# US 4,509,110 A · Method and apparatus for detecting failures in a control system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 4,509,110 A
- Document ID: US4509110A
- Status: Granted
- Kind: A
- Application number: 06/386,136
- Filed: 1982-06-07
- Granted: 1985-04-02
- Earliest claimed: 1982-06-07
- Assignees: United Technologies Corporation
- Inventors: Adelard Levesque, Jr.; John P. Rembold
- Web page: https://patentgrep.com/patent/US4509110A

## CPC

- G05B 23/0245: {based on a qualitative model, e.g. rule based; if-then decisions}
- G05B 13/048: {using a predictor}
- G05B 17/02: electric
- G05B 2219/42307: Compare actual feedback with predicted, simulated value to detect run away
- G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G)

## Abstract

A system for detecting the failure of a control system and its object includes a mathematical model of the control system and its object which continuously predicts the output of the object. An error signal is continuously calculated which is the difference between the model output and the actual output of the object. Error signals exceeding a predetermined minimum value or deadband are integrated; but the integral is reset to zero whenever the error signal value falls within a predetermined range indicative of normal steady state operating tolerances. If the value of the integral reaches a specified level before being reset to zero, a failure signal is triggered. This failure detection system can be made sensitive to relatively small error signals without triggering a false failure signal if the small error was the result of only a temporary problem or due to inaccuracies in model simulation.

## Claims

### Claim 1

A system for detecting the failure of apparatus, said apparatus including control means and an object of said control means, said system comprising:
model means simulating the input/output characteristics of said apparatus;
means for providing the same input to said apparatus and to said model means;
means for continuously comparing the output of said object to the apparatus input and for operating on said object to eliminate any difference between the compared input and output;
means for continuously comparing the output of said object to the output of said model means and for calculating error signals corresponding to the differences therebetween;
means for integrating, over time, the absolute value of said error signals which are outside a predetermined deadband having limits -a and +b;
means for generating a failure signal when said integral exceeds a predetermined value; and
means for resetting said integral to zero whenever the value of the error signal is within predetermined limits -c and +d, where the absolute value of c is less than or equal to the absolute value of a, and the absolute value of d is less than or equal to the absolute value of b.

### Claim 2 (depends on 1)

The system according to claim 1 wherein a equals c and b equals d.

### Claim 3 (depends on 1, 2)

The system according to claim 1 or 2 wherein said predetermined limits -c and +d are the limits of normal steady state operating tolerances.

### Claim 4

A method for detecting the failure of apparatus, said apparatus including control means and the object of said control means, including the steps of:
providing a model whose input/output characteristics simulate the input/output characteristics of said apparatus;
providing the same input to said apparatus and to said model;
continuously comparing the output of said object to the apparatus input and for operating on said object to eliminate any difference between the compared input and output;
continuously comparing the output of said model to the output of said object and generating error signals corresponding to the difference therebetween;
integrating, over time, the absolute value of those error signals outside a predetermined deadband having limits -a and +b;
generating a failure signal when the integral of the error signals exceeds a predetermined value; and
resetting the integral to zero whenever the value of the error signal is within the predetermined limits -c to +d, which limits are the same as or within said deadband limits -a and +b.

### Claim 5 (depends on 4)

The method according to claim 4 wherein said predetermined limits -a and +d are the limits of normal steady state operating tolerances.

### Claim 6 (depends on 4, 5)

The method according to claim 4 or 5 wherein said control means continuously compares the output of said object to the input to said apparatus and operates on said object to eliminate any difference between the compared input and output.