Ignition limp home circuit for electronic engine control systems
First Claim
1. In an internal combustion engine system having an intake system, an exhaust system, an engine block, a plurality of engine cylinders disposed in said engine block, a piston operatively disposed for reciprocal movement within each of said plurality of cylinders, means for controllably supplying fuel to a selected one or more of said plurality of cylinders, means responsive to ignition control pulses for controlling the ignition of said fuel supplied to said selected one or more of said plurality of cylinders, sensor means for detecting when each of said pistons has attained a predetermined reference position within its corresponding cylinder and for generating an engine position pulse indicative thereof, said engine position pulses being representative of engine speed or period, a computerbased engine control system including computer means, memory means operatively associated with said computer means, program means stored within said memory means for implementing at least one control law, additional sensor means associated with said engine for measuring a plurality of engine-operating parameters and generating digital words indicative of said measured values and usable by said computer means, at least one multi-dimensional control surface to compute a modifier value functionally related to the actual measured value of said engine-operating parameter represented by said digital word and for implementing said at least one control law utilizing said computed modifier value for generating ignition control commands, means responsive to said ignition control commands for normally generating computer-calculated ignition control pulses, said means for controlling the ignition of said fuel supplied to a selected one or more of said plurality of cylinders being normally responsive to said computer-calculated ignition control pulses for controlling the time and duration of ignition in said selected one or more of said plurality of cylinders, the improvement comprising means for monitoring the normal operation of said computer means and said program means for detecting a malfunction in the operation thereof and generating a "fail" signal whenever the reliability of one or more of said computer-generated ignition control commands could be unreliable, means responsive to said engine position pulses for generating secondary ignition control pulses, and gating means responsive to the generation of said "fail" signal for terminating the supply of said normally-generated computer-calculated ignition control pulses to said ignition control means and supplying instead said secondary fuel control pulses to said ignition control means for controllably operating same so that the operation of said internal combustion engine, while degraded, is not terminated or controlled by unreliable or unsafe system commands, said computer means being responsive to the normal execution of said program means for generating a predetermined sequence of programmably spaced "operation OK" signals indicating that the operation of said computer means and said program means is normal and wherein said means for monitoring the normal operation, detecting a malfunction and generating said "fail" signal includes first counter means for counting engine position pulses, said first counter means being reset by the arrival of each subsequent "operation OK" signal for clearing and resetting said first counter means but being responsive to the attainment of a predetermined failure-indicating count representative of a failure of said first counter means to receive one of said resetting "operation OK" signals during the counting of a predetermined number of said engine position pulses for generating a "fail once" signal, means responsive to said "fail once" signal for generating a "master reset" signal for resetting said computer means, second counter means responsive to said "master reset" signal for initiating a second count, said second counter means counting out a predetermined test interval, said second counter means being responsive to the resumption of normal system operating as indicated by the resumption of the generation of said "operation OK" signals resetting said first counter means and preventing said predetermined failure-indicating count from being attained during the duration of said test interval, and means responsive to said second counter means completing said test count interval without said first counter means again attaining said predetermined failure-indicating count indicating that said "master reset" operation was successful and for erasing all memory of the first failure but responsive to a second attainment of said predetermined failure-indicating count in said first counter means during said test interval of said second counter means for indicating the occurrence of two successive failures and generating said "fail" signal to indicate the unreliability of said computer-calculated ignition control pulses.
1 Assignment
0 Petitions
Accused Products
Abstract
A method and apparatus for controlling the various functions of an internal combustion engine using a program controlled microprocessor having a memory preprogrammed with various control laws and associated control schedules receives information concerning one or more engine-operating parameters such as manifold absolute pressure, throttle position, engine coolant temperature, air temperature, engine speed or period and the like. These parameters are measured and their value or status is supplied to input circuits for signal conditioning and conversion into digital words usable by the microprocessor. The microprocessor system computes a digital word indicative of a particular computer-commanded engine control operation and output circuitry responds to predetermined computer-generated commands and to the computed digital words for converting it into a corresponding pulse-width control signal for controlling such engine operations as fuel-injection, ignition timing, proportional and/or on-off EGR control, and the like. The engine control system further includes "limp home" circuitry for enabling the engine to function for a predetermined time even after the microprocessor fails to enable the vehicle to get to a place of repair or the like.
36 Citations
4 Claims
-
1. In an internal combustion engine system having an intake system, an exhaust system, an engine block, a plurality of engine cylinders disposed in said engine block, a piston operatively disposed for reciprocal movement within each of said plurality of cylinders, means for controllably supplying fuel to a selected one or more of said plurality of cylinders, means responsive to ignition control pulses for controlling the ignition of said fuel supplied to said selected one or more of said plurality of cylinders, sensor means for detecting when each of said pistons has attained a predetermined reference position within its corresponding cylinder and for generating an engine position pulse indicative thereof, said engine position pulses being representative of engine speed or period, a computerbased engine control system including computer means, memory means operatively associated with said computer means, program means stored within said memory means for implementing at least one control law, additional sensor means associated with said engine for measuring a plurality of engine-operating parameters and generating digital words indicative of said measured values and usable by said computer means, at least one multi-dimensional control surface to compute a modifier value functionally related to the actual measured value of said engine-operating parameter represented by said digital word and for implementing said at least one control law utilizing said computed modifier value for generating ignition control commands, means responsive to said ignition control commands for normally generating computer-calculated ignition control pulses, said means for controlling the ignition of said fuel supplied to a selected one or more of said plurality of cylinders being normally responsive to said computer-calculated ignition control pulses for controlling the time and duration of ignition in said selected one or more of said plurality of cylinders, the improvement comprising means for monitoring the normal operation of said computer means and said program means for detecting a malfunction in the operation thereof and generating a "fail" signal whenever the reliability of one or more of said computer-generated ignition control commands could be unreliable, means responsive to said engine position pulses for generating secondary ignition control pulses, and gating means responsive to the generation of said "fail" signal for terminating the supply of said normally-generated computer-calculated ignition control pulses to said ignition control means and supplying instead said secondary fuel control pulses to said ignition control means for controllably operating same so that the operation of said internal combustion engine, while degraded, is not terminated or controlled by unreliable or unsafe system commands, said computer means being responsive to the normal execution of said program means for generating a predetermined sequence of programmably spaced "operation OK" signals indicating that the operation of said computer means and said program means is normal and wherein said means for monitoring the normal operation, detecting a malfunction and generating said "fail" signal includes first counter means for counting engine position pulses, said first counter means being reset by the arrival of each subsequent "operation OK" signal for clearing and resetting said first counter means but being responsive to the attainment of a predetermined failure-indicating count representative of a failure of said first counter means to receive one of said resetting "operation OK" signals during the counting of a predetermined number of said engine position pulses for generating a "fail once" signal, means responsive to said "fail once" signal for generating a "master reset" signal for resetting said computer means, second counter means responsive to said "master reset" signal for initiating a second count, said second counter means counting out a predetermined test interval, said second counter means being responsive to the resumption of normal system operating as indicated by the resumption of the generation of said "operation OK" signals resetting said first counter means and preventing said predetermined failure-indicating count from being attained during the duration of said test interval, and means responsive to said second counter means completing said test count interval without said first counter means again attaining said predetermined failure-indicating count indicating that said "master reset" operation was successful and for erasing all memory of the first failure but responsive to a second attainment of said predetermined failure-indicating count in said first counter means during said test interval of said second counter means for indicating the occurrence of two successive failures and generating said "fail" signal to indicate the unreliability of said computer-calculated ignition control pulses.
- 2. An ignition limp home circuit for use in an electrically controlled internal combustion engine system wherein the ignition is normally controlled by an ignition control signal generated by the electrical control means of said internal combustion engine system, means for monitoring the normal operation and generation of said ignition control signals and generating a GO signal if normal operation is detected, means for monitoring a predetermined reference position in each of said plurality of cylinders and generating a sequence of periodic engine position pulses in response thereto, first counter means for counting said engine position pulses and generating a "first fail" signal whenever a predetermined maximum number of said engine position pulses are counted, means responsive to said GO signal for resetting said first counter means so that said "first fail" signal is never generated since said maximum number of engine position pulses are never counted unless normal system operation is disrupted to prevent the normal generation of said GO signals, means responsive to said "first fail" signal for generating a master reset signal for reinitializing the operation of said electrical control means in an attempt to restore the normal operation of said system, second counter means for counting out a predetermined test time interval means responsive to the generation of said master reset signal indicating the detection of a first failure for enabling said second counter means to begin counting said test time interval such that if said master reset signal was effective for storing normal system operation such tha said first counter means will be continually reset before it can count said predetermined number of engine position pulses to prevent the generation of a second failure signal during said test time interval thereby enabling said second counter means to erase all memory of said first failure, but if said master reset signal fails to restore normal operation and said first counter means counts said predetermined number of engine position pulses without being reset by one of said GO signals, indicating that a second subsequent failure has occurred, means responsive to the detection of two successive failures in spite of said electronic control means being re-initialized by said master reset signal for generating a FAIL signal, means responsive to said FAIL signal for converting said engine position pulses into a sequence of periodic "limp home" ignition control pulses, gating means normally responsive to the absence of said FAIL signal for transmitting said normally-generated ignition control pulses to said ignition control means for operating same and responsive to the presence of said FAIL signal for blocking the transmission of said normally-generated ignition control pulses and transmitting said "limp home" ignition control pulses to said ignition control means instead to enable said ignition control means to operate sufficiently to get the vehicle to a repair center but poorly enough so that the driver of said vehicle knows that repairs are in order.
Specification