System and method for preventing unauthorized modification to engine control software or an engine control system

• US 9,803,610 B2
• Filed: 04/01/2014
• Issued: 10/31/2017
• Est. Priority Date: 04/01/2013
• Status: Active Grant

• Current Assignee: Thermo King Corporation (Trane Technologies plc)
• Original Assignee: Thermo King Corporation (Trane Technologies plc)
• Inventors: Hall, Cullen Evan, McGinley, Gary, Lucht, Erich Albert, Vanous, Michael James, Turnquist, Michael Dean
• Primary Examiner(s): SOLIS, ERICK R
• Application Number:
  US14/781,396
• Publication Number:
  US 20160053696A1
• Time in Patent Office: 1,309 Days
• Field of Search: 701113, 701114, 1231793, 123198 D, 7311461
• CPC Class Codes: B60H 1/3226 Self-contained devices, i.e. including own drive motor
• CPC Class Codes: B60H 1/3232 particularly adapted for load transporting vehicles B60H1/3226 takes precedence
• CPC Class Codes: B60R 2025/041 Preventing use of engine operating on the fluid supply
• CPC Class Codes: B60R 25/045 by limiting or cutting the electrical supply to the propulsion unit
• CPC Class Codes: F02B 77/08 Safety, indicating, or supervising devices thermal insulation F02B77/11; monitoring or diagnostic devices for exhaust-gas treatment apparatus F01N11/00
• CPC Class Codes: F02D 17/04 rendering engines inoperative or idling, e.g. caused by abnormal conditions dependent on lubricating conditions F01M1/22; dependent on cooling F01P5/14
• CPC Class Codes: F02D 29/00 Controlling engines, such controlling being peculiar to the devices driven thereby, the devices being other than parts or accessories essential to engine operation, e.g. controlling of engines by signals external thereto
• CPC Class Codes: F02D 35/00 Controlling engines, dependent on conditions exterior or interior to engines, not otherwise provided for
• CPC Class Codes: F02D 41/2448 Prohibition of learning
• CPC Class Codes: F02D 41/2487 Methods for rewriting
• CPC Class Codes: F02D 41/249 Methods for preventing the loss of data
• CPC Class Codes: F02N 11/0803 characterised by means for initiating engine start or stop F02N11/0814 takes precedence
• CPC Class Codes: F02N 11/087 Details of the switching means in starting circuits, e.g. relays or electronic switches
• CPC Class Codes: F02N 11/101 for preventing engine starter actuation or engagement

Abstract

A system and method for preventing unauthorized modification to engine control software or an engine control system of, for example, a refrigerated transport application is provided. Particularly, the embodiments described herein prevent unauthorized parties from inadvertently or intentionally making changes to the engine control software used for controlling the engine or the engine control system that could, for example, potentially bypass emission strategies implemented in the refrigerated transport application. Accordingly, emission strategies such as, for example, EPA Tier IV not-to-exceed (“NTE”) regulations can be maintained.

Claims

1. An engine control system comprising:

a power unit that includes an engine; and

a controller configured to activate the engine via an engine activation signal and control the engine using an engine control software, the controller including a relay connected to the power unit,

wherein the controller is configured to detect an unauthorized modification event,

wherein the relay is configured to prevent the engine activation signal from passing to the power unit when the controller detects an unauthorized modification event,

wherein the power unit includes a stop solenoid, the relay is connected to the stop solenoid, and the relay is configured to send the engine activation signal to the stop solenoid when the controller does not detect an unauthorized modification event.

wherein the controller includes a circuit board connected to the relay, the circuit board being configured to send an engine implementation signal to the relay when the controller does not detect an unauthorized modification event, and

wherein the controller includes a feedback connection configured to send the engine activation signal from the relay to the circuit board when the relay passes the engine activation signal to the power unit.

2. The engine control system of claim 1, wherein the unauthorized modification event is an unauthorized modification to the engine control software.

3. The engine control system of claim 1, wherein the unauthorized modification event is an unauthorized modification to the engine control system.

4. The engine control system of claim 1, wherein the relay includes a switch having an ON state and an OFF state, and a solenoid configured to receive the engine implementation signal from the circuit board and configured to change the switch to the ON state upon receipt of the engine implementation signal.

5. The engine control system of claim 4, wherein the relay is configured to send the engine activation signal to the power unit when the switch is in the ON state and is configured to prevent the engine activation signal from passing to the power unit when the switch is in the OFF state.

6. The engine control system of claim 4, wherein the controller includes a first connection configured to pass the engine implementation signal from the circuit board to the solenoid, and a second connection configured to pass the engine activation signal from the circuit board to the switch.

7. A method for an engine control system that includes a power unit having an engine, and a controller configured to activate the engine via an engine activation signal and control the engine using an engine control software, the controller including a relay connected to the power unit, the method comprising:

activating the relay to an ON state when the relay receives an engine implementation signal;

the relay sending an engine activation signal to the power unit for starting the engine when the relay is in the ON state and upon receipt of the engine activation signal; and

sending the engine activation signal from the relay to a circuit board of the controller via a feedback connection when the relay is in the ON state and the relay is sending the engine activation signal to the power unit.

8. The method of claim 7, further comprising:

changing the relay to an OFF state when the relay does not receive an engine implementation signal; and

the relay preventing the engine activation signal from passing to the power unit when the relay is in the OFF state.

9. The method of claim 7, further comprising:

the controller determining an engine control system error when the circuit board sends the engine implementation signal and the engine activation signal to the relay, and the circuit board does not receive the engine activation signal from the relay via a feedback connection.

10. The method of claim 9, further comprising:

notifying a user of the engine control system error when the controller determines the engine control system error.

11. The method of claim 7, further comprising:

a circuit board of the controller sending the engine implementation signal to a solenoid of the relay to activate a switch of the relay to the ON state;

the circuit board of the controller sending the engine activation signal to the switch; and

the switch sending the engine activation signal to the power unit for starting the engine when the switch is in the ON state and upon receipt of the engine activation signal.