conditions and can provide alerts, notifications, logs, etc.
- Operating parameters 220 of the engine-generators 215 can be constantly monitored and automatically adjusted by the engine management system 225.
- the operating parameters 220 can represent values or limits for input/output variables for the engine-generator 215.
- the engine management system 225 can utilize the values of the operating parameters 220 when determining when and/or how operation of the engine- generator 215 should be adjusted.
- the engine management system 225 can accelerate the engine based upon the "increase speed acceleration rate" operating parameter 220.
- this "increase speed acceleration rate" operating parameter 220 can be increased responsive to a captain adjusting a throttle on the bridge of the vessel. Adjustments can also be made from the HMI 230 by maintenance crew users during engine tuning/calibration.
- a subset of the operating parameters 220 can be designated as configurable operating parameters 222.
- Values for the configurable operating parameters 222 can be modified by the user 205 for the purposes of calibrating/tuning operation of the engine-generator 215. Conversely, values of the operating parameters 220 not included in the subset of configurable operating parameters 222 cannot be modified by the user 205.
- Examples of configurable operating parameters 222 can include, but are not limited to, the air-to-fuel ratio lower limit, static fuel limit values, increase speed acceleration rate, decrease speed deceleration rate, percent droop, and the like. Definition of the configurable operating parameters 222 can occur during production of the engine- generator 215 and can allow for further customization by the user 205 after installation.
- the engine management system 225 comprises hardware and/or software elements configured to monitor and adjust the operating parameters 220 of the engine- generator 215.
- the engine management system 225 may comprise numerous components. In the system 200 as shown in FIG. 2, however, only those components of the engine management system 225 directly involved with the implementation and/or functionality of the present invention have been illustrated.
- the engine management system 225 includes an integrated HMI 230, an engine control unit (ECU) 235, and the safety and I/O module 237.
- the HMI 230 is operable to communicate with the ECU 235 over ARCnet 232 (or an equivalent communication link, network, or bus).
- the ECU 235 can be a separate hardware component that runs the software components, such as a speed regulator, providing fuel injection commands, etc.
- the ECU 235 can run standalone with the already configured parameters (which can be stored in non-volatile memory 240 to prevent loss of values power loss, a power-up cycle).
- the ECU 235 can continue to operate (using a last established set of parameters 222) until communications with the HMI 230 are restored (which can update the parameters the ECU 235 uses).
- the integrated HMl 230 comprises hardware and/or software configured to provide a graphical interaction mechanism in which the user 205 can perform functions relating to the configurable operating parameters 222 of the engine-generator 215. That is, at least a subset of the HMl 230 entered values (e.g., a subset related to ECU 235 functions) for the parameters 220 can be routed through the ECU 235.
- the integrated HMl 230 can include a display screen and keypad encased within the housing of the engine-generator 215.
- the components supporting the processing logic and graphical menus of the integrated HMl 230 can also be accommodated within an appropriate location of the engine-generator's 215 housing like a designated control area where the sensitive components can be protected from the environmental stresses of operation (e.g., heat and vibration).
- the integrated HMl 230 is a robust interface and not a dumb terminal or control panel.
- the engine management system e.g., system 210) can include configuration management and engine protection diagnostics that runs within the HMl hardware 230 apart from the display shown to a user. While the engine-generator 215 may still have a control panel for quick access to functions like power up/off and emergency stop, the integrated HMl 230 can be utilized by the user 205 to calibrate or fine-tune values for the configurable operating parameters 222 of the engine-generator 215 in the field (post-installation).
- the master controller (the EMS 225) can adjust or power-up/down engine- generators 215 for load balancing, conformance to operational policies, or to handle a detected problem.
- the master controller can provide the engine management system 225 with operating parameters 220 values to accommodate these situations as they arise.
- the safety and I/O module 237 can detect conditions related to safety and can situationally trigger engine performance functions 242 (directly using direct link 243), as necessary.
- Storage of the configurable operating parameters 222 can also support an up/down load functionality to assist in the calibration of multiple engine-generators 215.
- the engine management system 225 can package the configurable operating parameters 222 as a configuration file 265.
- the configuration file 265 of data storage device 260 can be a formatted electronic representation of the configurable operating parameters 222 that the engine management system 225 can read and write.
- View 280 of FIG. 2 shows a non-limiting implementation example in a marine propulsion context.
- the view 280 shows how the HMI 230, the safety and I/O module 237, and the ECU 235 can be integrated in an accessible and compact space near the ECU 235 in one contemplated embodiment.
- a panel-closed view 282 shows a HMI 230 with a set of actuators 284 (buttons, switches, dials, etc.), which can be adjusted by a user.
- More than one HMI 230 can be implemented in a marine vessel.
- one HMI 230 can be located proximate to the ECU 235 (as shown) and another different HMI 230 can be located in the vessel's bridge.
- various connections can be seen, such as the ECU 235 and module 237.
- FIG. 3 is a schematic diagram illustrating an interface 310 for facilitating unification of marine vehicle engine management in accordance with an embodiment of the inventive arrangements disclosed herein.
- interface 310 represents a sample screen from HMI 230 that shows values relating to engine safety (from safety and I/O module 237, for example).
- interface 310 engine performance characteristics are presented for an operator to view.
- Elements 312-322 may be interactive elements.
- interface 310 can be a common functional display of a diagnostic system.
- the interface 310 can be customizable based on marine vehicle capabilities, engine functionality, available sensor data, operator preferences, and the like. For example, interface 310 can conform to a traditional gauge panel layout.
- section 312 engine performance characteristics are presented in realtime.
- Section 312 can conform to traditional and/or proprietary display formats including, textual data, graphical data, and the like.
- section 312 presents multiple engine data simultaneously.
- section 312 presents engine data for each engine independently (in the case of a system having plural engines). That is, a screen for each engine can be presented upon request.
- engine parameters are visually presented within a portion of the interface 310.
- Engine parameters can include, but are not limited to, temperature, pressure, speed, power, flow, and the like.
- section 314-318 presents historical sensor information collected from sensors associated with an engine.
- section 314-318 presents current sensor data/information in real-time enabling a "top-level" view of engine performance.
- sensor information is presented textually, graphically, or the like.
- the interface 310 may be configured to display digital renditions of an analog gauge(s).
- notifications are presented in response to a safety trigger correspondence. Notifications can be visually presented, audibly presented, or the like. In one embodiment, a notification of engine overspeed can be textually presented within section 320 simultaneously with an audible alert. In one embodiment, an audible alert is presented proximate to a computing device associated with the interface 310. In one instance, section 320 is an operator message block of a diagnostic interface. Section 320 can present any type of notification (e.g., notifications from notification module 160).
- section 322 operator actions are selectively presented based on section
- section 320 permits an operator to dismiss a notification, alert, alarm, warning, and the like.
- a "silence" key can be interactively operated to allow notifications to be easily dismissed.
- section 322 can be an interactive element conforming to a "soft" button.
- section 322 can be presented within a touch sensitive portion of a computing display. It should be appreciated that selection of elements within section 322 can alter the presentation of section 312-318. For instance, selecting a data download option within section 322 can present a data download menu within section 314.
- each block in the flowchart or block diagrams can represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s).
- the functions noted in the block can occur out of the order noted in the figures. For example, two blocks shown in succession can, in fact, be executed substantially concurrently, or the blocks can sometimes be executed in the reverse order, depending upon the functionality involved.
- One embodiment relates to a module for an engine controller.
- This module comprises a safety and input/output (I/O) module that is physically distinct from an engine control unit (ECU) of an engine controller for an engine (e.g., engine set) of a marine vessel, generator set, or other system in which the engine is used.
- the safety and I/O module includes hardware in addition to software.
- the safety and I/O module comprises a single controller having safety functionality and I/O functionality.
- the safety functionality is embodied in hardware and/or software configured for dynamic engine protection during operation of the engine of the marine vessel or other system.
- the I/O functionality is embodied in hardware and/or software configured to control sending signals to components external to the engine controller and receiving signals from components external to the engine controller.
- an engine controller including an engine control unit (ECU) and a safety and I/O module.
- the ECU can include hardware and/or software; in one embodiment, it includes both.
- the ECU is operable to regulate engine speed and to stop at least one engine in response to a determined set of emergency conditions.
- the safety and I/O module is physically distinct from the ECU.
- the safety and I/O module comprises a single controller having functionality for engine protection during operation and for signal communication in and out of the engine controller.
- the safety and I/O module detects conditions from a set of sensors, and triggers control actions when the sensed conditions are outside previously established (designated) operating thresholds.
- the safety and I/O module can also convey commands to the ECU to dynamically change engine operating conditions responsive to the occurrence of events that are linked to the set of emergency conditions.
- Another embodiment relates to a method for providing engine controllers for a set of different marine vessels having different engine sets.
- a set of safety and I/O modules is provided; one for each of the engine controllers of the different marine vessels.
- Each of the safety and I/O modules is a software/firmware configurable unit for operating in conjunction with the different marine vessels having different engine sets without requiring any hardware changes to the safety and input/output module.
- Each safety and I/O module comprises a single controller having safety functionality and I/O functionality.
- the safety functionality can be for dynamic engine protection during operation of an engine set of one of the different marine vessels.
- the I/O functionality can be for sending signals to components external to the engine controller and for receiving signals from components external to the engine controller.
- a set of human-machine interface (HMI) components is identified.
- HMI components can be a software/firmware configurable unit for operating in conjunction with the different marine vessels having different engine sets without requiring any hardware changes to the HMI component.
- Each HMI can be operable to visually display conditions of engine parameters monitored by the safety and I/O module in real-time.
- Each HMI can also function as an alarm module that presents alerts when sensed conditions are outside the previously established operating thresholds as determined by safety functionality of one of the safety and I/O modules.
- the method also comprises identifying a set of ECUs, one for each of the engine controllers.
- Each of the ECUs can regulate engine speed and to stop engines of the engine set of the different marine vessels in response to a determined set of emergency conditions, which are determined by safety functionality of one of the safety and I/O modules.
- Each ECU can be specifically manufactured for one of the different engine sets of one of the different marine vessels. That is, each ECU can require hardware specific changes that are unique to the different engine set that the ECU supports.
- the engine controller can be assembled for each of the different engine sets by combining an ECU with one of the safety and I/O modules, and with at least one of the HMI components.
- dynamic control e.g., protection
- protection refers to monitoring the engine in operation and concurrently controlling the engine, responsive to the monitoring, for example, to prevent the engine from operating in a manner that could result in damage to the engine or related systems, or to reduce or minimize the extent to which the engine operates in such a manner.
- Embodiments of the invention are described herein in the context of an engine. All such embodiments are additionally applicable to engine sets, meaning a group of plural engines that are controlled in coordination, e.g., for a common purpose such as generating electricity or moving a propeller shaft.
- the system comprises a safety and input/output module that is physically distinct from an engine control unit of an engine controller for an engine.
- the safety and input/output module comprises hardware in addition to software.
- the safety and input/output module is configured to dynamically protect the engine during operation of the engine, and to communicate signals with components external to the engine controller.
- the safety and input/output module comprises a single controller that includes the hardware and software.
- the safety and input/output module includes an alarm module and is operable to receive information relating to sensed conditions from a set of sensors.
- the safety and input/output module is further operable, if the sensed conditions are outside designated operating thresholds, to: convey commands to the engine control unit to dynamically change engine operating conditions; and convey signals to the alarm module to present an alert.
- the safety and input/output module is implemented in a single hardware panel, which is one of a plurality of different panels of the engine controller.
- the engine control unit and a human-machine interface are each also one of the plurality of different panels of the engine controller.
- the safety and input/output module is configurable for operating in conjunction with a plurality of different engine sets without requiring any hardware changes to the safety and input/output module.
- the safety and input/output module is operable with a plurality of different engine control units.
- Each engine control unit is configured for controlling one of a plurality of different engine sets and requires hardware specific changes that are unique to the engine set that the engine control unit is configured to control.
- the safety and input/output module comprises its own power up cycle to become operational, which is distinct and different from a power- up cycle of the engine control unit.
- the safety and input/output module is operable to communicate with a human-machine interface, which is a configurable unit configured to operate in conjunction with a plurality of different engines sets.
- the safety and input/output module is physically distinct from a human-machine interface of the engine controller.
- the human-machine interface is configured to visually display engine conditions monitored by the safety and input/output module, and to present alerts when the engine conditions are outside designated operating thresholds.
- the engine, engine controller, and safety and input/output module are deployed in a vehicle, and the system comprises a plurality of human-machine interfaces in the vehicle.
- the human-machine interfaces are configured to concurrently operate and communicate with the safety and input/output module in realtime.
- the safety and input/output module is physically distinct from at least one alarm module implemented external to the engine controller.
- the safety and input/output module is configured to communicate with the alarm module for initiating alarms.
- the safety and input/output module is configured to at least one of, based on information relating to sensed conditions of the engine: override manual user inputs for controlling the engine; engage slowdown procedures of the engine; control the engine into an idle mode; or control an emergency full stop of the engine.
- the safety and input/output module is configured for logging parameter values to a persistent memory upon occurrence of a safety event.
- the safety event comprises when one or more of a plurality of sensed conditions are outside designated operating thresholds for engine operation.
- the safety and input/output module is configured to log parameter values as they exist before the safety event, log parameter values during the safety event, and log parameter values after the safety event.
- different configurable sampling rates are implemented by the safety and input/output module for logging the parameter values before the safety event, during the safety event, and after the safety event.
- the engine controller comprises a safety and input/output module and an engine control unit.
- the engine control unit comprises hardware as well as software and is operable to regulate engine speed of an engine and to control the engine responsive to commands received from the safety and input/output module.
- the safety and input/output module comprises hardware as well as software and is physically distinct from the engine control unit.
- the safety and input/output module is configured to receive information relating to sensed conditions from a plurality of sensors, and, if the sensed conditions are outside designated operating thresholds, convey the commands to the engine control unit to change engine operations.
- the safety and input/output module comprises a single controller having the hardware and software.
- the safety and input/output module is configured to convey the commands to the engine control unit to stop the engine if one or more of the sensed conditions are outside one or more of the designated operating thresholds that are indicative of a designated emergency condition.
- the engine controller further comprises a human- machine interface that is physically distinct from the engine control unit and from the safety and input/output module.
- the human-machine interface is operable to visually display the sensed conditions and to present alerts responsive to the safety and input/output module and/or when the sensed conditions are outside the designated operating thresholds.
- the engine controller is deployed in a marine vessel, and the engine controller comprises a plurality of human-machine interfaces.
- a first one of the plurality of human-machine interfaces is present in a bridge of the marine vessel and a second one of the plurality of human-machine interfaces is present in an engine room of the marine vessel.
- the plurality of human-machine interfaces are configured to concurrently and cooperatively operate, communicate with the engine control unit via the safety and input/output module, and present alerts responsive to the safety and input/output module and/or when the sensed conditions are outside the designated operating thresholds.
- the safety and input/output module is configured to at least one of, based on the information relating to the sensed conditions: override manual user inputs for controlling the engine; communicate with the engine control unit to engage slowdown procedures of the engine; communicate with the engine control unit to control the engine into an idle mode; or communicate with the engine control unit to control an emergency full stop of the engine.
- the engine controller further comprises at least one alarm module that is physically distinct from the engine control unit and from the safety and input/output module.
- the at least one alarm module is configured to present alerts when the sensed conditions are outside the previously established operating thresholds.
- the at least one alarm module is configured to communicate with the engine control unit via the safety and input/output module.
- the safety and input/output module establishes different operating thresholds and conditions for different configurable modes.
- the modes comprise a normal operating mode; a pre-lube operating mode; and an engine start/stop mode, which comprises one or more of an energy saver mode, a low noise mode, a fuel saver mode, or a low exhaust mode.
- Another embodiment relates to a method for providing engine controllers for a plurality of different marine vessels having different engines.
- the method comprises producing a plurality of safety and input/output modules, one for each of the engine controllers of the different marine vessels.
- Each of the safety and input/output modules is configurable for operating in conjunction with the different marine vessels without requiring any hardware changes to the safety and input/output module.
- the safety and input/output modules are configured for dynamic engine protection during operation of the engines of the marine vessels and for communicating signals with components external to the engine controllers.
- the method further comprises identifying a plurality of human-machine interface components, at least one for each of the engine controllers.
- Each of the human-machine interface components is configurable for operating in conjunction with the different marine vessels without requiring any hardware changes to the human-machine interface component.
- the human-machine interface components are operable to visually display conditions of engine parameters monitored by the safety and input/output modules.
- the human-machine interface components are configured to present alerts when the engine parameters are outside designated operating thresholds as determined by the safety and input/output modules.
- the method further comprises identifying a plurality of engine control units, one for each of the engine controllers.
- the engine control units are operable to regulate engine speed and to stop the engines of the different marine vessels in response to one or more sets of emergency conditions as determined by the safety and input/output modules.
- Each of the engine control units is specifically configured for operation with the engine of one of the different marine vessels and requires hardware specific changes that are unique to the engine of said one of the different marine vessels.
- the method further comprises assembling an engine controller for each of the different marine vessels having different engines by operably coupling one of the engine control units with one of the safety and input/output modules and with at least one of the human-machine interface components.
- the method further comprises, for each engine controller, configuring the safety and input/output module of the engine controller to settings of an engine and marine vessel for which the engine controller is to be used.
- the assembled engine control unit, the safety and input/output module, and the at least one human-machine interface component are configured to operate together to control engine speed of the engine, and, based on sensed conditions relative to designated operating thresholds or other parameters: to signal alarms; to override manual user inputs for controlling the engine; to control a slowdown operation of the engine; and to control an emergency full stop of the engine.
- references to "one embodiment” of the present invention are not intended to be interpreted as excluding the existence of additional embodiments that also incorporate the recited features.
- embodiments “comprising,” “including,” or “having” an element or a plurality of elements having a particular property may include additional such elements not having that property.
- certain embodiments may be shown as having like or similar elements, however, this is merely for illustration purposes, and such embodiments need not necessarily have the same elements unless specified in the claims.
- the terms “may” and “may be” indicate a possibility of an occurrence within a set of circumstances; a possession of a specified property, characteristic or function; and/or qualify another verb by expressing one or more of an ability, capability, or possibility associated with the qualified verb. Accordingly, usage of "may” and “may be” indicates that a modified term is apparently appropriate, capable, or suitable for an indicated capacity, function, or usage, while taking into account that in some circumstances the modified term may sometimes not be appropriate, capable, or suitable. For example, in some circumstances an event or capacity can be expected, while in other circumstances the event or capacity cannot occur - this distinction is captured by the terms “may” and “may be.”
Landscapes
- Engineering & Computer Science (AREA)
- Chemical & Material Sciences (AREA)
- Combustion & Propulsion (AREA)
- Mechanical Engineering (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Ocean & Marine Engineering (AREA)
- Microelectronics & Electronic Packaging (AREA)
- Radar, Positioning & Navigation (AREA)
- Remote Sensing (AREA)
- Combined Controls Of Internal Combustion Engines (AREA)
Abstract
L'invention porte sur un module de sécurité et d'entrée/sortie (E/S) (106) d'un dispositif de commande de moteur (101) destiné à un ensemble moteur d'un vaisseau marin qui peut être physiquement distinct d'une unité de commande de moteur (ECU) (102). Le module de sécurité et E/S peut comprendre du matériel en plus de logiciel, de micrologiciel ou d'une combinaison des deux. Le module de sécurité et E/S peut être un contrôleur logique unique ayant une fonctionnalité de sécurité et une fonctionnalité E/S. La fonctionnalité de sécurité peut servir à assurer une protection de moteur dynamique durant un fonctionnement de l'ensemble moteur du vaisseau marin. La fonctionnalité E/S peut servir à envoyer des signaux à des composants externes au dispositif de commande de moteur et à recevoir des signaux provenant de composants (120, 122) externes au dispositif de commande de moteur.
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US36965310P | 2010-07-30 | 2010-07-30 | |
PCT/US2011/045914 WO2012016155A1 (fr) | 2010-07-30 | 2011-07-29 | Module de sécurité et d'entrée/sortie intégré pour système de commande de moteur |
Publications (1)
Publication Number | Publication Date |
---|---|
EP2598740A1 true EP2598740A1 (fr) | 2013-06-05 |
Family
ID=44545905
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP11751984.3A Withdrawn EP2598740A1 (fr) | 2010-07-30 | 2011-07-29 | Module de sécurité et d'entrée/sortie intégré pour système de commande de moteur |
Country Status (3)
Country | Link |
---|---|
EP (1) | EP2598740A1 (fr) |
KR (1) | KR20130054330A (fr) |
WO (1) | WO2012016155A1 (fr) |
Families Citing this family (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103482051B (zh) * | 2013-07-03 | 2016-09-07 | 中船重工远舟(北京)科技有限公司 | 一种船舶主机遥控*** |
US9805524B2 (en) | 2016-03-11 | 2017-10-31 | General Electric Company | Systems and methods for displaying a fault analysis instructions of an engine control subsystem |
CA2970830A1 (fr) * | 2016-06-17 | 2017-12-17 | Tti (Macao Commercial Offshore) Limited | Generateur comportant un mecanisme d'arret pour espace confine |
FR3069573B1 (fr) * | 2017-07-25 | 2019-08-02 | Continental Automotive France | Procede d'analyse du fonctionnement d'un systeme anti-pollution d'un vehicule automobile |
US10899420B2 (en) | 2017-09-19 | 2021-01-26 | Marine Technologies, Llc | Conditional online-based risk advisory system (COBRAS) |
KR102168381B1 (ko) | 2018-06-07 | 2020-10-21 | 세메스 주식회사 | 기판 처리 방법 및 기판 처리 장치 |
CN108825389B (zh) * | 2018-06-29 | 2020-07-03 | 潍柴重机股份有限公司 | 联动控制发动机转速的***及使用该***的控制方法 |
CN109736950A (zh) * | 2018-12-27 | 2019-05-10 | 国营第六一六厂 | 一种适用于396系列柴油机的ut396扩展型机旁控制箱 |
KR102264970B1 (ko) * | 2019-10-31 | 2021-06-15 | 에이치에스디엔진 주식회사 | 센서 데이터 통신 시스템 |
CN114455051B (zh) * | 2022-01-06 | 2023-07-25 | 珠海云洲智能科技股份有限公司 | 一种无人驾驶设备的控制方法、控制装置及无人驾驶设备 |
KR102674552B1 (ko) * | 2022-08-23 | 2024-06-13 | 에이치디한국조선해양 주식회사 | 선박의 전기 추진 제어 시스템 |
KR102675460B1 (ko) * | 2023-10-27 | 2024-06-17 | 주식회사 아임토리 | 선박의 엔진 실린더 온도 모니터링 및 인공지능 예측 방법 및 장치 |
Family Cites Families (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH04260834A (ja) * | 1991-02-14 | 1992-09-16 | Nissan Motor Co Ltd | 車両システムの故障判定装置 |
DE19640432C2 (de) * | 1996-09-30 | 2002-09-26 | Siemens Ag | Verfahren zum Überwachen einer Brennkraftmaschine |
WO2004033879A1 (fr) * | 2002-10-10 | 2004-04-22 | Detroit Diesel Corporation | Systeme redondant d'arret moteur |
EP2267292B1 (fr) * | 2009-06-24 | 2017-02-01 | Delphi International Operations Luxembourg S.à r.l. | Système de commande de moteur |
-
2011
- 2011-07-29 KR KR1020137002483A patent/KR20130054330A/ko not_active Application Discontinuation
- 2011-07-29 WO PCT/US2011/045914 patent/WO2012016155A1/fr active Application Filing
- 2011-07-29 EP EP11751984.3A patent/EP2598740A1/fr not_active Withdrawn
Non-Patent Citations (1)
Title |
---|
See references of WO2012016155A1 * |
Also Published As
Publication number | Publication date |
---|---|
WO2012016155A1 (fr) | 2012-02-02 |
KR20130054330A (ko) | 2013-05-24 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US9726108B2 (en) | Integrated safety and input/output module for an engine control system | |
WO2012016155A1 (fr) | Module de sécurité et d'entrée/sortie intégré pour système de commande de moteur | |
RU2710664C2 (ru) | Система, способ и компьютерная программа для интегрированного интерфейса "человек-машина" двигателя-генератора | |
EP3239884B1 (fr) | Détection de menace de niveau de domaine pour système de commande d'actifs industriels | |
US7072761B2 (en) | Redundant engine shutdown system | |
US8072343B2 (en) | Local emergency isolation valve controller with diagnostic testing and trouble indicator | |
RU2608953C2 (ru) | Устройство и способ управления двигателем внутреннего сгорания | |
CN1969240A (zh) | 过程设备验证 | |
CN103628991A (zh) | 一种船用柴油-lng双燃料发动机管理***检测装置及测试方法 | |
CN209992827U (zh) | 一种核电应急柴油发电机组半物理仿真验证*** | |
US10107718B2 (en) | Apparatus for capturing data related to an event indicating abnormal function of a machine | |
CN201266318Y (zh) | 发电机组控制箱 | |
RU2660216C1 (ru) | Система автоматического управления газоперекачивающим агрегатом "квант-р" | |
CN117873040A (zh) | 工控主板的远程监测与故障诊断方法以及相关设备 | |
CN112596374A (zh) | 电子调速器的调节性能优化及状态监测***、方法 | |
KR100826990B1 (ko) | 선박용 발전기엔진의 제어시스템 | |
CN109441649B (zh) | 数字式调速控制器及其控制发动机工作的方法 | |
US11958622B2 (en) | Protection functions | |
CN116235171A (zh) | 用于检测对机器控制器的网络攻击的方法和*** | |
EP0573186B1 (fr) | Dispositif de commande pour un système de turbine à gaz et méthode de commande pour celui-ci | |
CN111580504A (zh) | 一种海底电缆油泵站控制***的仿真测试平台 | |
AU2012362901B9 (en) | System, method, and computer program for an integrated human-machine interface (HMI) of an engine-generator | |
JP2013087775A (ja) | ガスタービン監視システム | |
CN112596551B (zh) | 电子调速器的功能验证方法及*** | |
Klaus et al. | Safety algorithms for excavator engine control |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20130228 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
DAX | Request for extension of the european patent (deleted) | ||
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN |
|
18D | Application deemed to be withdrawn |
Effective date: 20170201 |