Vehicle control system and method

• US 6,909,944 B2
• Filed: 04/10/2003
• Issued: 06/21/2005
• Est. Priority Date: 07/30/1999
• Status: Expired due to Term

• Current Assignee: Oshkosh Corporation
• Original Assignee: Oshkosh Corporation
• Inventors: Newton, Paul J., Holeton, Michael J., Martin, Patrick D., Pillar, Duane R., Magners, Kevin W.
• Primary Examiner(s): Black, Thomas G.
• Assistant Examiner(s): Tran, Dalena
• Application Number:
  US10/412,596
• Publication Number:
  US 20040019414A1
• Time in Patent Office: 803 Days
• Field of Search: 701/1, 701/29, 701/32, 701/33, 701/34, 361/23, 361/93.7, 361/93.8, 361/93.1, 191/2, 414/699, 714/1, 714/2, 714/4, 714/13
• US Class Current: 701/1
• CPC Class Codes: B60R 16/0315 using multiplexing techniques multiplexing for transmission of signals G08C15/00; multiplexing for electrical communication in general H04J
• CPC Class Codes: B65F 3/043 with additional means for keeping the receptacle substantially vertical during raising
• CPC Class Codes: B65F 3/045 Four-bar linkages

Abstract

An interface module for a power distribution and control system for a vehicle is described. The interface module includes at least one first link configured to receive an input from input devices on the vehicle, at least one second link configured to control output devices on the vehicle, at least one third link configured to communicate with a communication network. The module further includes control logic configured to store a record of output devices associated with the interface module and to process a configuration file to determine whether any of the output devices have been designated as controlling a mission critical function.

Claims

1. An interface module for a power distribution and control system for a vehicle, comprising

at least one first link configured to receive an input from input devices on the vehicle;

at least one second link configured to control output devices on the vehicle;

at least one third link configured to communicate with a communication network; and

control logic configured to store a record of output devices associated with the interface module and to process a configuration file to determine whether any of the output devices have been designated as controlling a mission critical functions,

wherein the control logic is configured to control the output devices based on signals received from the third link and wherein the control logic is configured to detect a failure condition in which signals are not being received by the interface module over the third link and to place output devices that have not been designated as mission critical in a default operating state.

2. An interface module according to claim 1, wherein the configuration file is received over the third link during an initialization phase.

3. An interface module according to claim 1, wherein the control logic is configured to control the output devices based on input signal received from the input devices, and wherein the input devices are linked to the interface module.

4. An interface module according to claim 1, wherein the control logic is configured to maintain the operating state of an output device that has been designated as controlling a mission critical function in the same state as prior to detection of the failure condition.

5. An interface module according to claim 4, wherein the operating state of the output device that has been designated as controlling the mission critical function corresponds to continued operation of the mission critical function.

6. An interface module according to claim 1, wherein the control logic receives input signals from the third link following detection of the failure condition and, in response, transmits the current operating state of the output devices that have been designated as controlling a mission critical function over the third link.

7. A control method for a vehicle, comprising:

determining that a failure has occurred in a power distribution and control system having a plurality of interface modules that control output devices located on a vehicle and are coupled to a communication network in which signals are not being received by the interface module over the communication network;

determining whether any output devices controlled by one of the plurality of interface modules have been designated as controlling a mission critical function;

placing output devices that have not been designated as mission critical in a default operating state; and

controlling at least one output device in accordance with the last known state of the output device based on the determination that a failure has occurred and the determination that the output device has been designated as controlling a mission critical function.

8. A control method according to claim 7, wherein controlling the at least one output device in accordance with the last known state of the output device includes operating the output device to provide the mission critical function.

9. A control method according to claim 7, further including detecting that the failure has been resolved and transmitting the last known state of the at least one output device.

10. A control method according to claim 7, further including setting the state of an input device based on the last known state of the at least one output device.

11. A vehicle, comprising:

a power distribution and control system, the power distribution and control system further including

(A) a plurality of input devices;

(B) a plurality of output devices;

(C) a communication network;

(D) a plurality of microprocessor-based interface modules, the plurality of interface modules being coupled to the plurality of input devices and to the plurality of output devices by way of respective dedicated communication links; and

(E) a microprocessor-based control unit, the control unit being coupled to the plurality of interface modules by way of the communication network, the control unit including a control program that is executable by a microprocessor of the control unit to control the plurality of output devices based on input status information from the plurality of input devices,

wherein at least one of the plurality of interface modules is configured to control an output device designated as controlling a mission critical function, such that the output device will function according to its last known state prior to a failure, wherein the control logic is configured to control the output devices based on signals received from the communication network, and wherein the control logic is configured to detect a failure condition in which signals are not being received by the interface module over the communication network and to place output devices that have not been designated as mission critical in a default operating state.

12. A vehicle according to claim 11, wherein the failure is a failure associated with the microprocessor based control unit.

13. A vehicle according to claim 11, wherein the failure is a failure associated with an interface module that receives input data from input devices for control of the output device designated as controlling a mission critical function.

14. A vehicle according to claim 13, wherein the plurality of interface modules are physically and functionally interchangeable with other interface modules.

15. A vehicle according to claim 11, wherein the vehicle is a fire truck and wherein the mission critical function is a water pumping function.

16. A vehicle according to claim 11, wherein the plurality of interface modules are physically and functionally interchangeable with other interface modules.

17. A vehicle according to claim 11, wherein the control unit stores and maintains a configuration file that designates at least one output device as controlling a mission critical function.

18. A vehicle according to claim 17, wherein the configuration file is transmitted to the plurality of interface modules during an initialization phase for the power distribution and control system.

19. A vehicle according to claim 18, wherein each of the plurality of interface modules are configured to process the configuration file to determine whether an output device associated with that interface module has been designated as controlling a mission critical function.

20. A vehicle according to claim 11, wherein the plurality of microprocessor-based interface modules includes a first interface module coupled to a second interface module through the communication network, wherein control of at least one output device is shared between the first interface module and the second interface module.

21. A vehicle according to claim 20, wherein the first interface module is configured to control the at least one shared control output device during normal operation.

22. A vehicle according to claim 21, wherein the second interface module is configured to control the at least one shared control output device following detection of a failure condition.

23. A control method for a vehicle, comprising:

(A) providing a vehicle power distribution and control system,

(1) wherein the vehicle power distribution and control system comprises (a) plurality of input devices, (b) a plurality of output devices, (c) a central control unit, and (d) a plurality of interface modules,

(2) wherein the central control unit is connected to the plurality of interface modules by way of a communication network,

(3) wherein the plurality of interface modules collect data from the plurality of input devices and distribute power to the plurality of output devices;

(B) performing the following steps at the central control unit during initialization of the vehicle distribution and control system, including

(1) accessing a configuration file associated with the central control unit, wherein the configuration file designates at least one of the plurality of output devices as controlling a mission critical function,

(2) transmitting the configuration file or a portion thereof to each of the plurality of interface modules, wherein each interface module is configured to recognize whether an associated output device has been designated as controlling a mission critical function; and

(C) repetitively performing the following steps at the interface modules during operation of the vehicle distribution and control system, including

(1) receiving control information at each interface module from the central control unit to control the operation of the output devices associated with that interface module, and

(2) detecting at each interface module whether communication is not being received from the central control unit, wherein a communication failure occurs in which communication is not received from the central control unit, the interface module enters a mission critical mode of operation, including

determining whether any output device associated with the interface module has been designated as controlling a mission critical function, and

if it is determined that an output device has been designated as controlling a mission critical function, maintaining the state of that output device according to the control information last received from the central control unit prior to the communication failure.

24. A method according to claim 23, wherein if the interface module determines that an output device has not been designated as controlling a mission critical function, the interface module places the output device in a default state.

25. A method according to claim 23, further comprising configuring the interface module to continue to attempt to detect communication from the central control unit after the communication failure.

26. A method according to claim 25, further comprising:

detecting resumed communication from the central control unit at an interface module after the communication failure,

determining that the interface module had an output device that was designated as controlling a mission critical function, and

transmitting from the interface module to the central control unit information indicating that a mission critical function is being provided and input and output state information associated with the mission critical function.

27. A control method for a vehicle, comprising:

(A) providing a vehicle power distribution and control system,

(1) wherein the vehicle power distribution and control system comprises (a) plurality of input devices, (b) a plurality of output devices, (c) a central control unit, and (d) a plurality of interface modules,

(2) wherein the central control unit is connected to the plurality of interface modules by way of a communication network,

(3) wherein the plurality of interface modules collect data from the plurality of input devices and distribute power to the plurality of output devices;

(B) performing the following steps at the central control unit during initialization of the vehicle distribution and control system, including

(1) accessing a configuration file stored in a memory associated with the central control unit, wherein the configuration file designates at least one of the plurality of output devices as controlling a mission critical function,

(2) transmitting the configuration file or a portion thereof to each of the plurality of interface modules, wherein each interface module is configured to recognize whether an associated output device has been designated as controlling a mission critical function; and

(C) repetitively performing the following steps at the central control unit during operation of the vehicle distribution and control system, including

(1) receiving input status information at the central control unit from each interface module to control the operation of the output devices associated with that interface module, and

(2) detecting at the central control unit whether communication is not being received from an interface module, wherein if a communication failure occurs in which communication is not being received from the interface module, the central control unit enter a missions critical mode of operation, including

determining whether any input device associated with the interface module that is no longer communicating with the central control unit is an input device associated with an output device that has been designated as controlling a mission critical function, and

if it is determined that the interface module that is no longer communicating provided input status information associated with an output device that has been designated as controlling a mission critical function, maintaining the state of that output device according to the input status information last received from the interface module prior to the communication failure.

28. A method according to claim 27, wherein if the central control unit determines that the input status information formerly received from the interface module that is no longer communicating with the central control unit, the central control unit places output devices associated with the input status information in a default operating state.

29. A method according to claim 27, further comprising configuring the central control unit to continue to attempt to detect input status information from the interface module after the communication failure.

30. A method according to claim 29, further comprising:

detecting input status information from an interface module at the central control unit after the communication failure, and

determining that the input status information transmitted from the interface module is associated with an output device that is designated as controlling a mission critical function, and

controlling the output device designated as controlling a mission critical function according to the detected input status information.

31. A method according to claim 27, further comprising maintain an input/output state table at the central control unit containing state information for the plurality of input devices and the plurality of output devices.

32. A method according to claim 31, further including configuring the central control unit to periodically request input and output status information from the plurality of interface modules.

33. A vehicle control system, comprising:

(A) a plurality of input devices;

(B) a plurality of output devices;

(C) a communication network;

(D) a plurality of microprocessor-based interface modules, the plurality of interface modules being coupled to the plurality of input devices and to the plurality of output devices by way of respective dedicated communication links;

(E) a microprocessor-based central control unit, the central control unit being coupled to the plurality of interface modules by way of the communication network, the control unit including a control program that is executable by a microprocessor of the control unit to control the plurality of output devices based on input status information from the plurality of input devices; and

wherein the vehicle control system is capable of being placed into a first configuration during a normal mode of operation and into a second configuration during a fault mode of operation;

wherein the first configuration is a master-slave control configuration in which the central control unit operates as a master controller and the interface modules operate as slave modules under the control of the central control unit; and

wherein the second configuration is a distributed control configuration in which the interface modules operate based on commands received from the central control unit prior to reset of the central control unit.

34. A vehicle control system according to claim 33, wherein each of the interface modules is programmed to enter the distributed control configuration responsive to occurrence of a fault condition that causes the interface module to lose communication with the central control unit.

35. A vehicle control system, comprising:

(A) a plurality of input devices;

(B) a plurality of output devices;

(C) a communication network;

(D) a plurality of microprocessor-based interface modules, the plurality of interface modules being coupled to the plurality of input devices and to the plurality of output devices;

(E) a microprocessor-based central control unit, the central control unit being coupled to the plurality of interface modules by way of the communication network, the control unit including a control program that is executable by a microprocessor of the control unit to control the plurality of output devices based on input status information from the plurality of input devices; and

wherein, during normal operation, the control system has a master-slave configuration in which the central control unit operates as a master controller and the interface modules operate as slave modules under the control of the central control unit;

wherein, if the central control unit is reset due to a fault condition, the interface modules are programmed to enter an autonomous mode of operation in which each respective interface module controls at least some of the plurality of output devices to which the respective interface is connected based on commands received from the central control unit prior to reset of the central control unit.

36. A control system according to claim 35,

wherein at least some of the plurality of input devices comprise momentary switches;

wherein, for each momentary switch, after the momentary switch is actuated by an operator, the control system stores a representative input state of the momentary switch which is representative of an actuated position of the momentary switch; and

wherein, after reset of the central control unit, the interface modules are programmed to provide the central control unit with sufficient information for the central control unit to determine the representative input states of the momentary switches prior to reset of the central control unit.