Compressed Natural Gas Vehicle Safety System and Method

Abstract

A multiply-redundant system that protects fueling of rockets, aircraft and other vehicles using Liquefied Natural Gas (LNG) along with an oxidizer such as Liquefied Oxygen. One or more sensors in combination with one or more optional microswitches combine to detect any leaks, fire or explosion hazards quickly locking out further fueling. For different levels of safety, different combinations of sensors can be used.

Claims

1. A rocket or aircraft fueling safety system for vehicles using Liquefied Natural Gas (LNG) fuel along with an oxidizer comprising: an LNG/oxidizer fueling system constructed to fuel a rocket or aircraft; a first sensor constructed to detect the presence of natural gas or LNG, said first sensor located in proximity to said fueling system; a second sensor constructed to detect the oxygen concentration above ambient concentration, said second sensor located in proximity to said fueling system; a logic system that combines inputs from the first and second sensors such that said fueling system is placed into a lock-out state upon detection of LNG by the first sensor or upon detection of oxygen by the second sensor; a manual override system constructed to remove and disable said lock-out state.

2. The fueling safety system of claim 1 further comprising a fire or explosion sensor, the third sensor also being coupled to said logic system such that said fueling system is placed into a lock-out state upon detection of fire or explosion from said third sensor.

3. The fueling safety system of claim 2 wherein the fire or explosion sensor is chosen from the group consisting of optical and ultrasonic.

4. The fueling safety system of claim 2 wherein the fire or explosion sensor is an infrared sensor.

5. The fueling safety system of claim 1 wherein the first sensor is chosen from the group consisting of optical sensors and chemical detectors.

6. The fueling safety system of claim 1 wherein the second sensor is a chemical detector.

7. The fueling safety system of claim 1 further comprising a proximity sensor constructed to detect proximity of an LNG fuel hose or a liquid oxygen hose to a coupling on said rocket or aircraft, wherein the proximity sensor is also coupled to said logic system causing the fueling system to be placed in said lock-out state when the fuel hose or liquid oxygen hose is not in proximity to said coupling.

8. A rocket or aircraft fueling safety system for vehicles using Liquefied Natural Gas (LNG) fuel along with an oxidizer comprising: a first sensor constructed to detect the presence of natural gas or LNG, said first sensor constructed to be located in proximity to a fueling system; a second sensor constructed to detect the oxygen concentration above ambient concentration, said second sensor constructed to be located in proximity to said fueling system; a logic system that combines inputs from the first and second sensors such that said fueling system is placed into a lock-out state upon detection of LNG by the first sensor or upon detection of oxygen by the second sensor.

9. The fueling safety system of claim 8 further comprising a fire or explosion sensor, the third sensor also being coupled to said logic system such that said fueling system is placed into a lock-out state upon detection of fire or explosion from said third sensor.

10. The fueling safety system of claim 9 wherein the fire or explosion sensor is chosen from the group consisting of optical and ultrasonic.

11. The fueling safety system of claim 9 wherein the fire or explosion sensor is an infrared sensor.

12. The fueling safety system of claim 8 wherein the first sensor is chosen from the group consisting of optical sensors and chemical detectors.

13. The fueling safety system of claim 8 wherein the second sensor is a chemical detector.

14. The fueling safety system of claim 8 further comprising a proximity sensor constructed to detect proximity of an LNG fuel hose or a liquid oxygen hose to a coupling on said rocket or aircraft, wherein the proximity sensor is also coupled to said logic system causing the fueling system to be placed in said lock-out state when the fuel hose or liquid oxygen hose is not in proximity to said coupling.

15. The fueling safety system of claim 8 further comprising a manual override system constructed to remove and disable said lock-out state.

16. A rocket or aircraft fueling safety system for vehicles using Liquefied Natural Gas (LNG) fuel along with Liquid Oxygen (LOX) comprising: a first sensor constructed to detect the presence of natural gas or LNG, said first sensor constructed to be located in proximity to a fueling system; a second sensor constructed to detect the oxygen concentration above ambient concentration, said second sensor constructed to be located in proximity to said fueling system; a second sensor constructed to detect the oxygen concentration above ambient concentration, said second sensor constructed to be located in proximity to said fueling system; a third sensor constructed to detect fire or explosion; a fourth sensor constructed to detect proximity of a LNG hose to an LNG coupling on said rocket or aircraft; a fifth sensor constructed to detect proximity of a LOX hose in proximity to a LOX coupling on said rocket or aircraft; a logic system that combines inputs from the first, second, third, fourth and fifth sensors such that said fueling system is placed into a lock-out state upon detection of LNG by the first sensor or upon detection of oxygen above ambient concentration by the second sensor or by detection of fire or explosion by the third sensor or by detection of non-proximity of an LNG hose to said LNG coupling by said fourth sensor or by detection of non-proximity of a LOX hose to said LOX coupling by said fifth sensor.

17. The fueling safety system of claim 16 wherein the fire or explosion sensor is chosen from the group consisting of optical and ultrasonic.

18. The fueling safety system of claim 16 wherein the first sensor is chosen from the group consisting of optical sensors and chemical detectors.

19. The fueling safety system of claim 16 wherein the second sensor is a chemical detector.

Description

DESCRIPTION OF THE FIGURES

[0018] Attention is now directed to several drawings the illustrate features of the present invention:

[0019] FIG. 1A shows a block diagram of an embodiment of a high-safety lock-out system according to the present invention.

[0020] FIG. 1B shows a logic circuit that can combine sensors inputs.

[0021] FIG. 2 shows a detail drawing of a fill fixture with a proximity sensor.

[0022] FIG. 3 shows the system of FIG. 2 with the high pressure fill hose removed.

[0023] FIG. 4 shows a system similar to that of FIGS. 2-3 with an additional gas cap sensor.

[0024] FIG. 5 shows a panel-type filling system with an isolation valve and three proximity sensors.

[0025] FIG. 6 shows the system of FIG. 5 with an additional mechanical microswitch.

[0026] FIG. 7 shows a motion and fire system used with natural gas fueling.

[0027] FIG. 8 shows an example of a LNG/LOX fueling safety system.

[0028] Several drawings and illustrations have been presented to aid in understanding the present invention. The scope of the present invention is not limited to what is shown in the figures.

DETAILED DESCRIPTION OF THE INVENTION

[0029] The present invention relates to a system and method that provides a lockout out to a vehicle's ignition, transmission or other means of moving the vehicle when a high pressure compressed natural gas fuel hose is attached to the vehicle an/or the fill cap is open. FIG. 1A shows a block diagram of an embodiment of such a system. A compressed gas fuel fitting 2 accepts a high pressure filling hose 21 that allows filling through an isolation valve 22. The isolation valve 22 can be manually opened, or it can be opened mechanically when a panel lid or “gas cap” is opened. A sensor 4, which can be an electrical proximity sensor, senses the presence of the fitting part of the high pressure filling hose 21. An optional second sensor 8 senses that the panel or gas cap is open. An optional third sensor 14 can sense the position of an isolation valve 22 (on vehicles that have such a valve). All of the sensors can be magnetic, optical or ultra-sonic proximity sensors, or any other sensors, and use any method of sensing proximity or that a particular mechanical part is or is not in a particular position. One or more optional mechanical microswitches 23 can provide a backup to one or more of the sensors.

[0030] A further logic circuit 24 or other lockout which can be a separate unit, or part of the vehicle's processor, can combine the inputs from all the sensors 4, 8, 14, and the optional microswitch 23 to produce a safe signal 25 that will allow the vehicle ignition to start the car, or otherwise allow the vehicle to move. FIG. 1B shows a schematic representation of this circuit 24. Here, each sensor's signal is amplified and conditioned and fed into an AND logic circuit 26. If any of the sensors is in an unsafe condition, the AND circuit 26 will not produce a “safe” signal. The particular circuit of FIG. 1B assumes that a proximity sensor has a logic high when there is proximity, and that the microswitch is high when the lid is closed. Any other logic levels or configurations can be used. In particular, a program in a microcontroller or other processor could also make the determination. As is well understood in the art, an OR circuit could also be effectively used instead of an AND circuit. Any circuit or program that combines sensor inputs to make a “safe” determination is within the scope of the present invention.

[0031] FIG. 1B also shows an override 27 that can be used to force a “safe” condition when one of the sensors is in an unsafe state. This circuit is optional but, when provided, allows the driver to drive to a mechanic with a failing sensor. A counter 28 or other abuse preventer prevents the override from being used more than a predetermined number times before repairing the sensor (for example three times). The counter 28 can be optionally reset whenever the sensor logic produces a safe signal. In the present example, the driver can enter a special PIN code 29 to activate the override and override the sensors. While providing this circuit lowers the overall safety threshold of the system slightly, the act of performing the override can be made difficult enough that a driver will not routinely use it to avoid having to fix a faulty sensor. Optionally, the override could be restricted to use only by a certified mechanic. In this case, the driver would not be allowed to operate it. While a simple override switch can be used, for additional safety, a PIN or barcode or any other unique identification 29 might be required. If a PIN is used, a PIN entry method can be used such as a keypad or a card swipe. If a barcode is used, a small barcode reader can be supplied.

[0032] FIG. 2 shows a male tank adapter 2 on the vehicle with a coupled (usually spring coupled) female filling locking coupler 3 and high pressure feed hose 1. The feed hose 1 typically originates at a compressor or storage tank. A proximity sensor 4 with electrical connections 5 senses the presence of the feed hose (unsafe condition). The female locking coupler 3 typically has a connect/disconnect fitting that clamps the tank adapter 2 and makes a high pressure, leak-proof connection. It should be noted that the female filling locking coupler 3 could be a quick-release, break-away fitting. This would add a final mechanical precaution to the system where the hose would manually break free in the case that somehow the rest of the system failed.

[0033] FIG. 3 shows the same setup but with the feed hose 1 and the female locking coupler 3 uncoupled and withdrawn (safe position) from the male filling adapter 2.

[0034] FIG. 4 shows a fill cavity 6 and fill access lid 7 that swings open on hinges. A second proximity sensor 8 has a second electrical feed 9. This sensor 8 can be used in embodiments of the invention either alone or in conjunction with the feed hose sensor 4. An optional microswitch 20 is also shown.

[0035] Any type of sensor can be used with the present invention. A preferred sensor is a magnetic or optical proximity sensor; however, other sensor types can be used such as ultra-sonic sensors and others.

[0036] FIG. 5 shows a different arrangement of the fueling system. This type of system is more commonly found on trucks and larger vehicles. A panel 13 opens and closes to allow access to a tank adapter 12. An isolation valve 10 can be manually operated or can operate in conjunction with a lever 16 on the panel 13. A third proximity sensor 14 with electrical feed 15 can be used to sense whether the panel is open or closed (and hence, if the lever 16 is used with the valve 10, whether the valve is open or closed). The valve 10 isolates the tank adapter 12 from the tank when the panel is closed.

[0037] FIG. 6 shows the same embodiment as FIG. 5 except that an optional microswitch 23 has been added to the panel 13. This is a simple mechanical backup that does not rely on proximity sensors. It should be noted that any of the proximity sensors shown in the various embodiments of the present invention may be replaced by microswitches or other mechanical devices, or each proximity sensor may be optionally backed up with an additional microswitch. In addition, FIG. 6 shows an optional additional microswitch 21 on the isolation valve 10.

[0038] It should be noted that an optional natural gas leak sensor can also be included with the system of the present invention to provide an addition source of safety. Such a sensor could keep the vehicle in a disabled state if an unreasonable concentration of free natural gas is sensed. Such a sensor could also sound an alarm on the vehicle or on the compressor. It is also possible that any of the above-mentioned sensors or circuits can communicate with the lockout or other logic wirelessly such as by radio or light. Finally, it should be noted that a processor with memory and a stored program can perform the logic function of the lockout, override and/or abuse preventer. This can also be any digital or analog logic circuit or simply relays. In addition, an internet or network interface can be provided to remotely report or log the status of the system. This feature can be useful for fleet operators to track safety, for example, the number of attempts to drive off under a lockout condition or the number of overrides.

[0039] The present invention provides a multiply-redundant system to enhance the safety of home or business fueling of compressed natural gas vehicles. It can also be used on vehicles using propane or any other compressed gas fuel. A system of one or more sensors determines if the fueling system is in a safe state. This can be a state with the high pressure fill hose removed, the fueling compartment access lid closed, and any isolation valve in the correct position. A lockout prevents either the vehicle from starting or otherwise makes it impossible to move the vehicle when the system is not in a safe state. In order that a driver can get a faulty sensor repaired, an override can be provided that allows the safety sensors to be overridden and the vehicle moved. This override can be equipped with an abuse preventer that only allows the override to be used for a predetermined number of times before the override itself is disabled. This prevents a driver from putting off getting a faulty sensor repaired. An audio and/or visual indicator can sound or display when the driver inserts the key into the ignition in an unsafe state, or alternatively, when the driver turns the key to start.

[0040] In the present invention, a lockout is any method, means or technique to prevent a vehicle from moving including a circuit or module that can disable the ignition or transmission or disable the vehicle in any other way. An override is a any method, means or technique to allow the vehicle to move in spite of the lockout—any way of overriding the lockout. An abuse preventer is any method, means or technique to prevent abuse of the override by limiting the number of times (especially successive times) it can be used.

[0041] In natural gas fueling, be it compressed or liquefied gas, any excessive motion of the vehicle being fueled (car, truck, train, ship, barge or any other vehicle), cannot be permitted. Such motion indicates a condition that should lead to a shutdown of the fueling operation and, in many cases, an automatic disconnect of all fueling lines from the vehicle as well as possible release of the vehicle.

[0042] To detect omni-directional vehicular movement/distances, multiple sensors may utilized to perform different functions, standing alone or in a cascading control system to perform a vehicle lock-out or automatic fueling line disconnect. The use of one or more sensors in combination with one or more micro-switches, combine to automatically mitigate excess movements, initiate the lock-out and close isolation valves to prevent/disable fuel flow/transfers. The sensor(s) such as optical and or ultrasonic that detect excessive movement (above or greater than predetermined stop limits) can be sensors such as laser or radar measurement sensors, or can simply be accelerometers coupled to processing units to compute motion. Use of one or more of these sensor, or possibly multiple sensors, creates the safest condition to initiate mitigation of fuel transfers, by maintaining other systems in a lock-out state, and activating one or more audible and/or visual alarms. The fuel flow system can be reactivated by an operator. Different vehicles may require different parameters to initiate such motion lock-outs. For example, highly excessive movements can relay, trigger or enable an override system to disabling the lockout system(s), but keeping fuel flow isolation valve(s) closed (safe state) and liberating vehicle(s) until proper control/conditions are achieved and or exist. Such a condition can de-activate or activate any vehicle or automatic fueling release system that may exist, or initiated by lock-out. Multiple variations can be used, with multiple steps and sequences to maintain the safe state. With isolation valve(s) in a closed position, and if predetermined conditions exist, vehicle movement may be allowed by automatic activation of the override.

[0043] For example, a barge being fueled by natural gas begins to slip away, or begins to roll and pitch beyond a certain limit. The above-described motion sensors, along with processing, can determine a course of action. If the motion is within certain bounds, only the fueling system needs to be shut down; however, for greater motion or slip-away, not only does the fueling system need to be shut down, but the fueling lines need to be automatically disconnected from the barge.

[0044] Fires or explosions of any type during fueling are also a danger signal that all fueling operations should cease. To detect hazardous fire conditions, the use of one or more sensors in combination with one or more micro-switches can combine to automatically close the isolation valve(s) to prevent and/or disable fuel transfers and activate audible, visual, and communication links like fire alarms, pumps, and fire suppression systems. Such sensors such as optical or magnetic can detect infrared, ultraviolet, heat, or a rate of rise in temperature. Such devices can activate fire alarms and the like. Any fire/flame scanners or laser sensors, fusible/friable links are within the scope of the present invention. This includes any means to detect fire hazards. Complex (multiple or higher level) resets are typically required for fire system such as both a key and code. The sensors described may also be used in conjunction with standard fire detection systems as a cascade of controls.

[0045] To prevent enhancement of the dangers of further fire or explosion; an optional relay or digital or analog logic function that is activated by a fire detection system of one or more optical, magnetic, ultrasonic sensors or links in combination with one or more micro-switches combine to provide and/or trigger/ENABLE an override thus disabling the lock-out system(s) and liberating the vehicle(s) while fire or explosion risks exist. This enables the vehicle(s) to be moved away from the fire or explosion source, or away to distance itself from spreading further fire or explosion dangers, whether another fueling vehicle is present, or fueling is taking place from a storage vessel. Optical sensor(s) such as infrared, ultraviolet, individually or combined, can sense fire and/or heat; also sensor(s) such as rate of temperature rise and ionization can detect excessive temperature and smoke. Fusible/friable links/plus other sensors such as an acoustical or ultrasonic sensor system receiver(s) can detect loud sudden noises/sound waves such as those created by a rapid expansion of molecules in a confined environment, or explosions. Any sensor activation usually also initiates the system to close the isolation valve(s), and stop/mitigation of fuel flow transfers; plus de-activate or activate any vehicle or automatic fuelling release systems that may exist, or release one initiated with a lock-out.

[0046] All motion and fire/heat sensors are generally coupled to a processor. The processor executes stored instructions from a memory, and makes decisions using artificial intelligence techniques to determine a course of action. As stated, the action might just be a fueling shutdown, or it might be a complete disconnect of the fueling system from the vehicle. The sensors and/or processor can be part of the fueling supply system apparatus, or they can be on the vehicle, or both.

[0047] The use of optical sensor(s) such as infrared temperature or fiber optic sensors to detect the presence or absence of a Liquefied Natural Gas cryogenic temperature, or temperature differential detection, can determine the presence or absence in fueling lines, and thus a relay or digital or analog logic function combine to disable and produce a vehicle lock-out. These can also be flow switches or flow meters with transmitters. The above-listed sensors sense the presence of the natural gas fill hose in proximity to a tank fill adapter coupled to a natural gas tank.

[0048] The use of magnetic sensor(s) such as “Mag-Meter”, Coreolsis flow meter (U-Tube), density meter (LVDT/strain gauge), or mass flow (temperature/pressure compensated flow meter), plus other methods of indicating flow are within the scope of the present invention. The above-listed sensors sense presence of a natural gas fill hose in proximity to a tank fill adapter coupled to a natural gas tank. These sensors produce a signal or relay either digital or analog Logic function that combines to produce a vehicle lock-out signal.

[0049] The use of ultrasonic sensor (sensors) such as flow meter, which can be an external type that clamps or monitors from exterior of flow line, or it can internally measure flow with-in lines (submersed) is also within the scope of the present invention. Also any other method that utilizes ultra-sonic, radar, or other waves for detection/proximity is within the scope of the present invention. Ultrasonic sensors sense the presence of a natural gas fill hose in proximity to a tank fill adapter coupled to a natural gas tank, and sense or guide manual and/or automatic fuelling systems to sense proximity, or that a particular mechanical part is, or is not, in a particular position; such as a fueling rack, tray, arm, hose, articulation or extension of hose-line or fuelling devices and/or connections.

[0050] The use of optical sensors, such as infrared, ultraviolet, laser, fiber optic, visible or non-visible light to detect the presence of a natural gas fill hose in proximity to a tank fill adapter coupled to a natural gas tank is within the scope of the present invention. These sensors can measure interference of a light beam, distance, obstruction, light differential, existence or non existence, proximity, and whether a part is, or is not, in a particular position The optical sensors can have transmitters that communicate wirelessly such as by radio or light. The sensors can guide manual and/or automatic fuelling systems with a natural gas fill hose to sense proximity, or that a particular mechanical part is or is not in a particular position; such as a fuelling rack, tray, arm, hose, line, articulation, or extension of hose-line or fuelling devices and/or connections.

[0051] Also any standard temperature sensors, pressure sensors or flow transmitters can be used to sense presence of a natural gas fuel fill hose in proximity to tank fill adapter coupled to a natural gas tank. All the above sensors can have transmitters that may communicate wirelessly such as by light or radio. Different level resets can be made available for operators to reset various system upsets.

[0052] All the above safety systems, sensors, relays, triggers, micro-switches, over-rides, lock-outs, resets, and events should be continuously recorded, plus all logged logic data is identified (I.D.'d) all with current time and date stamps, and will be available for print-out if needed. Data recording can be local or remote, or both. Data can be transmitted wirelessly to a remote location and can be transmitted over a network such as the Internet if desired.

[0053] Turning to FIG. 7, a vehicle being fueled 200 can be seen attached to a fueling system 201 with a fuel line 202 that passes between isolation valves 203 and 204 on the system and vehicle respectively. There is an automatic fuel line release 205 and an automatic vehicle release 211. Some vehicles, such as land vehicles, may not have an automatic vehicle release. However, trains and marine vessels usually will have. A processor 206 with memory 207 executes stored instructions. The processor 206 interfaces with fire and explosion sensors 209 and motion sensors 208. The processor executes artificial intelligence routines or other algorithms that allow determination of when there is too much vehicle motion, and if there is a fire or explosion. If a determination is made of too much motion, the isolation valves 203 and 204 can be automatically shut off. In more severe conditions such as extreme or slip-away motion, the fuel line 202 may be released from the vehicle via the fuel line release 205, and the vehicle 200 may be released from the fueling system via the vehicle release 211. In the case of a land vehicle, the vehicle lockout 210 may be over-ridden by the processor 206 so the vehicle can be started and/or moved. It is understood, that the processor 206 may be in the vehicle 200, part of the fueling system 201, or split between the two as two separate processors. Given the numerous possible danger conditions or scenarios, the processor programming should be able to evaluate and act on many different sensor-reported conditions.

[0054] As stated, the present invention relates generally to the fields of vehicle safety and compressed as well as liquefied gases, More particularity to safety systems related to natural gas powered vehicles such as spacecraft, launch rockets, and aircraft utilizing a multiple redundant system and method for preventing an operator, driver, or pilot from starting or moving a compressed gas vehicle with oxygen trim if the high pressure gas fill systems are not correctly and completely disconnected from the vehicle.

[0055] Today, a wide array of inner-space and outer space travel are providing launch vehicles, spacecraft, rockets, subsonic and supersonic vehicles; some with rocket bi-propellant engines and some with hybrid propulsion (natural gas turbine-generator), others have turbo fan, some with afterburners, and even ramjet engines for cargo transport, satellite launching, exploration, probe vehicle transit, and human transfers to Various locations in space (International Space Station) and faster, more efficient global transits/travel. These vehicles (spacecraft/both inner and outer) possibly bound for multiple planets, for various exploration, observation, security, and transit are now being fuelled with natural gas (in liquefied state) (LNG), or the natural gas chemical family (such as ethane, propane, hydrogen, butane, and other compounds).

[0056] It is well known and understood that natural gas composition varies from different regions, and pure methane (also considered natural gas) is more process intense to scrub/refine/produce.

[0057] It is also well known in fire sciences that the combustion triangle requires three elements:

[0058] 1) FUEL 2) Oxygen 3) Ignition Source

[0059] In order for natural gas fuelled rocket propulsion to achieve the proper specific Impulse; natural gas fuel must utilize an oxidizer such as oxygen, directly supplied or derived from an oxidant. Oxygen can also be compressed, scrubbed, refrigerated and condensed into a liquid state, to maximize storage space. Liquid oxygen (LOX) vaporized into pure oxygen gas can be mixed with vaporized natural gas fuel. This oxygen enriched fuel produces a clean, green, excellent propellant for rockets, spacecraft, aircraft vehicles.

[0060] Liquidified natural gas (LNG) has several advantages for these modern vehicles:

1) Liquidified natural gas is more dense than other existing fuels; therefore, reducing fuel tank size.
2) Liquidified natural gas is very close in temperature to that of liquidified oxygen, simplifying storage, which was a major engineering obstacle.
3) Natural gas turbine! internal combustion engine driven turbo pump seals need only have a narrow temperature band, reducing temperature differential issues.
4) No ullage gasses are necessary due to the higher vapor pressure of liquidified natural gas.
5) Natural gas is less evaporative in space, thus increasing efficiency.
6) Natural gas and oxygen have a positive chemical affinity.
7) Natural gas is green and more environmentally friendly, and non toxic than other fuels.
8) Methane can most probably be harvested on Mars, Titan, Jupiter, and other planets; providing missions with return fuel.

[0061] Commonly developed spacecraft/vehicles of various makes, models and propellants exist, each entity having various promises, but all share the same goal: SAFE, EFFICIENT, spacecraft/vehicles. Natural gas and oxygen can be handled safely, utilizing the Best Available Technologies. Intelligent systems, utilizing intrinsically safe sensors can mitigate risks during fuelling, and filling of oxygen or fuel enrichment and the natural gas fuel itself.

[0062] During fuelling events, or anytime fuel and or oxygen is present, proper atmospheric monitoring systems and controls can mitigate risk of deflagration detonation and explosion. Monitoring, both CH4 and O2 (deprivation and enrichment) atmospheres is an absolute for safety. Optical sensors such as fiber optic sensors, both closed cell, and open path, may be used along with electro-chemical detection. These sensors all may communicate wirelessly either by radio or light with one or more central or remote systems. Analyzers may also be utilized to perform atmospheric monitoring. Systems such as Ramen Spectroscopy methods are within the scope of this invention.

[0063] Natural gas in air has a Lower explosive limit (LEL) of 5%; and an upper explosive limit (UEL) of 15%. However, when pure oxygen is present, the LEL remains approximately 5%, but the Upper Explosive limit Is increased to between 59% to 61% (depending on natural gas composition). With the introduction of pure oxygen, the atmosphere is orders of magnitude more dangerous, because oxygen also Lowers the Ignition temperature and energy required for ignition. A fuel, oxygen, or both leak will enrich the surrounding atmosphere which can have disastrous consequences. The smallest spark, arc, rapid pressurization, acoustical resonance, friction, or even spontaneous combustion may ignite the now flammable/highly combustible-explosive mixture into a runaway exothermic reaction, or rapid expansion of molecules in a confined or unconfined space in an instant. An optical fiber optic sensor for oxygen detection alone or in combination with spectrometer is able to detect oxygen levels of from 0% to 100%. For methane, an optical/fiber optic sensor alone, or in combination with spectrometer, will detect L.E.L. with a range of 0% to 100% of explosive limits. The preferred method is to combine both types of sensors into a single analyzer to process different L.E.L ranges corresponding to different oxygen levels.

[0064] Safely containing the fuels and oxidizers at all times is critical, but during Fuelling, it is paramount. Safe vehicle disengagement/lock-out, preventing ignition or movements utilizing one or more sensors in combination with one or more micro switches that can be optical, magnetic, or ultrasonic is within the scope of this invention. For different levels of safety different combinations of sensor may be used, with the lowest level having a single proximity sensor sensing the presence or absence of a high pressure fill hose. The highest level of safety is achieved by having separate proximity sensors on the fuel and oxygen fill hose fittings, gas cap covers, and a manual or automatic safety valve with a redundant micro switch. An optional over-ride that may be restricted as to the number of times it can be used can allow starting with a faulty sensor in order to allow maintenance. This system should be active during both test stand firings and actual launch or flight take/lift offs. Some countries have enacted “NO FLY” Zones perimeters over LNG facilities.

[0065] In order to detect omni-directional vehicular/Space/aircraft movements/distances, multiple sensors may perform different functions alone, or in a cascading/subroutine control system to perform a vehicle/space/aircraft “LOCK-OUT”. The use of one or more sensors in combination with one or more micro-switches or other switches combines to automatically determine when threshold limits are exceeded, and can initiate a “LOCK-OUT” of the fueling system closing isolation valve/valves to prevent/disable fuel/oxidizer flows/transfers. The sensors, such as optical, magnetic, ultrasonic, accelerometer, or others may detect any or excessive movement of the vehicle (above or greater than predetermined limits). One or more sensors, or all of these sensors combined, can monitor and control fuel and oxidizer flows and instantly switch the system to a “LOCK-OUT” state, as well as activating one or more visual and/or audible alarms. Usually fuel/oxidizer flow can be reactivated by operator when a safe condition is assured.

[0066] Different vehicles may require different types of controls. For example, excessive movements may relay, trigger, or enable an “OVER-RIDE” system, thus disabling the “Lock-Out” system(s), but will keep fuel flow isolation valve(s) closed (safe state) and liberating the vehicle(s) until proper control and conditions are achieved. In addition, they can de-activate or activate any vehicle or automatic fuelling release system that may exist, or any initiated by lock-out. Multiple variations can be used with multiple steps and sequences to maintain a “Safe State” with isolation valve(s) in a closed position, and if predetermined safe conditions exist, vehicle movement can be allowed by automatic activation of an “OverRide”.

[0067] To detect hazardous fire conditions, the use of one or more sensors in combination with one or more micro-switches combine to automatically close the isolation valve (valves) to prevent/disable fuel flow! transfers, and activate audible, visual, communication links, fire alarms, pumps, and fire suppression systems. Sensors such as optical or magnetic and the like can detect infrared, ultraviolet, or a rate of rise of temperature. These devices can activate fire alarms, plus any other fire/flame scanners/laser sensors, as well as fusible/friable links that can also included. Any means, sensor or technique to detect a fire hazard are within the scope of the present invention including, but not limited to, complex (multiple or higher level) resets required for fire systems such as both keys and codes.

[0068] To prevent enhancing/enhancement of the dangers of further fire or explosion, an optional relay or digital or analog logic function that is activated by a fire detection system of one or more optical, magnetic, ultrasonic sensors or links in combination with one or more micro-switches can combine to provide a Lock-Out or override a Lock-Out. The override liberates vehicle(s) while fire or explosion risks exist, enabling vehicle(s) to be moved away from fire or explosion source or away to distance itself from spreading further fire or explosion dangers.

[0069] Optical sensors such as infrared and ultraviolet, individually or combined, can sense fire and or heat. Also sensors such as rate of rise and ionization can detect excessive temperature and smoke. Fusible/friable links! plus other sensors such as an acoustical or ultrasonic sensor system receivers can detect sudden loud noise/sound waves such as those created by a rapid expansion of molecules in a confined environment, or explosions. Any sensor activation can also cause the system to close the isolation valve(s) and stopping/mitigation of fuel flow transfers; plus de-activate or activate any vehicle or automatic fuelling release systems that may exist or having been initiated with a Lock-Out.

[0070] The use of optical sensors such as infrared temperature sensors or fiber optic sensors to detect the presence or absence of Liquefied Natural Gas/oxygen, cryogenic temperatures, or temperature differentials can determine presence or absence in fueling lines of LNG. Thus, a relay or digital or analog logic function can combine to disable and produce a vehicle “Lock-Out”. This can also be include either a flow switch or a flow meter with a transmitter. The above listed sensor sensors can also sense presence of a natural gas/oxygen fill hose in proximity to a tank fill adapter coupled to a natural gas/oxygen tank.

[0071] The use of magnetic sensors such as “Mag-Meter”, Coreolsis flow meter (U-Tube), Density meter (LVDT/strain gauge), or Mass Flow (temperature/pressure compensated flow meter) plus other methods of indicating flow are within the scope of the present invention.

[0072] Ultrasonic sensors such as a flow meter which can be an external type that clamps or monitors from exterior of a flow line, or can internally measure flow within lines (submersed), may also be used. Other methods that utilize ultrasonic, radar, or other acoustical waves for detection/proximity are within the scope of the present invention. These ultrasonic sensors sense the presence of a natural gas/oxygen fill hose in proximity to a tank fill adapter coupled to a natural gas/oxygen tank, and sense or guide manual and or automatic fuelling systems to sense proximity or that a particular mechanical part is or is not in a particular position. This may be a fueling rack, tray, arm, hose, articulation, or extension of hose/line or fuelling devices and/or connections/connectors.

[0073] Optical sensors, such as infrared, ultraviolet, laser, fiber optic, visible or non-visible light may also be used to detect presence of a natural gas/oxygen fill hose in proximity to a tank fill adapter coupled to a natural gas/oxygen tank. These sensors can measure interference of a light beam, a distance, an obstruction, light differential, existence or non existence of parts, proximity, or whether a part is or is not in a particular position. Any sensor can have one or more transmitters/transceivers that communicate wirelessly such as by radio or light. These sensors can also guide manual and or automatic fuelling systems with a natural gas/oxygen fill hose to sense proximity or that a particular mechanical part is, or is not, in a particular position such as a fuelling rack, tray, arm, hose, line, articulation, or extension of hose/line or fuelling devices and or connections/connectors.

[0074] All the above safety systems, sensors, relays, triggers, micro-switches, over-rides, lock-outs, resets, and events can be continuously monitored, recorded, and all logged data can be identified with a unique ID relating to location and part number along with current time and date stamps. All recorded data can be print out upon request.

[0075] FIG. 8 shows an example of a LNG/LOX fueling safety system according to an embodiment of the present invention. The rocket, aircraft or other vehicle 300 being fueled is attached to a fueling system 310 with an LNG fuel line 303 and a LOX oxidizer line 304. The fueling system 310 has a safety lockout 311 that can very rapidly stop fueling (in the order of milliseconds or faster). A processor 301 or other logic in conjunction with a memory 302 acts as a logic circuit. The processor is coupled to a fire/explosion sensor 306, a LNG presence sensor 305 and a LOX oxygen above ambient concentration sensor 308. The processor 301 is also coupled to an LNG hose proximity detector 307 and a LOX hose proximity sensor 309. The processor 301 or logic circuit, upon sensing a dangerous condition from any one of the coupled sensors, immediately (in microseconds) sends a command to the fueling system lockout 311 to stop fueling. Fast shutoff valves in the fueling system 310 can shut off fueling flow as quickly as mechanically possible. Many other sensors and sensor types previously discussed can be incorporated into this system as needed. These can include motion detectors and detectors on isolation valves.

[0076] Several descriptions and illustrations have been presented to aid in understanding the features of the present invention. One with skill in the art will realize that numerous changes and variations may be made without departing from the spirit of the invention. Each of these changes and variations is within the scope of the present invention.