Monitoring the functional reliability of an internal combustion engine

• US 8,392,046 B2
• Filed: 12/28/2005
• Issued: 03/05/2013
• Est. Priority Date: 01/27/2005
• Status: Active Grant

• Current Assignee: Vitesco Technologies GmbH (Continental AG)
• Original Assignee: Continental Automotive GmbH (Continental AG)
• Inventors: Geyer, Dirk, Kick, Marco, Kraus, Markus
• Primary Examiner(s): Nguyen, Cuong H
• Application Number:
  US11/795,465
• Publication Number:
  US 20080140279A1
• Time in Patent Office: 2,624 Days
• Field of Search: 701/29, 701/31, 701 316- 319, 701 327- 328, 701 331- 332, 701/34.4, 701/29.1, 701/36, 701/84, 702/185, 702182-183, 702/178, 714/48, 714/47.1, 714/51
• US Class Current: 701/29.1
• CPC Class Codes: F02D 41/22 Safety or indicating devices for abnormal conditions in air/fuel ratio feedback systems F02D41/1495, in electric control linkage F02D11/107, in purge control systems F02M25/0809
• CPC Class Codes: F02D 41/266 the computer being backed-up or assisted by another circuit, e.g. analogue

Abstract

An internal combustion engine is controlled by a plurality of partially reliability-relevant functional units. Every reliability-relevant functional unit comprises at least one functional module and at least one monitoring module. The monitoring module is separate from the functional module associated therewith and monitors the functioning of the functional module. The control device also comprises a higher order monitoring functional group. The monitoring module has an entry point for communication with the higher order monitoring functional group. When an error is detected, the monitoring module signals the error to the higher order monitoring functional group using the entry point.

Claims

1. A control device for an internal combustion engine system, comprising:

a plurality of reliability-relevant functional units,

wherein each reliability-relevant functional unit has;

at least one functional module, and

at least one monitoring module associated with the at least one functional module,

wherein each at least one functional module is separate from the associated at least one monitoring module, and

wherein the at least one monitoring module is configured to monitor the at least one functional module, and each of the reliability-relevant functional units is computed on stand-alone hardware components;

a higher-order monitoring functional group;

wherein a particular one of the at least one monitoring module is configured to initiate an error processing responsive to detecting modules if an error in the at least one functional module associated with the particular monitoring module, wherein the error processing includes the particular one of the at least one monitoring module communicating with the higher-order monitoring functional group.

2. The control device as claimed in claim 1, wherein a transmission path is between every monitoring module and the higher-order monitoring functional group.

3. The control device as claimed in claim 2, wherein data is transmitted between the stand-alone monitoring module and the higher-order monitoring functional group, wherein the data is selected from the group consisting of an error information, a functional command, and a return signal.

4. The control device as claimed in claim 2, wherein a plurality of transmission paths form a transmission network.

5. The control device as claimed in claim 2, wherein the transmission path extends between a transmitter and a receiver, wherein the transmitter is related to a content of the transmission and the receiver is related to a plausibility check of the transmission path.

6. The control device as claimed in claim 5, wherein the transmitter is a stand-alone monitoring module, and wherein the receiver is the higher-order monitoring functional group.

7. The control device as claimed in claim 1, wherein each monitoring module has a single microcontroller.

8. The control device as claimed in claim 1, wherein the higher-order monitoring functional group is configured for error processing.

9. The control device as claimed in claim 1, wherein at least two reliability relevant functional modules and the monitoring module assigned to the at least two reliability relevant functional modules are each computed on a stand-alone hardware component.

10. The control device as claimed in claim 1, wherein each functional module has a single microcontroller.