Electronic control system for a motive unit

• US 4,653,003 A
• Filed: 04/13/1984
• Issued: 03/24/1987
• Est. Priority Date: 04/15/1983
• Status: Expired due to Fees

• Current Assignee: RENK AG (RENK GmbH)
• Original Assignee: Zahnraderfabrik RENK AG
• Inventors: Kirstein, Gerhard
• Primary Examiner(s): Chin, Gary
• Application Number:
  US06/600,039
• Time in Patent Office: 1,075 Days
• Field of Search: 364/424, 364/424.1, 364/431.04, 364/431.11, 364/551, 371/16, 371/20, 340/52 F, 73/116, 73/117.3, 73/118
• US Class Current: 701/29
• CPC Class Codes: F16H 2061/1208 with diagnostic check cycles; Monitoring of failures
• CPC Class Codes: F16H 2061/1232 Bringing the control into a predefined state, e.g. giving priority to particular actuators or gear ratios
• CPC Class Codes: F16H 2061/1268 Electric parts of the controller, e.g. a defect solenoid, wiring or microprocessor
• CPC Class Codes: F16H 2061/1284 the failing part is a sensor
• CPC Class Codes: F16H 2300/14 Selecting a state of operation, e.g. depending on two wheel or four wheel drive mode
• CPC Class Codes: F16H 61/12 Detecting malfunction or potential malfunction, e.g. fail safe in control of hydrostatic gearing F16H61/4192; Circumventing or fixing failures
• CPC Class Codes: G01D 21/00 Measuring or testing not otherwise provided for
• CPC Class Codes: G01R 31/007 using microprocessors or computers
• CPC Class Codes: G06F 11/26 Functional testing

Abstract

Components of a motive unit to be checked are connected to a control system that includes a microcomputer through branch lines. One branch line serves to provide trigger signals and test the components in the normal operating state when the parts are rotating (i.e. in the dynamic state). The other branch serves to monitor the same components for malfunctions in the stopped condition when the parts are not moving (i.e. in the static state). The other branch contains a switching network, a current/voltage source controlled by the microcomputer, and an analog-to-digital converter. There is further provided a priority control circuit over which program interrupt requests or requests for changing to an emergency program are transmitted. In the event a malfunction causes an interrupt request to be generated, the interrupt request from the priority control circuit is transmitted immediately or with a delay depending upon the priority assigned to the particular event malfunction.

Claims

1. An electronic control system for a motive unit such as a vehicle having rotational components and sensing electrical components, said electrical components including at least one pulse generator for detecting rotation of a respective at least one of said rotating components, said electronic control system comprising:

means for supplying an operative voltage;

a microcomputer; and

a protective unit connected between components of the motive unit and the microcomputer, said protective unit comprising

(a) a first means, which includes said at least one pulse generator and which is actuated upon the supplying of said operating voltage, for detecting when the rotating components are stopped and for providing information indicating a stop to said microcomputer,

(b) a second means for obtaining information from the electrical components about their normal and proper function or malfunction during the time the rotating components are stopped and for providing said information to said microcomputer, whereupon said microcomputer in response to said information executes either an emergency program for the emergency control of the motive unit or an operating program for the normal control of the motive unit;

(c) a third means for obtaining information from the electrical components about their normal and proper function or malfunction during the time the electrical components are sensing and the rotating components are rotating and said microcomputer is under control of an operating program, said third means also for causing an interrupt to be sent to the microcomputer which interrupts said operating program when a malfunction of at least one of the electrical components occurs and initiates an emergency program;

(d) a fourth means which together with said microcomputer is supplied with said operating voltage upon the detection of the rotating components being stopped whereby said fourth means is first activated by said microcomputer for performing a system self-test for determining the presence of malfunctions within said protective unit before said microcomputer submits a query requesting specific data from the electrical components indicating their proper function or malfunction;

(e) a priority control circuit connected between the electrical components and said microcomputer and which causes interrupts in the currently running program of said microcomputer, said interrupts having a priority and including interrupts caused by signal values of the electrical components differing from a predetermined range, and an interrupt caused by a program execution fault in the program currently running on the microcomputer, said interrupts interrupting the microcomputer immediately or with a delay depending upon the interrupt priority; and

(f) a first branch circuit that includes a programmable timer module connected to every said at least one pulse generator and which detects pulses from each at least one pulse generator that corresponds to digital speed; and

a second branch circuit having an output signal indicative of speed that includes a respective frequency/voltage converter whose input is connected to every said at least one pulse generator for receiving speed signals from each said at least one pulse generator, a respective Schmitt trigger connected at the respective input thereof to every said frequency/voltage converter and a respective input/output unit connected between every output of a said respective Schmitt trigger and said microcomputer;

said microcomputer being programmed to compare the signals of said first and second branch circuits and if there are variations therebetween to switch to an emergency program.

2. An electronic control system as claimed in claim 1 and further comprising a current/voltage source;

and an analog-to-digital converter; and

wherein said protective unit comprises a first connecting means for connecting the electrical components to said microcomputer for normal operation and for checking of malfunctions of said electrical components when said rotating parts are rotating, and

a second connecting means for connecting the electrical components to said microcomputer for providing specific data thereto when said rotating parts are stationary, said second connecting means comprising at least one switch controlled by said microcomputer, said switch for connecting said current/voltage source to the electrical components, said microcomputer determining in accordance with the type of electrical component to be tested whether said current/voltage source supplies thereto a constant current or a constant voltage; and

wherein the analog side of said analog-to-digital converter is connected between said current/voltage source and said switch and the digital side of said converter is connected to said microcomputer so that the value of the digital output from said converter is proportional to the electrical resistance of the electrical component to be checked.

3. An electronic control system as claimed in claim 2 wherein said first connecting means includes at least one switch operatively connected to said switch of said second connecting means such that said switch of said first connecting means is opened and closed alternately wherever said switch of said second connecting means is alternately closed and opened, respectively.

4. An electronic control system as claimed in claim 3 wherein said at least one switch is an analog switch.

5. An electronic control system as claimed in claim 2 wherein said at least one switch is an analog switch.

6. An electronic control system as claimed in claim 1 wherein said motive unit further includes a transmission, and further including an electrical safety circuit controlled by said microcomputer and which interrupts the power supplied to the electrical components, the electrical components being transmission control means, and the microcomputer causing said power interruption upon the detection of improper conditions in said transmission.

7. An electronic control system as claimed in claim 1 wherein said at least one pulse generator is connected to said priority control circuit through a retriggerable monostable trigger circuit.

8. An electronic control system as claimed in claim 7 wherein said microcomputer is also connected to said priority control circuit through a retriggerable monostable trigger circuit.

9. An electronic control system as claimed in claim 1 wherein said microcomputer is also connected to said priority control circuit through a retriggerable monostable trigger circuit.