Redundant engine shutdown system

• US 7,072,761 B2
• Filed: 10/10/2002
• Issued: 07/04/2006
• Est. Priority Date: 10/10/2002
• Status: Expired due to Fees

• Current Assignee: Detroit Diesel Corporation (Daimler Truck Holding AG)
• Original Assignee: Detroit Diesel Corporation (Daimler Truck Holding AG)
• Inventors: Ritter, Curtis P., Hawkins, Jeffery S.
• Primary Examiner(s): Vo, Hieu T.
• Application Number:
  US10/526,345
• Publication Number:
  US 20060015244A1
• Time in Patent Office: 1,363 Days
• Field of Search: 701/112, 701/114, 701/102, 701/115, 123/198.D, 123/179.15
• US Class Current: 701/112
• CPC Class Codes: F02D 17/04 rendering engines inoperative or idling, e.g. caused by abnormal conditions dependent on lubricating conditions F01M1/22; dependent on cooling F01P5/14
• CPC Class Codes: F02D 2400/08 Redundant elements, e.g. two sensors for measuring the same parameter
• CPC Class Codes: F02D 41/22 Safety or indicating devices for abnormal conditions in air/fuel ratio feedback systems F02D41/1495, in electric control linkage F02D11/107, in purge control systems F02M25/0809
• CPC Class Codes: F02D 41/266 the computer being backed-up or assisted by another circuit, e.g. analogue

Abstract

An engine shutdown system is provided that includes an engine control module (ECM) (12) having sensors (20, 22, 24, 26, 28, 30, 34, 36) that can activate an engine shutdown sequence. A set of redundant sensors (20′, 22′, 24′, 26′, 28′, 30′, 32′, 34′, 36′) and a redundant engine control module (RECM) (14) can also activate an engine shutdown sequence independent of the ECM. Engine operating parameters are monitored by sensors to determine if one of the engine parameters deviates from an acceptable level. If the engine control determines that a parameter has exceeded a predetermined level, an engine shutdown signal may be generated by either the ECM or RECM that may cut off the fuel supply, interrupt an ignition circuit, or activate external engine shutdown devices and may also activate alarm and message panels. A redundant engine shutdown system is also provided to disable the primary engine control unit.

Claims

1. An engine control system and engine, in combination, comprising:

at least one engine electronic control module that controls engine operation in normal operating conditions in accordance with software and includes calibrations for engine control, the engine module having a primary shut down system programmed to shut down the engine if one or more of a plurality of engine operation sensors deviates from an acceptable level; and

at least one shut down system electronic control module that is programmed to shut down the engine if one or more of the plurality of engine operation sensors deviates from the acceptable level.

2. The engine control system of claim 1 wherein the engine and shut down system electronic control modules are structurally identical but are programmed differently so that the engine module provides full engine control functions including the software for engine shut down and the shut down system module has software to provide engine shut down.

3. The engine control system of claim 1 wherein the engine and shut down system electronic control modules are both programmed to provide full engine control functions including the software for engine shut down so that the shut down system electronic control module can be used in place of the engine electronic control module.

4. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules monitor a coolant temperature to determine if it is above a threshold level.

5. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules monitor an oil temperature to determine if it is above a threshold level.

6. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules establish a value corresponding to an exhaust temperature to determine if it is above a threshold level.

7. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules monitor engine vibration to determine if it is above a threshold.

8. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules establish a value corresponding to a turbocharger compressor outlet temperature to determine if it is above a threshold.

9. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules monitor an oil pressure to determine if it is above a threshold.

10. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules monitor a coolant level to determine if it is below a threshold.

11. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules monitor an engine oil level to determine if it is below a threshold.

12. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules monitor an engine RPM value to determine if it is above a threshold.

13. The engine control system of claim 1 wherein both the engine and shut down system electronic control modules monitor an intercooler temperature to determine if it is above a threshold.

14. The engine control system of claim 1 wherein the electronic control modules monitor a gas detection sensor for sensing the presence of potentially dangerous gases in the air around the engine.

15. The engine control system of claim 1 wherein the electronic control modules monitor a transmission temperature indicating system.

16. The engine control system of claim 1 wherein if any of the engine operation sensors indicates a deviation from the acceptable level and the primary shut down device fails to shut down the engine, the shut down system module will trigger an external shut down system.

17. The engine control system of claim 16 wherein the external shut down system is a Halon injection system.

18. The engine control system of claim 16 wherein the external shut down system is an air shut off valve.

19. The engine control system of claim 1 wherein if any of the engine operation sensors indicates a deviation from the acceptable level and the primary shut down system fails to shut down the engine, the shut down system will activate an alarm.

20. The engine control system of claim 1 wherein if any of the engine operation sensors indicates a deviation rom the acceptable level and the primary shut down system fails to shut down the engine, the redundant shut down system will send a shut down command to the engine electronic control module by a digital communication link.