The invention relates to a vibration monitoring device and more specifically to a testable vibration monitoring device for use in a severe environment, and in particular for monitoring the stability of a bogie of a rail vehicle. It also relates to a method for monitoring vibration with such a device and to a method for testing the operability of such a device.
Conventional bogies are provided with passive stabilisation means like yaw dampers or friction plates, which counteract the tendency of the bogies to follow a sinusoidal path. These stabilisation means are also used to increase the speed—called “instability limit”—at which the rather smooth sinusoidal run deteriorates into bogie hunting, causing bad ride comfort, high forces between wheels and rails and eventually a risk of derailment.
To minimize the risk of hazardous run e.g. caused by defective yaw dampers, the TSI HS (Technical Specification of Interoperability—High-Speed) released by the European Commission contains the requirement to install a means on board of high-speed trains, which can detect instability in the bogie movement of a train. An algorithm for detecting the running instability of bogies of rail passenger vehicles is defined in UIC leaflet 515.5. According to this algorithm, instability is detected whenever the lateral acceleration of the bogie frame above a predetermined threshold in the range of 4 Hz to 8 Hz presents more than a predetermined number (e.g. 6) of consecutive peaks above a predetermined threshold (e.g. 8 m/s2) with a predetermined period of time (e.g. 500 ms).
An instability monitoring system for a bogie is known from EP 1 197 739. The bogie is provided with two longitudinal accelerometers located on each side of a longitudinal centre plane of the bogie. Signals from the two accelerometers are compared and processed to determine if they differ by more than a predetermined amount, in which case an alarm signal is triggered.
A vibration monitoring system for a rail vehicle is known from the documents DE 100 20 519, DE 100 20 520 and DE 100 20 521. One or more accelerometers, preferably tri-axial accelerometers, are connected to a central signal processing unit located at a remote location on the train consist. While this type of configuration may prove adapted to the monitoring of specific vehicle subsystems like brakes, bogies or car bodies for diagnostic purposes, it does not provide the level of safety and reliability required for safety components. In particular, the transmission of the acceleration signals from the accelerometers to the remote processing unit may suffer from an insufficient signal to noise ratio. Moreover, the failure of one accelerometer or of the central signal processing unit may remain undetected.
The existing attempts to implement an instability detection device are based on sensors (e.g. accelerometers) and a remote software-based processing unit, which lacks the ability to fulfill the safety and reliability requirements of CENELEC Standards EN 50126-50129 and hence cannot be certified as being safe. While the risk of instability is reduced by the installation of such devices, it cannot be brought down to 0, since an undetected malfunction of the monitoring device during unstable run is still possible. Testable accelerometers are well known in the art. For example an accelerometer comprising an internal test circuit for moving an inertia mass of the accelerometer from a rest position towards a first of two opposite limits in one testable direction in the absence of vibration is described in DE 43 16 263. However, the testable accelerometers available on the market are not capable of moving the inertia mass selectively towards each of the two opposite limits on each side of the rest position.
The foregoing shortcomings of the prior art are addressed by the present invention. According to one aspect of the invention, there is provided a vibration monitoring device having a reference axis and comprising two accelerometers fixed to a common support, each accelerometer comprising:
an inertia mass movable parallel to the reference axis between an intermediate rest position and two opposite limits,
an internal test circuit for moving the inertia mass from a rest position towards a first of the two opposite limits in one testable direction in the absence of vibration of the common support, and
sensing means for delivering an acceleration signal corresponding to the motion of the inertia mass parallel to the reference axis, the acceleration signal containing a first signal portion corresponding to the motion of the inertia mass between the intermediate rest position and the first of the two opposite limits, and a second signal portion corresponding to the motion of the inertia mass between the intermediate rest position and the other of the two opposite limits,
wherein the testable directions of the two accelerometers are opposite to one another.
The use of two accelerometers adds redundancy to the system. Thanks to the specific arrangement of the accelerometers, it becomes possible to test the vibration monitoring device in two opposite directions and to use the first part of each signal, which can actually be tested, to reconstruct a complete acceleration signal or for monitoring or test purposes. As stated above, testable accelerometers are well known in the art. The internal test circuit may include a capacitive plate cooperating with the inertia mass and connected to a test terminal, such that application of a DC voltage to the test terminal results in a motion of the inertia mass in the testable direction, which simulates a constant acceleration in that direction.
Preferably, the vibration monitoring device further comprises a signal processing unit for processing the acceleration signals delivered by the two accelerometers and for implementing an instability monitoring algorithm delivering an instability signal. According to a preferred embodiment, the vibration monitoring device is further provided with a means for carrying out a test procedure comprising:
activating the internal test circuit of the accelerometers to simulate an instability situation;
carrying out the instability monitoring algorithm;
delivering a positive test result if the instability monitoring algorithm delivers an instability signal and a negative test result otherwise.
The test signals generated by the accelerometers are used to test the operability of both the accelerometers and the instability monitoring algorithm. Advantageously, the means for carrying the test procedure includes a state machine.
According to a preferred embodiment, the instability monitoring algorithm monitors the first signal portions of the two acceleration signals, without taking into account the second signal portions of the two acceleration signals. In other words, the instability monitoring algorithm takes into account only the part of the acceleration signals that can actually be tested. Potential undetectable defects of the accelerometers in their non-testable direction will be without repercussions on the operability of the device.
According to a preferred embodiment, the signal processing units comprise a programmable logic device connected to the two accelerometers and provided with non-volatile logic blocks running simultaneously in parallel and implementing the instability monitoring algorithm. Thanks to the use of a hardware base, and singularly of a programmable logic device (PLD) for running the instability detection algorithm, the instability monitoring device can be assigned a Safety Integrity Level (SIL). Preferably, the programmable logic device can be a field-programmable gate array (FPGA) or a complex programmable logic device (CPLD), which can be provided with a non-volatile erasable and reprogrammable memory such as a flash memory. Hence, there is no need for a configuration device to put the code into the PLD cells. The PLD is immediately operational after start-up.
According to a preferred embodiment, the instability monitoring algorithm includes:
pre-processing the first acceleration signal,
detecting peaks of the pre-processed acceleration signal which are higher than a predetermined acceleration threshold in the testable direction,
incrementing a counter if the time between two consecutive peaks is within a predetermined time window, activating the solid-state safety relay if the counter reaches or exceeds a predetermined counter threshold, and
resetting the counter if no peak has been detected within a predetermined period of time.
This algorithm is based on the requirements defined in UIC leaflet 515.5. The time window has a lower limit (e.g. 150 ms) and an upper limit (e.g. 250 ms), which provide the equivalent in time of the limited bandwidth in the frequency spectrum considered in the standard.
Advantageously the pre-processing of the first acceleration signal includes processing the first acceleration signal through a low pass filter and a high pass filter. The low pass filter is used to eliminate high frequency noise, while the high pass filter is used to eliminate the DC offset experienced in curves or because of an inadequate positioning of the device. Advantageously the two accelerometers are identical so that there is no need to pre-process the signals if they are to be compared or combined or if they are processed in parallel using parallel channels implementing identical logic blocks. For instance, identical accelerometers will have identical gain, so that the same threshold can be used for detecting the peaks of the acceleration signals from the two accelerometers.
According to another aspect of the invention, there is provided a bogie provided with a vibration monitoring device as described hereinbefore. The invention, however, is not limited to the railway industry and its advantages are experienced in other systems or applications combining severe external conditions and high safety requirements.
According to a further aspect of the invention there is provided a method for monitoring vibration with a vibration monitoring device as defined hereinbefore, comprising carrying out an instability monitoring algorithm for delivering an instability signal. Preferably, the monitoring algorithm monitors the first signal portions of the two acceleration signals, without taking into account the second signal portions of the two acceleration signals.
Preferably, the method further includes a test procedure comprising:
activating the internal test circuit of the accelerometers to simulate an instability situation;
carrying out the instability monitoring algorithm;
delivering a positive test result if the instability monitoring algorithm delivers an instability signal and a negative test result otherwise.
The method may also advantageously comprise, for each of the acceleration signals:
pre-processing the acceleration signal to obtain a pre-processed acceleration signal including at least a first portion corresponding to the first portion of the acceleration signal,
detecting peaks of the first portion of the pre-processed acceleration signal which are higher than a predetermined acceleration threshold.
The method may also comprise, for each of the acceleration signals:
incrementing a counter if the time between two consecutive peaks is within a predetermined time window,
delivering an instability signal if the counter reaches or exceeds a predetermined counter threshold, and
resetting the counter if no peak has been detected within a predetermined period of time.
Other advantages and features of the invention will become more clearly apparent from the following description of specific embodiments of the invention given as non-restrictive example only and represented in the accompanying drawings in which:
Referring to
The two lateral acceleration sensors 22A, 22B, depicted in
Different approaches can be used to sense acceleration with such a differential capacitor. The movable plates (i.e., movable with the mass) are each centred between two fixed plates in a rest position. All the fixed plates on one side of the movable plates are electrically coupled together and charged, and all the fixed plates on the other side of the movable plates are also electrically coupled together and charged. In response to an external force/acceleration along the reference axis, the mass with movable plates moves toward one or the other set of fixed plates, thus changing the capacitance between the different plates, which produces an electrical signal. This signal on the fixed plates is amplified, processed and provided to an output terminal 226.
To verify proper operation of the sensors 22A, 22B, a self-test input terminal 228 is provided. Activating self-test causes a step function force to be applied to the accelerometer 22 in a testable direction DA, DB parallel to the reference axis X-X. More specifically, activating the self-test via the self-test input terminal 228 causes the voltage on at least a pair of the fixed plates 229 on one side of the moving beam 221 in a test cell 231 to change. This creates an attractive electrostatic force on a test plate 230 integral with the movable beam 221, causing the beam 221 to move from the rest position toward in a testable direction. This sensor displacement in the testable direction changes the signal seen at the sensor output terminal 226.
Remarkably, the two identical accelerometers 22A, 22B are oriented in opposite directions on the printed circuit board, which means that their outputs have identical absolute instantaneous values and opposite signs when the printed circuit board is subjected to vibration. This also means that their reference axes X-X are aligned and that their testable directions DA, DB are opposite to one another.
The accelerometers 22A, 22B are connected to the programmable logic device PLD via an analog to digital converter A/DC. The programmable logic device can be a field-programmable gate array (FPGA) or a complex programmable logic device (CPLD). It is provided with non-volatile logic blocks running simultaneously in parallel and implementing an instability monitoring algorithm to change the state of the first and second solid-state relays from an active state to a fault state whenever an instability condition is detected.
The digitalised acceleration signals from the first and second accelerometers, illustrated in
Each safety solid-state relay 24a, 24b is provided with two output terminals 41a, 42a, 41b, 42b and is designed to change its state from an active state to a fault state upon change of the corresponding control signal on a control input terminal. The first and second solid-state relays 24a, 24b act as “normally open” contacts, which means that they are closed when energised and open in the absence of control signal. More specifically, an AC control signal of predetermined frequency (e.g. 1000 Hz) is supplied by the programmable logic device 20 to a frequency detector 40 connected to the first solid-state relay 24a in the absence of instability to maintain the first solid-state relay in its active, closed state. In the same circumstances, a DC control signal is supplied by the programmable logic device 20 to the second solid-state relay 24b to maintain it in the closed state. The detection of instability triggers the interruption of the two control signals and the opening of the two safety solid-state relays 24a, 24b.
Referring to
The solid-state relays 24a, 24b, the pairs of test switches 241, 242 and the current detector 243 are connected to the programmable logic device 20 and are realised as optocouplers so that their connections to the programmable logic device 20 are fully isolated from their connections to the test circuit. The programmable logic device 20 is also provided with a finite state machine 50 (see
In a first test sequence, the switching of the solid-state relays is checked. The programmable logic device 20 closes the test switches 241, 242 of the first solid-state relay 24a and interrupts the AC control signal for a predetermined duration while the response of the first solid-state relay 24a is checked by the test current detector 243. If a current is detected by the test current detector 243 during the interruption of the AC control signal the test has failed and the state machine goes to the start-up fault state. Subsequently, the test is repeated for the second solid-state relay 24b, with the appropriate DC control signal being interrupted and switched back ON by the programmable logic device.
In a second test sequence, the internal test circuits of the accelerometers are used to simulate a test pattern that corresponds to an instability situation. A series of N voltage pulses is applied to the test terminals of the two accelerometers. The two accelerometers should then react with 80% of their full scale value and generate N peaks above the detection threshold. After N peaks, the instability monitoring algorithm should generate an instability signal and trigger the two solid-state switches. If no instability signal is generated, the test has failed and the state machine 50 goes to the start-up fault state.
Remarkably, the use of two accelerometers 22A, 22B oriented in opposite directions in each instability monitoring device makes it possible to selectively detect in the actual monitoring algorithm the peaks of each accelerometer signal that corresponds to movements of the inertia mass from the rest position in the testable direction, which has actually been tested. In other words, the peak threshold of the algorithm is set so that the peaks of the accelerometer signal in the direction opposite to the testable direction, i.e. the direction for which the internal test circuit of the accelerometer does not allow testing, are disregarded.
The instability monitoring devices may include other tests, e.g. temperature measurements. The temperature measured by a temperature sensor is compared with lower and upper limits (e.g. between −40 and 95° C.). If the temperature is not within the predefined window, an alarm is triggered.
As illustrated in
Any interruption of the current detected by a current detector 306a, 306b in the safety loop is considered as an instability event and results in appropriate action, e.g. operation of the alarm 308, decrease of the driving power and/or operation of the brakes of the rail vehicle. The ground of each local test DC power supply 244 is isolated, so that the first test sequence referred to above can be carried out simultaneously on all first safety relays 24a, with superposition of the DC power of the safety loop 302a. However, the first and second safety relays of each unit should preferably be tested sequentially to avoid unreliable results, since it is envisaged that both safety loops are connected in series. The instability monitoring system is provided with a test bus for performing controlling the start-up tests various tests on the distributed system to check its operability. The test bus is used to send test request to the instability monitoring device and gather the results.
To test the integrity of the safety loop cabling in a configured train, a special vehicle test can be executed. The instability monitoring devices of the last car shall be shutdown and powered again by means of the circuit-breaker of the rail car. This action will open and close the safety loop at this location and this will be verified in the driver's cab. If this test is positive it is considered that the whole safety loop is working. If not, the action shall be repeated on the instability monitoring device which is located directly upstream and this until the error is found. In such a case, the error in the cabling will be situated between the unit for which the loop is functioning and the next unit downstream. As a variant, the two safety loops can be connected in series between a common power supply and a common current detector.
To limit availability problems in case of failure of one of the instability monitoring devices, it is also envisaged to provide each bogie with a first instability monitoring device 10A and a second instability monitoring device 10B, as illustrated in
The invention is not limited to the embodiments described hereinbefore. The accelerometer or accelerometers can be biaxial or triaxial, in which case the signal from the additional axes can be simply disregarded or processed in parallel with the signal from the first axis. The signals from different axes can also be combined to build an acceleration vector, which will be processed by the programmable logic device. The accelerometers can be of any convenient type, e.g. based on piezoelectric transducers.
The instability monitoring algorithm can have many variants. In particular, the use of a time window with a lower and an upper threshold for counting the peaks can be replaced by more sophisticated numerical filters for disregarding the parts of the signal that are not in the observed frequency range. Instead of processing the signals from the two accelerometers in parallel, the first part of the two signals can be combined to form a new acceleration signal.
If redundancy of the safety solid-state relays is not critical, one option is to eliminate one of the two solid-state relays, in which case the instability monitoring system will be provided with one safety loop only. The instability monitoring system, which has been used in connection with a rail vehicle, can also be implemented in various complex systems in which distributed acceleration measurements are necessary to determine an instability condition, e.g. aircraft or turbines of a power plant.
Number | Date | Country | Kind |
---|---|---|---|
08290887.2 | Sep 2008 | EP | regional |
This application is a National Stage Entry of International Application No. PCT/EP2009/006759, filed on Sep. 18, 2009, which claims priority to European Patent Application Serial No. 08290887.2, filed on Sep. 19, 2008, both of which are incorporated herein by reference.
Filing Document | Filing Date | Country | Kind | 371c Date |
---|---|---|---|---|
PCT/EP2009/006759 | 9/18/2009 | WO | 00 | 6/2/2011 |