Fail-operational internal combustion engine systems and methods

• US 7,040,295 B2
• Filed: 08/09/2005
• Issued: 05/09/2006
• Est. Priority Date: 01/22/2003
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Karem, Abraham E.
• Primary Examiner(s): Gimie, Mahmoud
• Application Number:
  US11/200,561
• Publication Number:
  US 20050268890A1
• Time in Patent Office: 273 Days
• Field of Search: 123/481, 123/DIG.1, 123/DIG.8, 123/198.F, 123/DIG.6, 123/479, 123/198.DB, 123575-579, 607/16, 607/19, 607/20
• US Class Current: 123/481
• CPC Class Codes: F02B 75/22 with cylinders in V, fan, or star arrangement
• CPC Class Codes: F02D 2041/227 Limping Home, i.e. taking specific engine control measures at abnormal conditions
• CPC Class Codes: F02D 41/0082 per groups or banks F02D41/0087 takes precedence
• CPC Class Codes: F02D 41/0087 Selective cylinder activation, i.e. partial cylinder operation deceleration cut-off F02D41/123
• CPC Class Codes: F02D 41/22 Safety or indicating devices for abnormal conditions in air/fuel ratio feedback systems F02D41/1495, in electric control linkage F02D11/107, in purge control systems F02M25/0809
• CPC Class Codes: F02D 41/221 relating to the failure of actuators or electrically driven elements
• CPC Class Codes: F02D 41/266 the computer being backed-up or assisted by another circuit, e.g. analogue
• CPC Class Codes: Y02T 10/40 Engine management systems
• CPC Class Codes: Y10S 123/08 Multiple engine units

Abstract

Systems and methods are provided for internal combustion engines. For example, in accordance with an embodiment of the present invention, an engine system is provided that is able to operate at partial power after a single, or several, failures of any of several subsystems.

Claims

1. A method of operating a single engine, the method comprising:

providing an output shaft and at least a first and a second power producing portion of the single engine;

operating the first power producing portion to drive the output shaft;

operating the second power producing portion to drive the output shaft;

providing fuel from a first fuel system having a first fuel source to the first power producing portion; and

providing fuel from a second fuel system having a second fuel source separate from the first fuel source to the second power producing portion, wherein the single engine is operational when one of the first and second fuel systems does not provide fuel to the corresponding one of the first and second power producing portions of the single engine.

2. The method of claim 1, wherein the first fuel system does not provide fuel to the second power producing portion, and the second fuel system does not provide fuel to the first power producing portion.

3. The method of claim 1, further comprising:

providing a first set of systems serving the first power producing portion; and

providing a second set of systems serving the second power producing portion, wherein the second set of systems is separate from the first set of systems and comprises systems of a same type as the first set of systems.

4. The method of claim 3, wherein the first set of systems does not serve the second power producing portion and wherein the second set of systems does not serve the first power producing portion.

5. The method of claim 3, wherein the first and second set of systems each comprise at least one of an air handling system, a sensor system, a cooling system, a lubrication system, an ignition system, and a control system.

6. The method of claim 5, wherein the air handling system comprises at least one of a turbocharger, a supercharger, an air filter, and an air manifold, and wherein the sensor system comprises at least one of a temperature sensor, a pressure sensor, a position sensor, and a flow sensor, and wherein the cooling system comprises at least one of a cooler, a radiator, a pump, and cooling lines.

7. The method of claim 5, wherein the control system comprises at least one of a full authority digital engine control and a digital computer.

8. The method of claim 3, wherein the single engine is operational when one of the first and second fuel systems does not provide fuel to the single engine, and at least one system of the first and second set of systems is fully or partially inoperative.

9. The method of claim 3, further comprising controlling the operation of at least one of the first and second fuel systems and at least one system of at least one of the first and second set of systems.

10. The method of claim 1, further comprising:

detecting a malfunction associated with the first or second power producing portion; and

reducing a power provided by the first or second power producing portion associated with the malfunction.

11. The method of claim 1, further comprising:

shutting down the first power producing portion;

monitoring the power provided to the output shaft;

restarting the first power producing portion;

shutting down the second power producing portion;

monitoring the power provided to the output shaft; and

determining if a malfunction is associated with the first or second power producing portions based on the monitoring operations.

12. A single engine system comprising:

means for providing power from a first power producing portion of the single engine system;

means for providing power from a second power producing portion of the single engine system;

means for providing fuel to the first power producing portion from a first fuel source; and

means for providing fuel to the second power producing portion from a second fuel source separate from the first fuel source, wherein the single engine system is operational when one of the means for providing fuel does not provide fuel to the corresponding one of the first and second power producing portions of the single engine system.

13. The single engine system of claim 12, wherein the means for providing fuel to the first power producing portion does not provide fuel to the second power producing portion, and the means for providing fuel to the second power producing portion does not provide fuel to the first power producing portion.

14. The single engine system of claim 12, further comprising:

means for providing a first set of systems serving the first power producing portion; and

means for providing a second set of systems serving the second power producing portion, wherein the second set of systems is separate from the first set of systems and comprises systems of a same type as the first set of systems.

15. The single engine system of claim 12, wherein the single engine system is operational when one of the means for providing fuel does not provide fuel to the single engine system, and at least one system of the first and second set of systems is fully or partially inoperative.

16. The single engine system of claim 12, further comprising means for monitoring and controlling the first power producing portion and the second power producing portion of the single engine system.

17. The single engine system of claim 16, wherein the monitoring and controlling means shuts down or reduces power of at least one of the first and second power producing portions in response to a detected malfunction.

18. A method of improving the reliability of an engine, the method comprising:

providing a single engine having at least a first and a second power producing portion producing power through an output shaft of the single engine;

providing fuel from a first fuel system having a first fuel source to the first power producing portion;

providing fuel to the second power producing portion from a second fuel system having a second fuel source separate from the first fuel source;

providing a first set of systems serving the first power producing portion; and

providing a second set of systems serving the second power producing portion, wherein the second set of systems is separate from the first set of systems and comprises systems of a same type as the first set of systems.

19. The method of claim 18, wherein the first set of systems does not serve the second power producing portion, and the second set of systems does not serve the first power producing portion, and wherein the first fuel system does not provide fuel to the second power producing portion, and the second fuel system does not provide fuel to the first power producing portion.

20. The method of claim 18, further comprising:

monitoring to detect a malfunction associated with the first or second power producing portion; and

controlling the first or second power producing portion associated with the malfunction to shut down or reduce its operation.