| 摘要 |
A safety control apparatus for a reciprocating engine equipped with two control systems to be able to sufficiently cope with a false normal state in which a normal state signal is output to an observation circuits of the control system despite the fact that an abnormal output has been fed to the actuators of the fuel injection system or the ignition system as a result of an abnormal operation in the control unit in the control systems. The pair of control systems are provided with a false normal state detection circuits for detecting the false normal state in addition to the provision of first and second control units for controlling the engine and an operation observation circuit therefor. When the false normal state detection circuit judges that the control system now in operation is abnormal, the engine control system is changed over to the standby system via the output change-over circuit to safely control the engine. When it is attempted to detect abnormality in the fuel injection system by the false normal state detection circuit, an occurrence of misfiring in at least any one of the cylinders of the engine is detected and when it is attempted to detect an abnormality in the ignition signal, a judgement is rendered that ignition timing is abnormal when the ignition timing of at least any one of the cylinders of the engine lies outside the normal range of ignition timing, and the engine control system is changed over to the standby system. This makes it possible to safely control the fuel injection timing and the ignition timing of a multi-cylinder reciprocating engine.
|
