System and method for preventing unauthorized modification to engine control software or an engine control system

Patent metadata

Field	Value
Publication number	US-9803610-B2
Application number	US-201414781396-A
Country	US
Kind code	B2
Filing date	Apr 1, 2014
Priority date	Apr 1, 2013
Publication date	Oct 31, 2017
Grant date	Oct 31, 2017

Abstract

A system and method for preventing unauthorized modification to engine control software or an engine control system of, for example, a refrigerated transport application is provided. Particularly, the embodiments described herein prevent unauthorized parties from inadvertently or intentionally making changes to the engine control software used for controlling the engine or the engine control system that could, for example, potentially bypass emission strategies implemented in the refrigerated transport application. Accordingly, emission strategies such as, for example, EPA Tier IV not-to-exceed (“NTE”) regulations can be maintained.

First claim

The invention claimed is:

1. An engine control system comprising:
a power unit that includes an engine; and
a controller configured to activate the engine via an engine activation signal and control the engine using an engine control software, the controller including a relay connected to the power unit,
wherein the controller is configured to detect an unauthorized modification event,
wherein the relay is configured to prevent the engine activation signal from passing to the power unit when the controller detects an unauthorized modification event,
wherein the power unit includes a stop solenoid, the relay is connected to the stop solenoid, and the relay is configured to send the engine activation signal to the stop solenoid when the controller does not detect an unauthorized modification event.
wherein the controller includes a circuit board connected to the relay, the circuit board being configured to send an engine implementation signal to the relay when the controller does not detect an unauthorized modification event, and
wherein the controller includes a feedback connection configured to send the engine activation signal from the relay to the circuit board when the relay passes the engine activation signal to the power unit.

2. The engine control system of claim 1 , wherein the unauthorized modification event is an unauthorized modification to the engine control software.

3. The engine control system of claim 1 , wherein the unauthorized modification event is an unauthorized modification to the engine control system.

4. The engine control system of claim 1 , wherein the relay includes a switch having an ON state and an OFF state, and a solenoid configured to receive the engine implementation signal from the circuit board and configured to change the switch to the ON state upon receipt of the engine implementation signal.

5. The engine control system of claim 4 , wherein the relay is configured to send the engine activation signal to the power unit when the switch is in the ON state and is configured to prevent the engine activation signal from passing to the power unit when the switch is in the OFF state.

6. The engine control system of claim 4 , wherein the controller includes a first connection configured to pass the engine implementation signal from the circuit board to the solenoid, and a second connection configured to pass the engine activation signal from the circuit board to the switch.

7. A method for an engine control system that includes a power unit having an engine, and a controller configured to activate the engine via an engine activation signal and control the engine using an engine control software, the controller including a relay connected to the power unit, the method comprising:
activating the relay to an ON state when the relay receives an engine implementation signal;
the relay sending an engine activation signal to the power unit for starting the engine when the relay is in the ON state and upon receipt of the engine activation signal: and
sending the engine activation signal from the relay to a circuit board of the controller via a feedback connection when the relay is in the ON state and the relay is sending the engine activation signal to the power unit.

8. The method of claim 7 , further comprising:
changing the relay to an OFF state when the relay does not receive an engine implementation signal; and
the relay preventing the engine activation signal from passing to the power unit when the relay is in the OFF state.

9. The method of claim 7 , further comprising:
the controller determining an engine control system error when the circuit board sends the engine implementation signal and the engine activation signal to the relay, and the circuit board does not receive the engine activation signal from the relay via a feedback connection.

10. The method of claim 9 , further comprising:
notifying a user of the engine control system error when the controller determines the engine control system error.

11. The method of claim 7 , further comprising:
a circuit board of the controller sending the engine implementation signal to a solenoid of the relay to activate a switch of the relay to the ON state;
the circuit board of the controller sending the engine activation signal to the switch; and
the switch sending the engine activation signal to the power unit for starting the engine when the switch is in the ON state and upon receipt of the engine activation signal.

Assignees

• Thermo King Corp

Inventors

• Hall Cullen Evan
• Mcginley Gary
• Lucht Erich Albert
• Vanous Michael James
• Turnquist Michael Dean

Classifications

• B60H1/3232

  particularly adapted for load transporting vehicles (B60H1/3226 takes precedence) · CPC title

• F02N11/0803

  characterised by means for initiating engine start or stop (F02N11/0814 takes precedence) · CPC title

• F02B77/08

  Safety, indicating, or supervising devices (thermal insulation F02B77/11; monitoring or diagnostic devices for exhaust-gas treatment apparatus F01N11/00) · CPC title

• F02D29/00

  Controlling engines, such controlling being peculiar to the devices driven thereby, the devices being other than parts or accessories essential to engine operation, e.g. controlling of engines by signals external thereto · CPC title

• B60R2025/041

  Preventing use of engine operating on the fluid supply · CPC title