| 摘要 |
<p>A safety device for controlling an engine M comprises first and second sensors e.g. variable resistance temperature sensors C1, C2, and at least two channels V1, V2 for processing data measured by sensors C1, C2. Each of the channels comprises a command module K1, K2 and a power supply Al, A2. A relay R1, R2 at the input to each channel connects the sensor to the active channel, so that both sensors are only connected to the input and power supply of the active channel. The active channel V1, V2 sends a command signal to its respective relay R1, R2, to connect the respective sensor C1, C2 to the active channel. The passive channel does not send a command signal to its relay, and the relay defaults to connect its associated sensor to the other, active, channel. This ensures redundancy of sensors, even in the event of a channel malfunction. Accuracy is improved by connecting each sensor to only one channel at any time.</p> |
