DEVICE AND METHOD FOR CHECKING SAFETY-RELEVANT SWITCH-OFF PATHS IN CONTROL UNITS DURING ONGOING ENGINE OPERATION

Abstract

A device and a method for checking switch-off paths in control units of internal combustion engines during ongoing engine operation.

Claims

1-2. (canceled)

3. A device for checking switch-off paths in a control unit of an internal combustion engine during ongoing engine operation, comprising: a microcontroller; a voltage monitoring unit configured to monitor a voltage in the control unit; a monitoring module configured to monitor at least one state; and three switch-off paths.

4. A method for checking switch-off paths in a control unit of an internal combustion engines during ongoing engine operation, comprising including at least the following steps: ascertaining a suitable or admissible time window, as a function of a clock and/or of a phase and/or of a rotational speed of the internal combustion engine; carrying out a switch-off path test within the time window, the time window being a time window in which components of the internal combustion engine are not activated; and repeating the switch-off path test in the event of an error within a defined time interval to a next check to prevent the rotational speed from dropping.

Description

BRIEF DESCRIPTION OF THE DRAWING

[0007] Exemplary embodiments of the present invention are illustrated in the figures and explained in greater detail below.

[0008] FIG. 1 shows a circuit diagram of one exemplary embodiment of the circuit according to the present invention.

[0009] FIG. 2 shows a time profile of a test step.

[0010] FIG. 3 shows a flowchart of one exemplary embodiment of the method according to the present invention.

DETAILED DESCRIPTION OF EXAMPLE EMBODIMENTS

[0011] FIG. 1 shows a device 10 for checking the switch-off paths in the control units of internal combustion engines. Circuit 10 includes a microcontroller 20. The microcontroller is provided to control the engine management functions of an internal combustion engine. A voltage monitoring unit 30 monitors the voltage in the control unit. A monitoring module 40 is provided to monitor at least one state. Furthermore, circuit 10 includes three possible switch-off paths. These are “switch-off via ABE” (controlled by voltage monitoring unit 30), “switch-off via WDA” (controlled by monitoring module 40), and “switch-off via error pin” (controlled by microcontroller 20). The switch-off path test includes several test steps. If the test steps are processed sequentially, the total duration of the switch-off path test is 20 ms to 40 ms. The deactivation of the output stages takes only 2.2 ms to 4.4 ms per test step. The object of the present invention is to carry out the deactivation during ongoing engine operation. However, the deactivation is carried out within a time window, in which no torque-relevant activations take place.

[0012] In engines having a number of cylinders ≤6, a sufficiently great time window is to be found without torque-relevant activations at low rotational speeds. The time window is in this case ≤4.4 ms at rotational speeds <2,000 rpm. The deactivation of the output stages may be carried out in this case between two torque-relevant activations, without the torque-relevant activations themselves being affected. In engines having a small number of cylinders, it is necessary to suppress interruptions of torque-relevant activations, since this makes them more prone to a drop in the rotational speed than larger engines.

[0013] In engines having a number of cylinders >6, a failed torque-relevant activation has a smaller effect on the rotational speed, since these engines run more smoothly. The point in time of the gap is a function of the number of cylinders and the angle range, in which the torque-relevant activations take place. The time span, during which the test is started, must therefore be applied.

[0014] FIG. 2 shows the time profile of a test step in an injection gap. It must be ensured that the test is carried out regularly to discover dormant errors. The time between two complete tests must be applied and may be established according to the application and the safety requirements. The time between two complete tests must be determined as a function of the application. The latter is effected by the duration between “engine on” and “engine off” and the failure rates of the components involved (microcontroller 20, voltage monitoring unit 30, and monitoring module 40).

[0015] The time between the individual test steps is applicable with the aid of a suitable application tool (for example INCA). The exact value must be determined in the project-specific context; it must be selected in such a way that all test steps are completed before the new test cycle (time between two complete tests) starts. The time between the test steps is necessary to avoid relevant drops in the rotational speed, in the event that a torque-relevant activation is indeed prevented as a result of the test.

[0016] The angle ranges, in which injections/ignitions may be active, are known in the project-specific context, see FIG. 3.

[0017] FIG. 3 shows a method in accordance with an example embodiment of the present invention for checking switch-off paths in control units of internal combustion engines during ongoing engine operation, including at least the following steps: [0018] ascertaining a suitable or admissible time window or point in time as a function of the clock and/or of the phase and/or of the rotational speed of the internal combustion engine [0019] carrying out the switch-off path test within a time window, in which the components of the internal combustion engine are not activated [0020] repeating the check in the event of an error within a defined time interval from the next check in order to prevent the rotational speed from dropping.

[0021] In state 100, the method is in its starting state. In 110, it is detected that the control unit software is running. If it is detected in method step 120 that an admissible time window or point in time is reached, the switch-off path test is started in 130. In 140, the switch-off path is selected.

[0022] There is a fixedly defined sequence, in which the tests are carried out.

[0023] Sequence: [0024] 1. Test “switch-off via WDA” [0025] 2. Test “switch-off via error pin” [0026] 3. Test “switch-off via ABE”

[0027] In 150, a suitable or admissible time window or point in time is selected as a function of the clock and/or of the phase and/or of the rotational speed of the internal combustion engine. In 160, it is checked, whether the test for the selected switch-off path was successful. If the test for the selected switch-off path was not successful, a certain time is waited in 170 to stabilize the combustion. In 180, the switch-off path test is then repeated.

[0028] If the test for the selected switch-off path in step 160 was successful, a certain time is waited in 190 to stabilize the combustion. In step 200, it is checked whether all switch-off path tests were carried out. In the case of a positive result, the method starts again with step 110. In the case of a negative result, the method starts again with step 140.