Multiple redundant control system

• US 8,504,178 B2
• Filed: 02/23/2010
• Issued: 08/06/2013
• Est. Priority Date: 02/27/2009
• Status: Active Grant

• Current Assignee: Mitsubishi Heavy Industries, Ltd.
• Original Assignee: Mitsubishi Heavy Industries, Ltd.
• Inventors: Saito, Hiroshi, Kakino, Atsushi, Oka, Takashi, Toyama, Masahiro
• Primary Examiner(s): SHECHTMAN, SEAN P
• Application Number:
  US12/710,642
• Publication Number:
  US 20100222900A1
• Time in Patent Office: 1,260 Days
• Field of Search: 700/3, 700/4, 700/9, 700/19, 700/20, 700 81- 82, 714 11- 13
• US Class Current: 700/81
• CPC Class Codes: G05B 9/03 with multiple-channel loop, i.e. redundant control systems

Abstract

In a multiple redundant control system each of the control systems detects whether failures occur in the system itself and the other systems, and outputs a control signal corresponding to an amount of control of a controlled object by the control system on the basis of the result of failure detection. In the multiple redundant control system at least one controlled object is driven or controlled by a controller having a plurality of control systems that are connected to each other and each output information regarding the system itself and received input of information regarding other systems. Based on control signals, a main control signal for driving or controlling the controlled object is generated by a main control signal generator.

Claims

1. A multiple redundant control system in which at least one controlled object is driven or controlled by a controller having a plurality of control systems,

wherein the plurality of control systems are connected to each other so that each of the plurality of control systems outputs information regarding the control system itself and receives input of information regarding the other control system or systems,

wherein each of the plurality of control systems includes:

a control-system failure detecting unit that detects whether failures occur in the control system itself or the other control system or systems; and

a controlling element that calculates an amount for control of a controlled object on the basis of a number of the other control system or systems that are determined to be operating normally, calculation of the amount of control by the controlling element being performed at a time that the control-system failure detecting unit determines that the control system itself is operating normally, and

wherein the multiple redundant control system comprises;

a main control signal generator that generates a main control signal for driving or controlling the controlled object by adding up the amounts calculated by the controlling element of each of the plurality of control systems.

2. A multiple redundant control system according to claim 1,

wherein each of the plurality of control systems further comprises:

a controlled object failure detecting unit that detects controlled object failure and that outputs a failure signal for the controlled object to the main control signal generator when it is detected that failures occur in the controlled object, and

wherein the main control signal generator generates, on the basis of the failure signal, a main failure signal for stopping of the driving of the controlled object detected to have a failure.

3. A multiple redundant control system according to claim 2,

wherein the controlled object outputs its own driving status as feedback information to the plurality of control systems, and

wherein the controlled object failure detecting unit detects whether failures occur in the controlled object on the basis of the feedback information input from the controlled object and feedback information input from the other control system or systems.

4. A multiple redundant control system according to claim 1, wherein the controlled object outputs its own driving status as feedback information to the plurality of control systems.

5. A multiple redundant control system according to claim 4, wherein the control-system failure detecting unit detects whether failures occur in the control system itself or the other control system or systems on the basis of the feedback information input from the controlled object and feedback information input from the other control system or systems.