| 摘要 |
A vehicle engine control system is described. The system comprises a main microprocessor (10) for controlling the vehicle engine and a monitoring microprocessor (12) for monitoring the correct operation of the main microprocessor (10). The monitoring microprocessor (12) is configured to receive a first signal (20) indicative of a driver command, and a second signal (18) indicative of an actual engine output parameter. The monitoring microprocessor (12) is further configured to determine from the first and second signals (20, 18) if the actual engine output parameter is within a predefined acceptable operating envelope. In the event that a fault is detected in the main microprocessor (10), the main microprocessor is allowed to continue to operate the vehicle engine provided that the actual engine output parameter is within the acceptable operating envelope as monitored by the monitoring microprocessor (12). |
