Method and system for monitoring signal integrity in a distributed controls system

1. Method to monitor integrity of a signal generated and communicated in a control system for a powertrain system including an engine, a transmission and a torque generating machine connected to an energy storage device, the transmission operative to transfer power between the engine and the torque generating machine and an output member, the method comprising:

establishing a distributed control module system comprising a first control module operatively connected to the engine, a second control module operatively connected to the torque generating machine, a third control module operatively connected to the transmission device, and a hybrid control module operative to command operation of the first, second, and third control modules;

establishing a communications link to transmit the signal between any two of the first control module, the second control module, the third control module and the hybrid control module and a user interface;

monitoring integrity of each of the first, second, third, and hybrid control modules;

generating the signal in an originating control module comprising one of the first, second, third and hybrid control modules;

verifying integrity of the signal within the originating control module;

transmitting the signal via the communications link to a receiving control module comprising one of the first, second, third and hybrid control modules that is not the originating control module; and

verifying integrity of the transmitted signal within the receiving control module.

2. The method of claim 1 , further comprising verifying integrity of the signal within the originating control module by redundantly storing the signal at first and second memory locations in a memory device of the originating control module and comparing the redundantly stored signals at the first and second memory locations immediately prior to transmitting the redundantly stored signals.

3. The method of claim 2 , further comprising transmitting the redundantly stored signals via the communications link.

4. The method of claim 3 , further comprising receiving and storing the transmitted redundantly stored signals in first and second memory locations in the receiving control module.

5. The method of claim 2 , comprising detecting corruption of the signal and executing remedial action when a difference between the redundantly stored signals is greater than a threshold.

6. The method of claim 4 , further comprising verifying integrity of the transmitted signal within the receiving control module by comparing the transmitted redundantly stored signals stored in first and second memory locations within the receiving control module.

7. The method of claim 6 , comprising detecting corruption of the signal when a difference between the transmitted redundantly stored signals is greater than a threshold.

8. The method of claim 7 , further comprising executing remedial action upon detecting corruption of the signal.

9. The method of claim 1 , wherein the signal comprises one of an operator command signal, a sensor input signal, and an actuator control signal.

10. The method of claim 1 , wherein generating the signal in the originating control module further comprises monitoring integrity of algorithmic code stored in memory and executed in the originating control module.

11. The method of claim 1 , wherein monitoring integrity of the control modules comprises monitoring hardware integrity of the control modules and associated memory devices and monitoring integrity of algorithms and memory devices.

12. The method of claim 11 , further comprising monitoring integrity of algorithms and memory devices by verifying integrity of algorithmic code, calibrations and variable data stored in the memory devices of the control modules.

13. Method to monitor signal integrity in a control system for a powertrain system including an engine, an electro-mechanical transmission and a plurality of torque generating machines connected to an energy storage device, the electro-mechanical transmission operative to transfer power between the engine and the torque generating machines and an output member, the method comprising:

establishing a distributed control module system comprising a first control module operatively connected to the engine, a plurality of second control modules corresponding to and operatively connected to the plurality of torque generating machines, a third control module operatively connected to the electro-mechanical transmission, and a hybrid control module operative to generate commands to control operation of the powertrain system;

establishing a communications link between the control modules;

monitoring hardware integrity of each of the control modules;

monitoring integrity of memory devices of each of the control modules;

monitoring integrity of algorithms and memory devices of the control modules;

monitoring communications integrity; and

executing remedial action upon detection of a fault.

14. The method of claim 13 , wherein monitoring communications integrity comprises:

generating the signal in an originating control module comprising one of the control modules;

verifying integrity of the signal within the originating control module;

transmitting the signal via the communications link;

receiving the signal at a receiving control module comprising one of the control modules that is not the originating control module; and

verifying integrity of the transmitted signal within the receiving control module.

15. The method of claim 14 , further comprising:

storing the signal at first and second memory locations in a memory device of the originating control module;

verifying integrity of the signals stored at the first and second memory locations within the originating control module;

establishing a serial communications link to transmit the verified signals;

transmitting the verified signals from the originating control module through the serial communications link;

receiving the transmitted verified signals at the receiving control module;

storing the transmitted verified signals at first and second memory locations within the receiving control module; and

verifying integrity of the stored transmitted signals within the receiving control module.

16. The method of claim 15 , wherein the signal comprises an operator command signal, a sensor input signal, and an actuator control signal.

17. The method of claim 15 , further comprising:

generating a primary and a redundant signal;

storing the primary signal at the first memory location and storing the redundant signal at the second memory location;

executing diagnostics on the primary signal and the redundant signal;

executing a rationality check on the primary signal and the redundant signal; and

executing a fault maturation algorithm to detect signal corruption based upon the rationality check on the primary signal and the redundant signal.