IGNITION CONTROL WITH SAFEGUARD FUNCTION

Description

Field of the Invention

[0001] This invention relates generally to ignition control on gas or other fuel-fired appliances and, more particularly, to an ignition control including a microprocessor safeguard for an ignition system.

Background of the Invention

[0002] Ignition controls are customarily used in connection with gas appliances, such as, for example, residential gas furnaces, boilers, water heaters and commercial cooking equipment, equipped with direct spark ignition systems. On gas appliances with direct spark ignition, the stream of gas supplied to the burner of the appliance is directly ignited by a spark. In conventional practice, the ignition spark is provided by an electronic device, such as for example an electronic spark generator. While such direct spark ignition systems generally function properly to quickly ignite the gas flowing to the burner, it is critical that the supply of gas to the burner to be promptly terminated in the event that ignition has not occurred or has failed to sustain a stable flame.

[0003] Conventional ignition control systems used in connection with direct spark ignition gas appliances include a gas valve having an open position and a closed position, an air blower, an ignition source, a flame sensing device and a microprocessor controller. The flame sensing device is operative to detect the presence of a flame within the combustion chamber of the gas appliance and generate a signal indicative of the flame status, i.e. a flame present signal or a no flame present signal. The microprocessor controller oversees the ignition process, as well as controlling the operation of the air blower and positioning of the gas valve.

[0004] In response to the receipt of a demand signal indicating that operation of the burner of the gas appliance is desired, the microprocessor controller will initiate the ignition process. To initiate ignition, the microprocessor controller activates the air blower to initiate the supply of combustion air to the burner of the gas appliance, and then transmits an activation command signal to the ignition device, and then opens the gas valve to initiate the supply of gas into the burner. In response to the activation command, the ignition device begins to generate a series of sparks to attempt to ignite the air-gas mixture forming as the gas flows into the burner. If ignition is successful, a flame is established.

[0005] The microprocessor controller monitors the flame sensing device to ensure that a flame has indeed been established and maintained within the combustion chamber. The flame sensing device is operative to detect whether or not a flame is present in the combustion chamber. If the flame sensing method does detect the presence of a flame, it emits a "flame present" signal. However, if the flame sensing method does not detect the presence of a flame, it emits a "no flame present" signal.

[0006] In conventional practice, the controller triggers a timer circuit upon entry into the ignition process. If within a preset time interval following entry into the ignition process, the controller receives a "flame present" signal, the controller maintains the gas valve in its open position, resets the timer circuit, and goes into a combustion monitoring mode during which the controller will at periodic time intervals, check the signal received from the flame sensing device to verify that the signal received from the flame sensing device is still a "flame present" signal. However, if at the lapse of the preset ignition verification time period, the signal received by the microprocessor controller from the flame sensing device is a "no flame present" signal, the controller will close the gas valve, lockout the gas valve and the ignition device for a preselected lockout time period, and operate the air blower for a preset period of time to purge the gas appliance of any gas remaining in the combustion chamber. The controller will not again initiate an ignition attempt until the lockout time period has expired.

[0007] Thus, the timer circuit acts as a watchdog to prevent uncontrolled release of gas into the combustion chamber when ignition has not occurred within the preset time period following entry into the ignition process. It is critical that the ignition control and oversight function be made as reliable as possible. Failure to terminate gas flow in the event of an ignition failure or a subsequent flame failure, would lead to an undesirable build up of gas within the combustion chamber. For example, U.S. Pat. No. 4,695,246 discloses an ignition control system for a gas appliance that includes a single microprocessor having redundant circuitry.

[0008] The documents WO95/16943A1 and EP0751350A2 both disclose a dual processor control unit to control safety relevant functions of an ignition unit in combination with a flame sensor.

Summary of the Invention

[0009] In an aspect of the invention, an ignition control according to appended claim 1 is provided for controlling an ignition process on a fuel-fired appliance, the appliance having a burner. The ignition control includes a fuel flow control valve having an open position in which fuel flows to the burner and a closed position in which fuel flow to the burner is prohibited, an ignition source operatively associated with the burner, a flame detection device for detecting the presence of a flame at the burner and transmitting a flame status signal indicating flame or no flame, and a controller for overseeing the ignition process of igniting the fuel supplied to the burner, the controller including a primary processor and a secondary processor. The primary processor has functional capability to operate the ignition device, to monitor the flame status signal from the flame detection device and to terminate the ignition process in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process. The secondary processor has functional capability to monitor the flame status signal from the flame detection device and to terminate the ignition process in the event that the primary processor does not close the fuel flow control valve in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process. Each of the primary processor and the secondary processor has functional capability to position the fuel flow control valve in its closed position to independently terminate the ignition process.

[0010] In an aspect of the invention, an ignition control is provided for controlling an ignition process on a direct spark ignition gas appliance, the gas appliance having a burner. The ignition control includes a gas valve having an open position in which gas flows to the burner of the gas appliance and a closed position in which gas flow to the burner of the gas appliance is prohibited, an ignition source operatively associated with the burner of the gas appliance, a flame detection device operatively associated with the gas appliance for detecting the presence of a flame at the burner and transmitting a flame status signal indicating flame or no flame, and a controller for overseeing the ignition process of igniting the gas supplied to the burner of the gas appliance, the controller including a primary processor and a secondary processor. The primary processor has functional capability to operate the ignition device, to monitor the flame status signal from the flame detection device and to terminate the ignition process in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process. The secondary processor has functional capability to monitor the flame status signal from the flame detection device and to terminate the ignition process in the event that the primary processor does not close the gas valve in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process. Each of the primary processor and the secondary processor has functional capability to position the gas valve in its closed position to independently terminate the ignition process.

[0011] In an embodiment, the primary processor has functional capability to monitor the operation of the secondary processor. In an embodiment, the secondary processor may continuously transmit a status signal to the primary processor. In an embodiment, the secondary processor has functional capability to monitor the operation of the primary processor. Each of the primary processor and the secondary processor may comprise a microprocessor.

[0012] In an aspect of the invention, a method according to appended claim 6 is provided for overseeing an ignition process on a fuel-fired appliance. The appliance has a fuel burner, a fuel flow control valve, an ignition source operatively associated with the burner, and a flame detection device for detecting the presence of a flame at the burner and transmitting a flame status signal indicating flame or no flame. The method includes the steps of : providing a primary processor for initiating the ignition process, for monitoring the flame status signal and for terminating the ignition process in the presence of a flame status signal indicating no flame after a specified period of time following the initiation of the ignition process, and providing a secondary processor for monitoring the flame status signal independently of the primary processor and for terminating the ignition process in the event that the primary processor fails to terminate the ignition process in the presence of a flame status signal indicating no flame after a specified period of time following the initiation of the ignition process. The secondary processor may independently of the primary processor terminate the ignition process by closing the fuel flow control valve to preclude the delivery of fuel to the burner in the event that the primary processor does not close the fuel control valve in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process.

[0013] In an aspect of the invention, a method is provided for overseeing an ignition process on a gas appliance. The gas appliance has a burner, a gas valve, an ignition source operatively associated with the burner of the gas appliance, and a flame detection device operatively associated with the gas appliance for detecting the presence of a flame at the burner and transmitting a flame status signal indicating flame or no flame. The method includes the steps of : providing a primary processor for initiating the ignition process, for monitoring the flame status signal and for terminating the ignition process in the presence of a flame status signal indicating no flame after a specified period of time following the initiation of the ignition process, and providing a secondary processor for monitoring the flame status signal independently of the primary processor and for terminating the ignition process in the event that the primary processor fails to terminate in the presence of a flame status signal indicating no flame after a specified period of time following the initiation of the ignition process. The secondary processor may independently of the primary processor terminate the ignition process by closing the gas valve to preclude the delivery of gas to the burner in the event that the primary processor does not close the gas valve in the presence of a flame status signal indicating no flame after a specified period of time following an initiation of the ignition process.

[0014] In an embodiment, the method also includes the step of the primary processor monitoring the operation of the secondary processor. In an embodiment, the method also includes the step of the secondary processor monitoring the operation of the primary processor. In an embodiment, the method includes the step of the secondary processor transmitting a status signal to the primary processor whenever the secondary processor is in an active state.

[0015] In an embodiment, the method includes the step of the secondary processor cycling in sequence through a primary detect mode, an idle mode and a monitor mode. In an embodiment, the secondary processor may move from any of the primary detect mode, the idle mode and the monitor mode directly into a lockout mode.

Brief Description of the Drawings

[0016] For a further understanding of the invention, reference will be made to the following detailed description of the invention which is to be read in connection with the accompanying drawing, where:

FIG. 1 is a schematic block diagram of the ignition control system of the invention;

FIG. 2 is a flow chart of an ignition oversight sequence as performed by the secondary processor of the ignition control system of the invention;

FIG. 3 is a flow chart of the primary detect mode of the test sequence of FIG. 2;

FIG. 4 is a flow chart of the idle mode of the test sequence of FIG. 2; and

FIG. 5 is a flow chart of the monitor mode of the test sequence of FIG. 2;

Detailed Description of the Invention

[0017] Referring initially to FIG. 1, there is depicted, in block diagram, an ignition control 10 for controlling an ignition process on a gas appliance 2 having a burner 4. Although the ignition control 10 will be described herein with reference to application a gas furnace, such as a residential or commercial gas furnace, it is to be understood that the ignition control 10 may be used in connection with a wide variety of gas appliances, including but not limited to, gas fired boilers, gas fired water heaters, and gas fired commercial cooking equipment. The ignition control 10 includes a gas valve 20, an ignition source 30, a flame detection device 40 and a controller 50. In the ignition control 10 of the invention, the controller 50 includes a primary processor 150 and a secondary processor 250.

[0018] The gas valve 20 has an open position and a closed position and may be selectively positioned in either its open or closed position through the controller 50. The gas valve 20 is disposed a gas supply line 6 connected in gas flow communication with an external gas source (not shown), such as for example a utility natural gas line or a storage tank of liquid natural gas (LNG) or propane. When the gas valve 20 is positioned in its open position, gas flows from the external source through the gas supply line 6 to the burner 4 of the gas appliance 2. When the gas valve 20 is positioned in its closed position, gas flow through the gas supply line 6 to the burner 4 of the gas appliance 2 is prohibited.

[0019] The ignition source 30 is operatively associated in a conventional manner with the burner 4 of the gas appliance 2 so as to ignite either the main gas flow to the burner 4 or a pilot gas flow to the burner 4. Although the ignition control 10 will described herein with reference to ignition of the main gas flow, but it is to be understood that the ignition control may be readily applied to direct spark ignition of a pilot gas flow. The ignition source 30 may be an electronic spark generator, such as for example a high-energy capacitive discharge spark across a 3,175 mm (1/8 inch) electrode gap 32, although any variety of spark generating igniter, or a hot surface igniter, or other type of ignition device, may be employed as the ignition source, as desired.

[0020] The flame detection device 40 is operatively associated with the gas appliance 2 for detecting the presence of a flame at the burner 4 and for generating a flame status signal 45 indicating flame or no flame. The flame detection device 40 may be any of a variety of conventional device having functional capability to sense the presence of flame at the burner 4. For example, by way of illustration, but not limitation, the flame detection device may be a flame electrode with rectification circuit. In an embodiment of the ignition control 10, the flame detection device 40 and the ignition source 30 may be coupled into a single device having functional capability to both ignite the gas flow in response to a command signal from the controller 50 and also to detect whether a flame has resulted and generate the appropriate flame signal 45. In an embodiment, the flame detection device 40 may be a flame rod electrode not associated with the ignition source 30.

[0021] The controller 50 controls and oversees the process of igniting the gas supplied to the burner 4 of the gas appliance 2. As noted before, the controller 50 of the invention includes a primary processor 150 and a secondary processor 250. Each of the primary processor 150 and the secondary processor 250 may be a microprocessor. For example, by way of illustration, but not limitation, in an exemplary embodiment of the controller 50, the primary processor 150 may comprise the PIC16C622A microcontroller from Microchip Technologies and the secondary processor 250 may comprise the PIC12F629 microcontroller from Microchip Technologies. The primary microprocessor and the secondary microprocessor may be mounted on a single pc board.

[0022] The primary processor 150 has functional capability to operate of the ignition device 30, to drive the flame detection device 40 and monitor the flame status signal 45 generated by the flame detection device 40, and to terminate the ignition process in the presence of a flame status signal 45 indicating no flame after a specified period of time following an initiation of the ignition process. The secondary processor 250 has functional capability to monitor the flame status signal 45 from the flame detection device 40 and to terminate the ignition process in the event that the primary processor 150 does not terminate the ignition process in the presence of a flame status signal 45 indicating no flame after a specified period of time following an initiation of the ignition process. Each of the primary processor 150 and the secondary processor 250 have functional capability to independently terminate the ignition process by disabling the gas valve relay 22 thereby forcing the gas valve 20 into its closed positioned in the presence of a flame status signal 45 indicating no flame after a specified period of time following an initiation of the ignition process.

[0023] The secondary processor 250 may also have functional capability to monitor the operation of the primary processor 150. In an embodiment, the secondary processor 250 has functional capability to monitor the drive signal from the primary processor 150 to the flame detection device 40 and the drive signal from the primary processor 150 to the gas valve relay 22 as a means of monitoring the operation of the primary processor 150. For example, if the flame detection device is active and generating a flame present flame detection signal 45, but the signal from the primary processor 150 to the gas valve relay is a disable signal, the secondary processor 250 will conclude that some form of hardware malfunction has occurred and will go into lockout, thereby shutting the system down as a safety precaution.

[0024] The primary processor 150 may also have functional capability to monitor the operation of the secondary processor 250. For example, the secondary processor 250 may continuously transmit an "I'm alive" status signal 55 to the primary processor 150. The "I'm alive" status signal 55 may, for purposes of illustration, but not limitation, comprise a digital signal having a repeating sequence of four high beats followed by four low beats.

[0025] The primary processor 150 will monitor the thermostat 8, which is mounted in the space to be heated by the gas furnace 2, for a heat demand signal. In response to the heat demand signal, the primary processor 150 will enable the gas valve relay 22 to open the gas valve 20 and start an ignition time out clock. The primary processor 150 may also have the functional capability to control the operation of the air blower 60 for supplying combustion air and purge air to the burner 4 of the furnace 2. If so equipped, the primary processor 150 also starts the air blower 60 to supply air to the burner to support ignition and combustion of the gas. The ignition time out clock defines a preprogrammed time period for ignition to occur such as, for example, but without limitation, in the range of 1 to 25 seconds.

[0026] As an example, for an appliance having direct spark ignition, before the gas valve 20 has been opened, the primary processor 150 enables the ignition source 30 to produce a series of high voltage sparks at a programmed interval of about 16 milliseconds. During the ignition time out clock period, the primary processor 150 monitors the flame signal 45 generated by the flame detection device 40 at preprogrammed intervals of at least every 16 milliseconds. If a valid "flame present" flame signal 45 is detected within the time period of the ignition time out clock, thus indicating successful ignition and a stable flame, the primary processor 150 cuts power to the ignition source, thereby terminating sparking, and leaves the gas valve 20 open and the air blower 60 operating. Unless the flame is subsequently lost, the primary processor 150 does not change the status of the gas valve 20 or the air blower 60 until the primary processor detects a loss of the heat demand signal from the thermostat 8. Upon completion of the heating cycle, indicated by loss of the demand for heat signal, the primary processor 150 immediately closes the gas valve 20 and, after a preprogrammed purge out period, disables, i.e. cuts power to, the air blower 60 to terminate air flow to the burner 4 and goes into an idle mode until a demand for heat signal is next detected.

[0027] If the flame signal 45 indicates that no flame is present at the expiration of the ignition time out clock, the primary processor 150 immediately disables the gas valve relay 22 to close the gas valve 20. If also designed to control the blower 60, the primary processor 150 will, after a preprogrammed purge out period, disable the air blower 60 to terminate air flow to the furnace 2. The primary processor 150 will reinitiate the ignition process for a preselected number of retries until either a successful ignition has occurred or the maximum number of permitted retries has been reached. If a stable flame is not present after the last permitted trial for ignition, the primary processor 150 goes into a lockout mode during which no further attempts to ignite are permitted. The lockout period will last until the current demand for heat signal expires and a new demand for heat signal is detected.

[0028] As noted previously, the controller 50 includes a secondary processor 250 in addition to the primary processor 150. The secondary processor 250 functions as a safeguard monitor of the ignition process. The secondary processor 250 has the functional capability to monitor the flame status signal 45 from the flame detection device 40 and also has the functional capability to monitor the operation of the primary processor 150 by monitoring the flame sensor drive signal and the gas valve relay drive signal generated by the primary processor 150. The secondary processor 250 also has the functional capability to terminate the ignition process independently of the primary processor 150 in the event that the primary processor 150 does not close the gas valve 20 in the presence of a flame status signal 45 indicating no flame after a specified period of time following an initiation of the ignition process.

[0029] Referring now to FIGs. 2 - 5, the various modes in which the secondary processor 250 operates in carrying out in its safeguard oversight role with respect to the ignition process are illustrated in the flow charts shown. Referring now to FIGs. 2 and 3, when powered up, the secondary processor 250 operates in one of the following modes: primary detect mode 220, idle mode 230, monitor mode 240 and lockout mode 260. At 210, the secondary processor 250 determines whether it is undergoing a power up or a reset. When the controller 90 is first powered up, the secondary processor 250 enters the primary detect mode. In this mode, the secondary processor 250 verifies whether the primary processor 150 is active by checking for signal levels on a designated two of its output pins. The secondary processor 250 checks for high on the flame drive pin at 222 and for low on the gas valve drive pin at 224. If this signal pattern is not present, the primary processor 150 is not active or malfunctioning and the secondary processor 250 will set a FindPrimary counter. The secondary processor 250 will continue to monitor these I/O pins and at 226 will decrement the primary detect counter each time a specified time interval has elapsed. If the primary FindPrimary counter reaches zero, at 228, the secondary processor 250 will enter the lockout mode 260. If the signal pattern is present on the designated I/O pins, the primary processor 150 is verified active and the secondary processor 250 will transition into the idle mode 230. If the signal pattern is found, the secondary processor 250 will also set a static flag to prevent noise induced resets from executing the primary detect mode 220 again. The secondary processor 250 will also transition to the idle mode 230 after a hardware reset. The transition into the idle mode 230 may include a time delay.

[0030] In the idle mode 230, the secondary processor 250 continuously monitors the gas valve 20 to determine whether the gas valve 20 is in an open state or a closed state. In this mode 230, the secondary processor 250 also continuously monitors the flame detection signal 45 to establish whether a flame is present or not. Referring now to FIG. 4, at 232, if the detected state of the gas valve 20 is open, the secondary processor transitions to the monitor mode 240. If, however, the detected state of the gas valve 20 is closed, the secondary processor 250 at 234 checks the state of the flame detection signal. If the flame detection signal indicates that a flame is present, the secondary processor 250 immediately enters the lockout mode 260. The indication that a flame is present even though the state of the gas valve 20 is detected as closed is an indication that some form of hardware failure has occurred, thereby necessitate a system shut down as a safety precaution.

[0031] In the monitor mode 240, the secondary processor 250 will continuously monitor the flame detection signals 45 from the flame detection device 40 generated in response to periodic command signals from the primary processor 150. Referring now to FIG. 5, at 242, the secondary processor 250 checks the state of the gas valve 20. If the gas valve 20 is detected to be in its closed state, the secondary processor 250 transitions back into the idle mode 230. If the gas valve 20 is detected to be in its open state, the secondary processor 250 proceeds at 244 to check the flame detection signal 45. If the flame detection signal indicates that no flame is present, the secondary processor 250 sets a FaultTimer at 246. The secondary processor then loops back through steps 242 and 244 and at 248 decrements the FaultTimer at the completion of each cycle, which represents a time interval of about 400 microseconds.

[0032] If at 244 the flame detection signal indicates that flame is present, the secondary processor 250 resets the FaultTimer at 249. However, if the FaultTimer expires, that is reaches zero, the secondary processor 250 immediately enters the lockout mode 260. The FaultTimer is preset to a time period beyond which the gas valve 20 is not to remain open in the event that a stable flame is not established in the gas appliance 2. Since the primary processor 150 continuously tests for the presence of flame, the secondary processor 250 will reset the FaultTimer to this maximum permissible time period each time a successful flame detection is verified at 244. Thus, the gas valve 20 is never allowed to remain open beyond the maximum permissible safe time limit without a positive flame detection signal being detected by the second processor 250.

[0033] Upon entering the lockout mode, the secondary processor 250 immediately disables the gas valve relay 22 thereby forcing the ignition control into a safe state and also stops transmitting the "I'm alive" signal 55 to the primary processor 150. Upon loss of the "I'm alive" signal 55, the primary processor 150 forces the gas valve 20 closed and goes into a failure mode. The primary processor 150 will not reset until the controller 50 undergoes a power down - power up cycle. The secondary processor 250 will not reset until it again detects that the primary processor 150 is active as it cycles through the primary detect mode 210. Additionally, upon entering the failure mode, the primary processor 150 may signal the existence of a fatal fault, for example by activating an indicator light, such as a light emitting diode (LED) 52 on a control panel 54. For redundancy, the secondary processor 250 may also be provided with the functional capability to activate the indicator light 52.

[0034] While the present invention has been particularly shown and described with reference to the exemplary embodiments as illustrated in the drawing, it will be recognized by those skilled in the art that various modifications may be made within the scope of the appended claims. For example, the ignition control and the method of the invention may be used in connection with combinations of fuel and ignition sources, other than the exemplary gas and spark igniter embodiment described hereinbefore, such as for example fuel oil and a high temperature igniter. Further, those skilled in the art will recognize that various types of flame detection devices, other than of the flame electrode with rectification circuit type, may be employed in the ignition control of the invention and in practicing the method of the invention.

[0035] The terminology used herein is for the purpose of description, not limitation. Specific structural and functional details disclosed herein are not to be interpreted as limiting, but merely as basis for teaching one skilled in the art to use the present invention. Those skilled in the art will also recognize the equivalents that may be substituted for elements described with reference to the exemplary embodiments disclosed herein without departing from the scope of the present invention as defined in the appended claims.

[0036] Therefore, it is intended that the present disclosure not be limited to the particular embodiment(s) disclosed, but that the disclosure will include all embodiments falling within the scope of the appended claims.

Claims

1. An ignition control (10) for controlling an ignition process on a fuel-fired appliance, said ignition control comprising:

a fuel control valve (20) having an open position in which fuel flows to a burner (4) and a closed position in which fuel flow to said burner (4) is stopped;

an ignition source (30) operatively associated with said burner (4);

a flame detection device (40) adapted to detect the presence of a flame at said burner (4) and configured to transmit a flame status signal (45) indicating flame or no flame;

a controller (50) configured to oversee the ignition process of igniting the fuel supplied to said burner (4), said controller (50) including a primary processor (150) and a secondary processor (250):

said primary processor (150) having functional capability to operate the ignition source (30), to monitor the flame status signal (45) from the flame detection device (40) and to terminate the ignition process in the presence of a flame status signal (45) indicating no flame after a specified period of time following an initiation of the ignition process; and

said secondary processor (250) having functional capability to monitor the flame status signal (45) from the flame detection device (40) and to terminate the ignition process in the event that the primary processor (150) does not close the fuel control valve (20) in the presence of a flame status signal (45) indicating no flame after a specified period of time following an initiation of the ignition process;

said secondary processor (250) adapted to operate in an idle mode (230), monitor mode (240) and lockout mode (260);

wherein in said idle mode (230), said secondary processor (250) is adapted to continuously monitor the state of the fuel control valve (20) and the flame status signal (45),

said secondary processor (250) configured to transition from said idle mode (230) to said monitor mode (240) upon detecting said fuel control valve (20) is open, check the flame status signal (45) upon detecting said fuel control valve (20) is closed, and transition from said idle mode (230) to said lockout mode (260) in the presence of a flame status signal (45) indicating a flame.

2. The ignition control (10) as recited in claim 1 further comprising said secondary processor (250) is configured to monitor the operation of said primary processor (150) and/or said primary processor (150) is configured to monitor the operation of said secondary processor (250).

3. The ignition control (10) as recited in claim 1 where each of said primary processor (150) and said secondary processor (250) comprises a microprocessor.

4. The ignition control (10) as recited in claim 1 where each of said primary processor (150) and said secondary processor (250) comprises a microcontroller.

5. The ignition control (10) as recited in claim 1 wherein each of said primary processor (150) and said secondary processor (250) is configured to position the fuel control valve (20) in its closed position to independently terminate the ignition process.

6. A method for overseeing an ignition process on a fuel-fired appliance, the appliance having a fuel burner, a fuel flow control valve (20), an ignition source (30) operatively associated with the burner (4), a flame detection device (40) operatively associated with the burner (4) for detecting the presence of a flame at the burner and transmitting a flame status signal (45) indicating flame or no flame; said method comprising the steps of:

providing a primary processor (150) for initiating the ignition process, for monitoring the flame status signal (45) and for terminating the ignition process in the presence of a flame status signal (45) indicating no flame after a specified period of time following the initiation of the ignition process;

providing a secondary processor (250) for monitoring the flame status signal (45) independently of said primary processor (150) and for terminating the ignition process in the event that said primary processor (150) fails to terminate the ignition process in the presence of a flame status signal (45) indicating no flame after a specified period of time following the initiation of the ignition process;

said secondary processor (250) operating in an idle mode (230), monitor mode (240) and lockout mode (260);

wherein in said idle mode (230), said secondary processor (250) continuously monitors the state of the fuel control valve (20) and the flame status signal (45),

said secondary processor (250) transitioning from said idle mode (230) to said monitor mode (240) upon detecting said fuel control valve (20) is open, said secondary processor (250) checking the flame status signal (45) upon detecting said fuel control valve (20) is closed, and transitioning from said idle mode (230) to said lockout mode (260) in the presence of a flame status signal (45) indicating a flame.

7. The method recited in claim 6 wherein the fuel-fired appliance is a direct spark ignition gas appliance (2) having a gas burner and the fuel flow control valve is a gas valve.

8. The method as recited in claim 6 or 7 wherein said secondary processor (250) terminates the ignition process by closing the fuel flow control valve (20) to stop the delivery of fuel to the burner (4) in the event that said primary processor (150) does not close the fuel flow control valve (20) in the presence of a flame status signal (45) indicating no flame after a specified period of time following an initiation of the ignition process.

9. The method as recited in claim 7 wherein the steps of providing a primary processor (150) and of providing a secondary processor (250) comprise providing a primary microprocessor and a secondary microprocessor.

10. The method as recited in claim 7 further comprising the step of said secondary processor (250) monitoring the operation of said primary processor (150) and/or the step of said primary processor (150) monitoring the operation of said secondary processor (250).

11. The method as recited in claim 10 further comprising the step of said secondary processor (250) transmitting a status signal to said primary processor (150) whenever said secondary processor (250) is in an active state.

12. The method as recited in claim 7 further comprising the step of said secondary processor (250) cycling in sequence through a primary detect mode, the idle mode (230) and the monitor mode (240).

13. The method as recited in claim 12 further characterized in that the secondary processor (250) may move from any of the primary detect mode, the idle mode (230) and the monitor mode (240) directly into a lockout mode (260).

Ansprüche

1. Zündsteuerung (10) zum Steuern eines Zündvorgangs in einem brennstoffbetriebenen Gerät, wobei die Zündsteuerung Folgendes umfasst:

ein Brennstoffsteuerventil (20), das eine geöffnete Stellung, in der Brennstoff zu einem Brenner (4) strömt, und eine geschlossene Stellung, in der der Brennstoffstrom zum Brenner (4) unterbrochen wird, aufweist;

eine Zündquelle (30), die in Wirkverbindung mit dem Brenner (4) steht;

eine Flammenerfassungsvorrichtung (40), die dazu eingerichtet ist, das Vorhandensein einer Flamme am Brenner (4) zu erfassen, und dazu konfiguriert ist, ein Flammenstatussignal (45), das eine oder keine Flamme anzeigt, zu senden;

eine Steuerung (50), die dazu konfiguriert ist, den Zündvorgang des Zündens des zum Brenner (4) geleiteten Brennstoffs zu überwachen, wobei die Steuerung (50) einen Hauptprozessor (150) und einen Nebenprozessor (250) einschließt:

wobei der Hauptprozessor (150) eine Funktionsfähigkeit zum Betreiben der Zündquelle (30), zum Überwachen des Flammenstatussignals (45) von der Flammenerfassungsvorrichtung (40) und zum Beenden des Zündvorgangs bei Vorhandensein eines Flammenstatussignals (45), das nach einer bestimmten Zeitspanne nach Einleiten des Zündvorgangs keine Flamme anzeigt, aufweist; und

wobei der Nebenprozessor (250) eine Funktionsfähigkeit zum Überwachen des Flammenstatussignals (45) von der Flammenerfassungsvorrichtung (40) und zum Beenden des Zündvorgangs in dem Fall, in dem der Hauptprozessor (150) das Brennstoffsteuerventil (20) bei Vorhandensein eines Flammenstatussignals (45), das nach einer bestimmten Zeitspanne nach Einleiten des Zündvorgangs keine Flamme anzeigt, nicht schließt, aufweist;

wobei der Nebenprozessor (250) dazu eingerichtet ist, in einem Bereitschaftsmodus (230), einem Überwachungsmodus (240) und einem Sperrmodus (260) zu arbeiten;

wobei der Nebenprozessor (250) im Bereitschaftsmodus (230) dazu eingerichtet ist, den Zustand des Brennstoffsteuerventils (20) und des Flammenstatussignals (45) durchgehend zu überwachen,

wobei der Nebenprozessor (250) dazu konfiguriert ist, bei Erfassen, dass das Brennstoffsteuerventil (20) geöffnet ist, aus dem Bereitschaftsmodus (230) in den Überwachungsmodus (240) überzugehen, bei Erfassen, dass das Brennstoffsteuerventil (20) geschlossen ist, das Flammenstatussignal (45) zu prüfen und bei Vorhandensein eines Flammenstatussignals (45), das eine Flamme anzeigt, aus dem Bereitschaftsmodus (230) in den Sperrmodus (260) überzugehen.

2. Zündsteuerung (10) nach Anspruch 1, ferner umfassend den Nebenprozessor (250), der dazu konfiguriert ist, den Betrieb des Hauptprozessors (150) zu überwachen, und/oder den Hauptprozessor (150), der dazu konfiguriert ist, den Betrieb des Nebenprozessors (250) zu überwachen.

3. Zündsteuerung (10) nach Anspruch 1, wobei der Hauptprozessor (150) und der Nebenprozessor (250) jeweils einen Mikroprozessor umfassen.

4. Zündsteuerung (10) nach Anspruch 1, wobei der Hauptprozessor (150) und der Nebenprozessor (250) jeweils eine Mikrosteuerung umfassen.

5. Zündsteuerung (10) nach Anspruch 1, wobei der Hauptprozessor (150) und der Nebenprozessor (250) jeweils dazu konfiguriert sind, das Brennstoffsteuerventil (20) in seine geschlossene Stellung zu bringen, um unabhängig voneinander den Zündvorgang zu beenden.

6. Verfahren zum Kontrollieren eines Zündvorgangs in einem brennstoffbetriebenen Gerät, wobei das Gerät einen Brennstoffbrenner, ein Brennstoffstromsteuerventil (20), eine Zündquelle (30), die in Wirkverbindung mit dem Brenner (4) steht, eine Flammenerfassungsvorrichtung (40), die in Wirkverbindung mit dem Brenner (4) steht, um das Vorhandensein einer Flamme am Brenner zu erfassen und ein Flammenstatussignal (45) zu senden, das eine Flamme oder keine Flamme anzeigt, aufweist; wobei das Verfahren folgende Schritte umfasst:

Bereitstellen eines Hauptprozessors (150) zum Einleiten des Zündvorgangs, zum Überwachen des Flammenstatussignals (45) und zum Beenden des Zündvorgangs bei Vorhandensein eines Flammenstatussignals (45), das nach einer bestimmten Zeitspanne nach Einleiten des Zündvorgangs keine Flamme anzeigt;

Bereitstellen eines Nebenprozessors (250) zum Überwachen des Flammenstatussignals (45) unabhängig vom Hauptprozessor (150) und zum Beenden des Zündvorgangs in dem Fall, in dem das Beenden des Zündvorgangs durch den Hauptprozessor (150) bei Vorhandensein eines Flammenstatussignals (45), das nach einer bestimmten Zeitspanne nach Einleiten des Zündvorgangs keine Flamme anzeigt, fehlschlägt;

wobei der Nebenprozessor (250) in einem Bereitschaftsmodus (230), einem Überwachungsmodus (240) und einem Sperrmodus (260) arbeitet;

wobei der Nebenprozessor (250) im Bereitschaftsmodus (230) den Zustand des Brennstoffsteuerventils (20) und des Flammenstatussignals (45) durchgehend überwacht,

wobei der Nebenprozessor (250) bei Erfassen, dass das Brennstoffsteuerventil (20) geöffnet ist, aus dem Bereitschaftsmodus (230) in den Überwachungsmodus (240) übergeht, wobei der Nebenprozessor (250) bei Erfassen, dass das Brennstoffsteuerventil (20) geschlossen ist, das Flammenstatussignal (45) überprüft und bei Vorhandensein eines Flammenstatussignals (45), das eine Flamme anzeigt, aus dem Bereitschaftsmodus (230) in den Sperrmodus (260) übergeht.

7. Verfahren nach Anspruch 6, wobei das brennstoffbetriebene Gerät ein direktes Zündfunkengasgerät (2) ist, das einen Gasbrenner aufweist, und das Brennstoffstromsteuerventil ein Gasventil ist.

8. Verfahren nach Anspruch 6 oder 7, wobei der Nebenprozessor (250) den Zündvorgang beendet, indem er das Brennstoffstromsteuerventil (20) schließt, um das Leiten von Brennstoff zum Brenner (4) zu unterbrechen, in dem Fall, in dem der Hauptprozessor (150) das Brennstoffstromsteuerventil (20) bei Vorhandensein eines Flammenstatussignals (45), das nach einer bestimmten Zeitspanne nach einem Einleiten des Zündvorgangs keine Flamme anzeigt, nicht schließt.

9. Verfahren nach Anspruch 7, wobei die Schritte des Bereitstellens eines Hauptprozessors (150) und des Bereitstellens eines Nebenprozessors (250) Bereitstellen eines Hauptmikroprozessors und eines Nebenmikroprozessors umfassen.

10. Verfahren nach Anspruch 7, ferner umfassend den Schritt des Überwachens des Betriebs des Hauptprozessors (150) durch den Nebenprozessor (250) und/oder den Schritt des Überwachens des Betriebs des Nebenprozessors (250) durch den Hauptprozessor (150).

11. Verfahren nach Anspruch 10, ferner umfassend den Schritt des Sendens eines Statussignals an den Hauptprozessor (150) durch den Nebenprozessors (250), immer wenn sich der Nebenprozessor (250) in einem aktiven Zustand befindet.

12. Verfahren nach Anspruch 7, ferner umfassend den Schritt des Durchlaufens eines Haupterfassungsmodus, des Bereitschaftsmodus (230) und des Überwachungsmodus (240) hintereinander durch den Nebenprozessor (250).

13. Verfahren nach Anspruch 12, ferner dadurch gekennzeichnet, dass sich der Nebenprozessor (250) aus einem beliebigen des Haupterfassungsmodus, des Bereitschaftsmodus (230) und des Überwachungsmodus (240) direkt in den Sperrmodus (260) bewegen kann.

Revendications

1. Commande d'allumage (10) pour commander un processus d'allumage sur un appareil à combustion, ladite commande d'allumage comprenant :

un robinet de commande de combustible (20) ayant une position ouverte dans laquelle le combustible s'écoule jusqu'à un brûleur (4) et une position fermée dans laquelle l'écoulement de combustible jusqu'audit brûleur (4) est arrêté ;

une source d'allumage (30) associée de manière opérationnelle audit brûleur (4) ;

un dispositif de détection de flamme (40) conçu pour détecter la présence d'une flamme au niveau dudit brûleur (4) et configuré pour transmettre un signal de statut de flamme (45) indiquant une flamme ou une absence de flamme ;

un dispositif de commande (50) configuré pour surveiller le processus d'allumage du combustible alimentant ledit brûleur (4), ledit dispositif de commande (50) comprenant un processeur principal (150) et un processeur secondaire (250) :

ledit processeur principal (150) ayant la capacité fonctionnelle de faire fonctionner la source d'allumage (30), de surveiller le signal de statut de flamme (45) à partir du dispositif de détection de flamme (40) et de mettre fin au processus d'allumage en présence d'un signal de statut de flamme (45) indiquant l'absence de flamme après une période de temps spécifiée suivant un démarrage du processus d'allumage ; et

ledit processeur secondaire (250) ayant la capacité fonctionnelle de surveiller le signal de statut de flamme (45) à partir du dispositif de détection de flamme (40) et de mettre fin au processus d'allumage si le processeur principal (150) ne ferme pas le robinet de commande de combustible (20) en présence d'un signal de statut de flamme (45) indiquant l'absence de flamme après une période de temps spécifiée suivant un démarrage du processus d'allumage ;

ledit processeur secondaire (250) étant conçu pour fonctionner en mode veille (230), en mode surveillance (240) et en mode verrouillage (260) ;

dans laquelle, dans ledit mode veille (230), ledit processeur secondaire (250) est conçu pour surveiller en continu l'état du robinet de commande de combustible (20) et le signal de statut de flamme (45),

ledit processeur secondaire (250) étant configuré pour passer dudit mode veille (230) audit mode surveillance (240) lorsqu'il est détecté que ledit robinet de commande de combustible (20) est ouvert, vérifier le signal de statut de flamme (45) lorsqu'il est détecté que ledit robinet de commande de combustible (20) est fermé, et passer dudit mode veille (230) audit mode verrouillage (260) en présence d'un signal de statut de flamme (45) indiquant une flamme.

2. Commande d'allumage (10) selon la revendication 1, comprenant en outre le fait que ledit processeur secondaire (250) est configuré pour surveiller le fonctionnement dudit processeur principal (150) et/ou le fait que ledit processeur principal (150) est configuré pour surveiller le fonctionnement dudit processeur secondaire (250).

3. Commande d'allumage (10) selon la revendication 1, dans laquelle chacun dudit processeur principal (150) et dudit processeur secondaire (250) comprend un microprocesseur.

4. Commande d'allumage (10) selon la revendication 1, dans laquelle chacun dudit processeur principal (150) et dudit processeur secondaire (250) comprend un microcontrôleur.

5. Commande d'allumage (10) selon la revendication 1, dans laquelle chacun dudit processeur principal (150) et dudit processeur secondaire (250) est configuré pour positionner le robinet de commande de combustible (20) dans sa position fermée afin de mettre fin de manière indépendante au processus d'allumage.

6. Procédé de surveillance d'un processus d'allumage sur un appareil à combustion, l'appareil ayant un brûleur à combustible, un robinet de commande de débit de combustible (20), une source d'allumage (30) associée de manière opérationnelle au brûleur (4), un dispositif de détection de flamme (40) associé de manière opérationnelle au brûleur (4) pour détecter la présence d'une flamme au niveau du brûleur et transmettre un signal de statut de flamme (45) indiquant une flamme ou une absence de flamme ; ledit procédé comprend les étapes de :

fourniture d'un processeur principal (150) pour démarrer le processus d'allumage, pour surveiller le signal de statut de flamme (45) et pour mettre fin au processus d'allumage en présence d'un signal de statut de flamme (45) indiquant l'absence de flamme après une période de temps spécifiée suivant le démarrage du processus d'allumage ;

la fourniture d'un processeur secondaire (250) pour surveiller le signal de statut de flamme (45) indépendamment dudit processeur principal (150) et pour mettre fin au processus d'allumage si ledit processeur principal (150) ne parvient pas à mettre fin au processus d'allumage en présence d'un signal de statut de flamme (45) indiquant l'absence de flamme après une période de temps spécifiée suivant le démarrage du processus d'allumage ;

ledit processeur secondaire (250) fonctionnant en mode veille (230), en mode surveillance (240) et en mode verrouillage (260) ;

dans lequel dans ledit mode veille (230), ledit processeur secondaire (250) surveille en continu l'état du robinet de commande de combustible (20) et le signal de statut de flamme (45),

ledit processeur secondaire (250) passant dudit mode veille (230) audit mode surveillance (240) lorsqu'il est détecté que ledit robinet de commande de combustible (20) est ouvert, ledit processeur secondaire (250) vérifiant le signal de statut de flamme (45) lorsqu'il est détecté que ledit robinet de commande de combustible (20) est fermé, et passant dudit mode veille (230) audit mode verrouillage (260) en présence d'un signal de statut de flamme (45) indiquant une flamme.

7. Procédé selon la revendication 6, dans lequel l'appareil à combustion est un appareil à gaz à allumage direct par étincelle (2) ayant un brûleur à gaz et le robinet de commande de débit de combustible est un robinet de gaz.

8. Procédé selon la revendication 6 ou 7, dans lequel ledit processeur secondaire (250) met fin au processus d'allumage en fermant la vanne de commande de débit de combustible (20) pour arrêter l'acheminement de combustible jusqu'au brûleur (4) si ledit processeur principal (150) ne ferme pas le robinet de commande de débit de combustible (20) en présence d'un signal de statut de flamme (45) indiquant l'absence de flamme après une période de temps spécifiée suivant un démarrage du processus d'allumage.

9. Procédé selon la revendication 7, dans lequel les étapes de fourniture d'un processeur principal (150) et de fourniture d'un processeur secondaire (250) comprennent la fourniture d'un microprocesseur principal et d'un microprocesseur secondaire.

10. Procédé selon la revendication 7, comprenant en outre l'étape dudit processeur secondaire (250) surveillant le fonctionnement dudit processeur principal (150) et/ou l'étape dudit processeur principal (150) surveillant le fonctionnement dudit processeur secondaire (250).

11. Procédé selon la revendication 10, comprenant en outre l'étape dudit processeur secondaire (250) transmettant un signal de statut audit processeur principal (150) chaque fois que ledit processeur secondaire (250) est dans un état actif.

12. Procédé selon la revendication 7, comprenant en outre l'étape dudit processeur secondaire (250) faisant un cycle dans l'ordre à travers un mode de détection principal, le mode veille (230) et le mode surveillance (240).

13. Procédé selon la revendication 12, caractérisé en outre en ce que le processus secondaire (250) peut passer de l'un quelconque du mode de détection principal, du mode veille (230) et du mode surveillance (240) directement en mode verrouillage (260).

Drawing