Fault detection, isolation and reconfiguration systems and methods for controlling electrohydraulic systems used in construction equipment

• US 9,995,020 B2
• Filed: 12/21/2015
• Issued: 06/12/2018
• Est. Priority Date: 03/03/2011
• Status: Active Grant

• Current Assignee: Danfoss A/S
• Original Assignee: Eaton Intelligent Power Limited (Eaton Corporation PLC.)
• Inventors: Yuan, QingHui, Rannow, Michael Berne, Gehlhoff, Wade Leo, Schottler, Chris William, Mahulkar, Vishal
• Primary Examiner(s): Mawari, Redhwan K
• Application Number:
  US14/976,749
• Publication Number:
  US 20160186414A1
• Time in Patent Office: 904 Days
• CPC Class Codes: E02F 9/226 Safety arrangements, e.g. hydraulic driven fans, preventing cavitation, leakage, overheating
• CPC Class Codes: E02F 9/2278 Hydraulic circuits
• CPC Class Codes: E02F 9/2296 Systems with a variable displacement pump
• CPC Class Codes: E02F 9/267 Diagnosing or detecting failure of vehicles
• CPC Class Codes: E02F 9/268 with failure correction follow-up actions
• CPC Class Codes: F15B 19/002 Calibrating
• CPC Class Codes: F15B 19/005 Fault detection or monitoring
• CPC Class Codes: G05B 23/0275 Fault isolation and identification, e.g. classify fault; estimate cause or root of failure
• CPC Class Codes: G05B 23/0286 Modifications to the monitored process, e.g. stopping operation or adapting control
• CPC Class Codes: G05B 23/0289 Reconfiguration to prevent failure, e.g. usually as a reaction to incipient failure detection

Abstract

The present disclosure relates to fault detection, isolation and reconfiguration schemes, architectures and methods for use in electrohydraulic actuation systems for construction equipment. In one embodiment, a supervisory controller adapted to interface with a main controller of the construction vehicle is provided. A plurality of control nodes that interface with the supervisory controller are also disclosed, each of which includes pressure and position sensors. The nodes also include a first actuator control node for controlling operation of a first hydraulic actuator, a second actuator control node for controlling operation of a second hydraulic actuator, and a pump control node. The control system has an architecture in which faults are detected and isolated at the supervisory controller level and, where possible, within each of the control nodes at a sensor level, a component level, and a subsystem level.

Claims

1. A method of operating a control system for a hydraulic circuit in a vehicle comprising the steps of:

a. receiving input signals from a plurality of sensors in the hydraulic circuit;

b. executing a first control algorithm to generate output signals to a plurality of control components in the hydraulic circuit, the first control algorithm incorporating at least some of the sensor input signals;

c. detecting a fault condition in the control system relating to a sensor or control component associated with the execution of the first control algorithm;

d. isolating the fault condition by identifying a faulty sensor or control component responsible for the fault condition; and

reconfiguring the controller to execute a second control algorithm instead of the first control algorithm, the second control algorithm excluding the input signal from the faulty sensor or control component.

2. The method of claim 1, wherein the step of identifying a fault condition is accomplished by:

generating a first operating parameter for a first component;

generating a second operating parameter for one or more second components, the second operating parameter being mathematically related to the first operating parameter; and

comparing the first and second operating parameters to identify a fault condition.

3. The method of claim 1, wherein the step of isolating the fault condition includes:

a. implementing a real-time isolation procedure to identify the faulty sensor or control component responsible for the fault condition without interruption into the execution of the first control algorithm.

4. The method of claim 1, wherein the second algorithm uses analytical redundancies to create a virtual sensor or control component that replaces the faulty sensor or control component.

5. The method of claim 2, wherein if a sensor corresponding to the first component fails, further comprising using the second operating parameter as a reference parameter in place of the first operating parameter to reconfigure the hydraulic actuation system.

6. The method of claim 2, wherein the first and the one or more second components are operationally related by a common hydraulic actuator.

7. The method of claim 2, wherein the first and the one or more second components include an accumulator and a valve that controls flow to and from the accumulator.

8. The method of claim 2, wherein the first component includes a first valve, and the one or more second components include multiple valves that cooperate to provide flow to the first valve, wherein a combined flow of the multiple valves is the second operating parameter and a calculated flow through the first valve.

9. The method of claim 3, further comprising implementing an off-line fault isolation procedure for interrupting execution of the first control algorithm when the faulty sensor after the step of implementing the real-time isolation procedure when the real-time isolation procedure fails to isolate a faulty sensor.

10. The method of claim 5, wherein the second operating parameter is used to generate a virtual signal that replaces a signal from the failed sensor in a control algorithm that controls operation of the first component.

11. The method of claim 6, wherein the first and the one or more second components are meter-in and meter-out valves of the common hydraulic actuator, and wherein the first and second operating parameters include calculated flow values.

13. The method of claim 10, wherein the hydraulic system includes a work circuit and a steering circuit.

14. The A method of claim 10, further comprising:

a. defining a real-time fault isolation procedure by correlating the plurality of fault conditions to the plurality of sensors such that a fault caused by one of the plurality of sensors can be isolated upon the detection of the fault condition without interrupting execution of the nominal control algorithm;

b. defining an off-line fault isolation procedure for interrupting the operation of the hydraulic system and isolating a faulty sensor when the faulty sensor cannot be isolated by the real-time fault isolation procedure.

16. The method of claim 14, wherein the step of defining a correlation between the plurality of fault conditions to the plurality of sensors includes defining a primary fault isolation matrix for which at least some fault conditions can be isolated.

17. The method of claim 14, wherein the hydraulic system includes a work circuit and a steering circuit.

19. The method of claim 16, wherein the step of defining a correlation between the plurality of fault conditions to the plurality of sensors further includes defining a secondary fault isolation matrix for which at least some fault conditions that cannot be isolated by the primary fault isolation matrix can be isolated.

21. The method of claim 19, wherein the secondary fault isolation matrix correlates unique patterns of fault condition scenarios to a fault relating to a particular sensor.

12. A method of configuring a controller for a hydraulic system, the method comprising:

a. defining a plurality of sensor inputs in the controller;

b. defining a nominal control algorithm in the controller for operating the hydraulic system that relies upon the plurality of sensor inputs;

c. defining a plurality of fault conditions in the control system, each fault condition having predefined parameters for allowing the controller to detect a fault in one of the plurality of sensor inputs;

d. isolating a fault caused by one of the plurality of sensors upon the detection of the fault condition without interrupting execution of the nominal control algorithm; and

e. defining a reconfigured control algorithm in the controller for replacing the nominal control algorithm when a faulty sensor is isolated by the controller, the reconfigured control algorithm excluding input from an isolated faulty sensor.

15. The method of claim 12, further comprising:

a. defining a correlation between the plurality of fault conditions to the plurality of sensors such that a fault caused by one of the plurality of sensors can be isolated.

18. The method of claim 15, wherein the step of defining a correlation between the plurality of fault conditions to the plurality of sensors includes defining a primary fault isolation matrix for which at least some fault conditions can be isolated.

20. The method of claim 18, wherein the step of defining a correlation between the plurality of fault conditions to the plurality of sensors further includes defining a secondary fault isolation matrix for which at least some fault conditions that cannot be isolated by the primary fault isolation matrix can be isolated.

22. The method of claim 20, wherein the secondary fault isolation matrix correlates unique patterns of fault condition scenarios to a fault relating to a particular sensor.