Controller method, apparatus and article suitable for electric drive
First Claim
1. A control system to control an electric drive, the control system comprising:
- a main controller operable to execute instructions including the computation of a value based on at least one parameter; and
a monitoring module operable to provide queries from time-to-time to the main controller, operable to evaluate an accuracy of an answer to a query returned to the monitoring module by the main controller, and operable to execute a protective state entry procedure in response to a determination that a number of answers returned by the main controller that are determined to be incorrect exceeds a threshold value.
6 Assignments
0 Petitions
Accused Products
Abstract
A control system, method and article allows a monitoring module to monitor operation of a main controller in an electric drive, by providing questions and evaluating the accuracy and/or timeliness of responses from the main controller. Upon detection of an excessive number of incorrect or late responses, the monitoring module can shutdown operation, and may provide an alternative communications path, thereby preventing corrupt data from reaching a vehicle network, while providing communications for diagnostic and recovery such as by provision of new software or firmware instructions. The main controller may monitor the operation of the monitoring module, taking appropriate action if a fault is detected. Disabling a supply of power to a traction motor may be based on current operating conditions, such as speed.
144 Citations
19 Claims
-
1. A control system to control an electric drive, the control system comprising:
-
a main controller operable to execute instructions including the computation of a value based on at least one parameter; and
a monitoring module operable to provide queries from time-to-time to the main controller, operable to evaluate an accuracy of an answer to a query returned to the monitoring module by the main controller, and operable to execute a protective state entry procedure in response to a determination that a number of answers returned by the main controller that are determined to be incorrect exceeds a threshold value. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A control system to control an electric drive, comprising:
-
a main controller operable to execute instructions including the computation of a value based on at least one parameter; and
a monitoring module operable to provide queries from time-to-time to the main controller, to evaluate an accuracy of an answer to the query returned to the monitoring module by the main controller, and to enter a protective state in response to a determination that a number of answers returned by the main controller that are determined to be incorrect exceeds a threshold value, wherein the main controller is further operable to, from time-to-time provide an intentionally incorrect answer to a query from the monitoring module and to evaluate an operation of the monitoring module based on a handling of the intentionally incorrect answer by the monitoring module. - View Dependent Claims (10, 11)
-
-
12. A control system to control an electric drive, comprising:
-
a main controller operable to execute instructions including the computation of a value based on at least one parameter;
a communications subsystem selectively operable to provide a first communications path between the main controller and a vehicle network in a first state, and a second communications path between the main controller and an interface suitable for downloading new instructions to the main controller in a second state; and
a monitoring module operable to provide queries from time-to-time to the main controller, to evaluate an accuracy of an answer to the query returned to the monitoring module by the main controller, and to cause the communications system to enter the second state from the first state in response to a determination of an existence of a fault condition in an operation of the main controller. - View Dependent Claims (13, 14)
-
-
15. A control system to control an electric drive, comprising:
-
a main controller operable to execute instructions including the computation of a value based on at least one parameter; and
a fault logic module operable to determine an appropriate procedure for discontinuing a supply of electrical power to a traction motor by a power converter based on a speed of the traction motor and/or a fault history. - View Dependent Claims (16, 17, 18, 19)
-
Specification