| 摘要 |
<p>A fail-safe fluid transfer control apparatus has full redundancy in the response to various inputs such as overfill probe signals, ground detection signals, and the like. Independent microprocessor controllers (20,22) independently evaluate the inputs and each output control signal (Alt. permit, Static permit) to close a respective relay (K1,K2) when the inputs indicate that fluid transfer may commence. The relays (K1,K2) are arranged in series such that both must be closed for a fluid transfer to commence. The control signals from each controller include a static signal (Static permit) and an alternating signal (Alt. permit), both of which must be properly output to close its respective relay. Each controller monitors the state of each relay (64,66), and discontinues its control signals if either relay appears to be malfunctioning. Each controller (20,22) runs a different, independently written firmware program to process the detected inputs to prevent a common firmware error. An optical bypass key replaces conventional mechanical keys and transmits an optically encoded signal to the controller for establishing a bypass condition. A preheating circuit is also provided for providing a dynamic voltage supply to standard thermistor probes which may be encountered. <IMAGE></p> |
