Remotely controllable LNG field station management system and method5586050Abstract A remotely controllable apparatus, system and method for monitoring, inventory, controlling and reporting on the filling, refilling and dispensing of Liquified Natural Gas (LNG) at portable temporary or semi-permanent field-located storage and dispensing stations, including a portable storage tank, and an associated portable pump and control skid, which skid includes: an on-site microprocessor control system having: security features; pump, fill and dispense connections; an LNG leak detection system; a communications link (typically an RF cellular phone system) to a host computer; a dispensing and refilling sales authorization and initiation system (typically a card reader of the credit, access or proximity card types); and a remotely located host computer having a full suite of features including: inventory, monitoring, security and access control; operational control; financial and transaction record keeping and report generation; and emergency warning and shut-down. The field control unit control functions are performed by the on-site microprocessor which receives input from a plurality of natural gas leak detection sensors, and provides complete on site security screening, data acquisition, transaction recording and control capability, including warning via lights, horn or recorded or synthesized voice, and shut-off or shut-down. The field control unit monitors and controls prescribed user vehicle and storage tank filling procedures, and provides communications to a remote central monitoring site having a host computer master controller, via cellular phone. Claims We claim: Description FIELD
TABLE I
__________________________________________________________________________
Parameters Monitored and Controlled
Part Sensor
ID Channel
Type Location
Function Range Signal
__________________________________________________________________________
L-1 1 Leak 2 Fuel Line 0-150% LFL
0-5 VDC
Detection Connections
L-2 2 Leak 2 HC-1 Connections
0-150% LFL
0-5 VDC
Detection
L-3 3 Leak 2 HC-2 and HC-3
0-150% LFL
0-5 VDC
Detection Connections
L-4 4 Leak 2 Pump and DV-7
0-150% LFL
0-5 VDC
Detection
L-5 5 Leak 23 TVAC Valve Box
0-150% LFL
0-5 VDC
Detection
L-6 6 Leak 22 TVAC Vent 0-150% LFL
0-5 VDC
Detection
DPT-1
7 Pressure 2 Pump Discharge
0-250 psi
0-5 VDC
DPT-2
8 Pressure 2 Nitrogen Supply
0-3000 psi
0-5 VDC
Pressure
PIT-1
9 Pressure 22 Tank Pressure
0-150% psi
0-5 VDC
DT-1 10 Temperature
2 Pump Discharge
100 to -257.degree. F.
mv
Temperature
DFM-1
11 Flowmeter
2 Fuel Flowmeter
0-100 GPM
4-20 ma
LLT-1
12 Liquid Level
22 TVAC Tank Level
0-100 in H20
0-5 VDC
DV-1A
13 Valve Limit
2 Suction Valve
open/closed
0-5 VDC
Switch Open Open
DV-1B
14 Valve Limit
2 Suction Valve
open/closed
0-5 VDC
Switch Closed Closed
DV-2A
15 Valve Limit
2 Discharge Control
open/closed
0-5 VDC
Switch Open Valve Open
DV-2B
16 Valve Limit
2 Discharge Control
open/closed
0-5 VDC
Switch Closed Valve Closed
DV-4A
17 Valve Limit
2 Vent Valve Open
open/closed
0-5 VDC
Switch Open
DV-4B
18 Valve Limit
2 Vent Valve Closed
open/closed
0-5 VDC
Switch Closed
DPC-1
19 Pump Current
15 Pump Backpressure
0-50 amp
0-5 amp
Build-up
CP-1 20 Pump On/Off
15 Pump Operation
Output 110 VAC
Command
CR-1 21 Card Reader
6 Transaction
Input Digital
CV-1 22 DV-1 Command
12 Open/Close Valve
Output 110 VAC
DV-1
CV-2 23 DV-2 Command
12 Open/Close Valve
Output 110 VAC
DV-2
CV-4 24 DV-4 Command
12 Open/Close Valve
Output 110 VAC
DV-4
PB-1 25 Panic Button
15 Emergency Shut
Input 110 VAC
Shut-Off Down
CAL-1
26 Station 12 Activate Red
Output 110 VAC
Status Lights Warnings Lights
OB-1 27 Operator Push
12 Numeric Key Pad
Inputs Digital
Buttons
LCD-1
28 CD Display
12 Operator Output Digital
Panel Instructions
__________________________________________________________________________
* Location 22 = TVAC; 23 Valve Box; 2 = LNG Skid 15 = LNG Skid Power Box
6 = LNG Skidcard; = LNG Controller
LEAK DETECTION SENSORS AND SENSOR SIGNAL TRANSMISSION CIRCUIT The leak detectors are preferably commercially available LFL (Lower Flammability Limit) type detectors, set for 20% LFL for low alarm and 40% LFL for high alarm. Table 2 shows the % by volume in air of various gases sensed by such sensors:
TABLE II
______________________________________
% by Volume in Air for 100% LFL
______________________________________
H.sub.2 (Hydrogen)
4.0%
CH.sub.4 (Methane)
5.0%
C.sub.2 H.sub.6 (Ethane)
3.0%
C.sub.2 H.sub.4 (Ethylene)
2.7%
C.sub.3 H.sub.8 (Propane)
2.2%
C.sub.5 H.sub.12 (Pentane)
1.5%
______________________________________
The LFL of a gas is affected by both temperature and pressure; as temperature increases, LFL decreases and hence the explosion hazard increases. Usually a pressure increase lowers LFL and LFL is relatively independent of humidity fluctuations. We prefer to use the sensor element (and its housing) from a Det-Tronics Model 226530-01 Poison Resistant (Det-Tronics, Minneapolis, Minn.) as a feed to the signal transmission circuit of this invention; the sensor element is a combustible gas sensor having a pair of elements, one an active catalytic element and the other inactive, to function as a temperature compensating reference element. Both elements are Pt wire coil encased in ceramic, but the active element has a catalytic coating the resistance of which increases as the gas concentration increases. The reference element is glazed to be nonreactive to the presence of a combustible gas/air mixture. Both elements are enclosed in a porous stainless steel cup which acts as a flame arrestor, and the two elements are separated by a thermal barrier. Both elements are on a resistance heated substrate maintained t a constant temperature of around 110.degree. C. The sensor is disposed projecting from an explosion proof junction box that houses the sensor, signal transmission circuit board. The novel signal transmission circuit of this invention functions as the interface between the gas sensor and field micro-controller, and provides the ability to turn the sensor on and off via the multiplexer contained within the micro-controller's signal acquisition circuitry (described below). The circuit accepts a 5 VDC power input and provides a 3 VDC source to the sensor substrate heater and to the sensor elements. The circuit has self-diagnostic capability to determine that the circuit itself is functioning properly. This is done by monitoring the heater supply voltage of 3 VDC within the circuit. Voltage drop across the sensor elements is detected within the circuit providing a measurement proportional to the resistance ratio between the active and inactive catalytic sensor elements which is used to determine flammable gas concentration. Unlike a conventional sensor transmission circuit which generates signal in the milli-amp range, the signal transmission circuit of this invention generates a 0-5 VDC output signal proportional to the level of flammable gas at the sensor. The sensors/transmitters are hardwired directly to an interface board 102 and thence to the microcontroller 12 rather than passing through a DIO board. Table I shows the dedicated channels 1-6. The signal transmission circuit of FIG. 3 (located in junction box 38; see FIG. 1) provides the interface between the sensor and microcontroller and provides the ability to turn the sensor on and off via the multiplexer contained within the microcontroller sensor interface circuit. The sensor signal transmission circuit 106 of FIG. 3 is shown in two parts, the heater power circuit for the sensor FIG. 3a and the sensor signal conditioning portion FIG. 3b. Both circuits are located on a single board in box 38 (see FIG. 1). Appropriately filtered 5 VDC power is input to the circuit (FIG. 3b) via pins 4 and 5 on Terminal block 40 (TB 1). The filtering of the input voltage is shown at filtering capacitor 41 (CU 1). Pins 1, 2 and 3 of TB 1, item 40 on the right of FIG. 3b, connect as designated to the same numbered heater power circuit leads (on the left of FIG. 3a): heater power 45; heater command (turn on/off) 46; and heater return (circuit operative) line 47. These are connected as shown in FIG. 3a via an OP-490AY type OP AMP, U1b, 49, and a 2N5681 transistor 50 to junction block 48, to which the sensor 36 (FIG. 1) is plugged in. Resistors, diodes and filtering capacitors are connected as shown to provide 3 VDC to the sensor heater. The sensor 36, as described above, employs two resistors in series, one a reference and the other a catalytic oxidation element to measure the gas concentration. The sensor hi input 52 to the signal conditioning circuit (FIG. 3b) is tapped off the heater power 45, while the sensor low signal 53 on pin 4 of junction block 48 is tapped off at 53a as input to an OP-490AY type OP AMP 43, U1c, and also continues as input 53b to an OP 490AY type OP AMP 49, U1b, with the other input being the command input 46. When the amplified low return signal 53 indicates via transistor 50 that heater power is required, the command signal activates the heater power "ON" through diode D1. The sensor mid signal 54 from the sensor 36 via pins 2 and 3 is compared and amplified in an OP-490AY type 0P amplifier 56, (U1d) and represents the difference signal across the catalytic resistor element of the sensors. The mid signal 54 is the difference across the reference resistor. The signal, and accordingly the gas concentration, is a ratio of the voltage differences of the two resistive elements in the sensor. Zero point plane (zero volt reference) is shown at 42 as the reference signal to an OP-490AY type OP AMP 43 (U1c) of the sensor low signal. The amplified output of the reference from OP AMP 43 is input to an OP-490AY type OP AMP 57 (U1a) as well as the amplified output from the catalytic element signal amplifier 56. This results in signal outputs Vol, Vo2 and VoL (sensor low voltage output) to pins 6, 7 and 8, respectively, on the Terminal Block 40. These are the inputs to the sensor interface board (see the Appendix). This sensor transmission circuit thus produces an analog voltage signal which is proportional to the gas concentration at the particular sensor, which signal is then input directly to the interface board 102 and thence to the microcontroller 12 (described below). Voltage drop across the sensor elements is detected within the signal transmission circuit of FIG. 3 providing a measurement proportional to the resistance ratio between the active and inactive catalytic sensor elements which is used to determine flammable gas concentration. The signal transmission circuit generates a 0-5 VDC output signal to the sensor interface circuit which is proportional to the level of flammable gas at the sensor. The signal transmission circuit is initially factory ranged (calibrated) for 0.1 VDC output at 0% flammable gas in air to 1.1 VDC output at 5% flammable gas in air, at pins 6-8 on TB 1, (item 40). The signal transmission circuit is capable of field calibration from 0 to 8% flammable gas in air using diagnostic/calibration software provided in either a field-useable laptop, or remotely via the host computer. The signal transmission circuit permits the microcontroller to determine that the signal transmission circuit is functioning properly by monitoring the heater supply voltage of 3 VDC within the signal transmission circuit. Factory ranging of the sensor is performed by the adjustable variable resistor identified as R8 in the signal transmission circuit schematic shown in FIG. 3. This is accomplished by exposure of the sensor element to known-concentration calibration gases prior to system assembly. Field calibration is accomplished using the diagnostic mode provided within the microcontroller firmware. The diagnostic mode may be entered via menu selection displayed on the system LCD screen 20 (FIG. 1). Only users with a valid Operators card may access the microcontroller diagnostic mode. The user enters an identification number via the system card reader 8. The microcontroller verifies the user's authorization code and level. Operator level users are then presented a menu of three options: 1) vehicle fill; 2) TVAC fill; and 3) system diagnostics. The user selects option 3 via the system keypad to bring up the diagnostic menu which contains six items, one for each sensor. The user selects a sensor number via the keypad. The next level menu provides options to: 1) turn the sensor "ON" or "OFF"; 2) display raw sensor output voltages; 3) display present zero and calibration voltage values; 4) set zero point; 5) set 25% LFL point; and 6) return. To calibrate the selected sensor, the user ensures zero concentration at the sensor head by applying a known zero calibration gas at the sensor element then selecting the "Set Zero Point" menu option. This procedure is repeated with a 25% LFL reference gas and the "Set 25% LFL Point" menu item. The user then exits with a selection of "Return" which causes the new calibration set points to be stored in serial EEPROM memory within the digital input/output circuit board assembly. INTERFACE BOARD CIRCUIT The sensor interface board 102 is preferably a separate board, shown in block diagram form in FIG. 4. The sensor interface board serves as the interface between the skid microcontroller and the leak detection sensor transmission circuit of FIG. 3, the common connection being to the terminal block 40 of the sensor transmission circuit. The interface board has three primary functions. These are: 1) to provide a pulse width modulated (PWM) power supply control signal 200 to the sensor heater circuits (FIG. 3a) to enable sensor temperature control; 2) multiplex the sensor's low, middle, and high output signals 201 202 and 203 (heater signal) respectively (from pins 6, 7 and 8 in FIG. 3b) to the microcontroller input analog-to-digital converter section 104 (FIG. 6); and 3) provide the sensor 36 .+-.5 VDC reference power 204 from a reference generator 209 (supplied with clean .+-.15 VDC power 249 see FIG. 6) via pins 4 and 5 of terminal block 40 (FIG. 3b). As selectively switched by microcontroller selection signal 208, the buffer and conditional amps shown provide the analog low, middle and high signals 205, 206, 207 respectively to bus 210 for distribution to the microcontroller board (FIG. 6) below. DIGITAL INPUT/OUTPUT CIRCUIT The digital input/output (DIO) board 240 is illustrated in the block diagram of FIG. 5 (2 pages, FIGS. 5a and 5b, respectively). The DIO board is preferably a separate board and is the primary interface between the LNG skid microcontroller circuit (FIG. 6) and all peripheral devices other than the flammable gas sensors, including but not limited to: the LCD display screen 20; keypad 9; magnetic card reader 8; RS232 serial port 11 which permits connection to a field transportable laptop computer; all process sensors, e.g., pressure DPT-1, temperature DT-1, flow meter 33, tank temperature PIT-1, tank level LL-1 and valve position, DV 1-4; and all system relays 220 for actuation of pumps 24, valves DV 1-4, purge N.sub.2 pressure, and vents. The DIO board contains one 2K8 serial EEPROM memory device 227 for storage of gas leak sensor "zero" and "25% LFL" calibration voltage reference values. As seen in FIG. 5b, the DIO board contains a buffer 221 for LCD display data which is switched by the device logic circuit 222. The device select logic circuit also switches, via digital output source drivers 223a, b and digital output sink drivers 236a, b, command outputs for all internal relays 220, display panel backlight 224 and display panel light emitting diodes L1-L6, 225. Valve limit switch inputs 238, indicative of the valve position (open/close), are received via the digital input electronics 226 (FIG. 5b), while all other analog process signals 24 and 254 are received via the signal conditioning electronics 250 and multiplexers (MUX), 251, 252 (see FIG. 5a). The device select logic circuit 222 also switches data inputs from all process control and monitoring transducers (except the leak detection sensors), such as temperature, pressure, flow, level and position sensors. The transducer signals 254 are input from: the fuel flow meter 33 (DFM on Table I); the N.sub.2 purge gas supply pressure (DPT-2 on Table I); TVAC tank liquid level LLT-1; TVAC tank pressure PIT-1; pump discharge pressure DPT-1; and the battery backup voltage. The pump temperature is measured by a type E chromel/constantan thermocouple which produces signal 256. The thermocouple reference junction is mounted to a temperature reference block monitored by an RTD (Resistance Temperature Device) which produces the resistance signal 255. The pump AC power "ON" is sensed by transducer signal 257. All three are input to conditioning electronics 250 as shown in FIG. 5a. Referring now to FIG. 5b, the DIO board contains two universal asynchronous remote terminal(UART) devices 228, 229 with a shared oscillator 230. One UART provides the system interface to the RS485 drier 231 which is connected to the skid card reader and keypad assembly 6. The other UART 228 provides the system interface to the RS232 driver 11 which is connected to the skid external computer interface. This RS232 interface allows service personnel to connect a portable computer to the field microcontroller. The portable computer is then capable of performing all HOST system functions when running an authorized version of the HOST software. The DIO Board receives power from four distinct sources: 1) clean .+-.15 VDC 249 for the buffer amplifiers 251; 2) .+-.15 VDC supply power 245 off bus 210 which is conditioned by power conditioning circuitry 232 to produce both .+-.15 VDC power 233 to the card reader 8 and keypad 9, and 9 VDC power for the modem; 3) clean .+-.5 VDC power 250 for the board component power plane; and 4) 9 VDC power from battery backup 239 which is conditioned, stepped up and output as backup 9 V 235 to the modem and backup 15 V to the keypad and card reader. LNG SKID MICROCONTROLLER CIRCUIT The LNG skid microcontroller 12 performs all control, monitoring, and data management for the LNG skid control system through the execution of the microcontroller firmware. The LNG microcontroller circuit is illustrated by the block diagram in FIG. 6. The LNG microcontroller 12 interfaces to other system elements using discrete analog and digital bus 210 (denoted "Bus" in the figure) which provides signal paths connecting the LNG microcontroller with the leak detection sensor interface circuit 102 (signal path denoted "Analog Sig./8 ch."), and digital input/output circuit 240, which provides control and data signals 260. The analog leak sensor inputs are digitized by the analog-to-digital converter 104 (denoted "A/D, in FIG. 6), resident on the Intel 80C196K type 16-bit microcontroller chip 108. The LNG microcontroller uses a digital data bus with memory-to-microcontroller data buffers 241 and microcontroller-to-memory data page selector 242 to connect the microcontroller chip 108 to memory 243 for data storage (denoted "Data Logging Memory"). Digital communications are accomplished via an RS232 driver 244, for the telephone modem 247, e.g. cellular output via antenna 18 (FIG. 1), or land line 248. The microcontroller circuit contains an on-board oscillator 230 providing the system clock pulse. The microcontroller circuit accepts .+-.15 VDC utility power 245 from the bus, filters it in filter band 232, feeds a pair of transformers 246 to provide clean .+-.5 VDC power 250 to microcontroller chip 108. Both the clean filtered .+-.15 VDC power 249 and the .+-.5 VDC 250 are output to bus for other circuits of the system. MICROCONTROLLER CONTROL OPERATIONS FIG. 7 is a logic diagram of the firmware driven control modes of the field microprocessor control and gas leak detection system. The Intel 80C196K microcontroller contained within the LNG skid microcontroller V1.0 circuit is permanently and indelibly "burned-in" to contain the microcontroller operating software, also known as firmware in such indelible applications. The LNG skid control states of the firmware are summarized in FIG. 7. The firmware is normally held in the QUIET TIME operating mode 60 until such event as an external user or host input requires the change of skid control operating mode. In QUIET TIME mode, the microcontroller periodically and repeatedly performs all normal housekeeping, safety monitoring and host communications functions, as described below, and processes user requests which may or may require a change in skid control operating mode. When a quiet time input is received which requires a change in control mode, two possible control states may be entered. If the input requires an emergency response to shut down and make safe the LNG skid, the SAFE mode 62 is entered. The dashed arrows to SAFE show entering SAFE mode from any other mode. SAFE mode is a series of response operations to shut down the skid (close valves stop pump, report as described herein). An external action by an authorized HOST described above, is required to return to QUIET TIME operating mode once the SAFE shut-down activities mode is entered. The second mode that may be entered by command from QUIET TIME is PUMP CHILL mode 64. The PUMP CHILL control mode performs necessary control actions to temperature precondition the LNG skid for dispense and fill operations. As shown by then dashed arrow, PUMP CHILL may exit to SAFE mode in an emergency. Normally it exits to RECIRCULATION mode 66 to maintain the skid in a ready condition for fill and dispense operations. The RECIRC mode maintains the temperature conditioning of the skid and chilling of the fuel lines by fuel recirculation for TVAC fill and customer dispense (also known as VEHICLE FILL) operations. Once the lines are properly chilled by the fuel recirculation, the control firmware enters either VEHICLE FILL 68 or TVAC FILL 70 control modes. In these modes, LNG skid control operations are performed in response to user inputs (transactions entered on the keypad 9 after the authorization via card swipe on reader 8 (See FIG. 1). Both VEHICLE FILL and TVAC FILL modes default back to QUIET MODE upon completion of the transaction. If not complete, the RECIRC mode is entered until the fill command is reentered to complete fill operation. Not complete fill, by going back to RECIRC permits termination of the fill operation at a partially full stage. QUIET TIME mode and RECIRC modes are accessible via manual input 72 using the switch panel 7 (FIG. 1). All modes monitor for unsafe or unauthorized conditions via sensor 36 inputs to microcontroller 12, and respond by proceeding to SAFE mode when such conditions are detected. FIG. 8 shows the operator modes preprogrammed into the field microcontroller firmware. The LNG skid control firmware is normally held in waiting in the QUIET TIME mode waiting state 61 until such event as an external user or host input requires the change of skid control operating mode. An external user initiates access to the microcontroller by inserting a magnetic or proximity card into the slot 8 of the card reader 6 (FIG. 1). The microcontroller recognizes at least two types of card, a USER card and an OPERATOR card. A card entry is read (recognized) 71 while in the WAITING state of the QUIET TIME control mode described above with reference to FIG. 7. This causes the microcontroller to attempt to validate the card 72 using authorized user number data internally stored within the LNG skid microcontroller circuit SRAM memory. The VALIDATE CARD comparison check 72 may lead to two states based on this test. If the user number is found to be authorized as valid 73 within internal memory, the firmware proceeds to the OPTIONS initializing condition 74. If the card cannot be validated internally 75 by comparison to memory, the firmware will attempt to validate by calling 76 one or more HOST sites via the internal modem. The CALL TO VALIDATE state 76 may exit to WAITING 61 if validation is unsuccessful, or to OPTIONS 74 if updated or override validation in the HOST is successful. The card reader may be bypassed 77 by an external computer connected via modem or the site RS232 port only if the GET ID state 78 successfully verifies the external computer as an authorize HOST. If not, the buyer's attempt is put on hold, as shown by Timeout 79a. If there is no selection made timely in OPTIONS state 74, the system (and user) is returned via timeout 79b to the waiting state 61. Once in the OPTIONS state, the OPERATOR user may select via the site keypad one of three skid control states: VEHICLE FILL 68, TVAC FILL 70, and DIAGNOSTICS 80. Selecting VEHICLE FILL (described below with reference to FIG. 9 and Table III) or TVAC FILL (described below with reference to FIG. 10 and Table IV) will cause the skid controller to exit the QUIET TIME control mode and proceed through the PUMP CHILL--RECIRC--VEHICLE FILL or TVAC FILL control modes described above in reference FIG. 4. Upon completion of any TVAC FILL or VEHICLE FILL transaction, be it normal or abnormal, the controller returns to QUIET TIME control mode 61, the transaction is recorded in internal memory 81 and the firmware returns to the waiting state 85a, 85b. If the latest transaction uses the last available transaction memory site (transaction limit of the provided internal memory), or the transaction limit of a customer is reached, the firmware automatically and immediately initiates an upload to a HOST site 82, and thence returns to the waiting condition of the QUIET TIME state, 85c, 85b. The HOST can poll local memory, as well, as shown by arrow 83. Selecting DIAGNOSTICS 80 enables a restricted operating state wherein each leak detection sensor may be individually monitored, turned "on" or "off," interrogated for current values of the two calibration points (0 and 25% LFL), or recalibrated using two new calibration points, as described above. Only selected OPERATORS are authorized to enter the DIAGNOSTICS state. Attempts by unauthorized users are unrecognized by the firmware leading to Time-out return 84 to the WAITING state 61. Sensor calibration via the diagnostic mode menu is described above with the description of the sensor transmission circuit of FIG. 3. FIGS. 9 and 10 are flow sheets of the VEHICLE and TVAC fill operations, respectively, and may be cross-referenced to both FIG. 7 and Table III VEHICLE FILL, and Table VI TVAC FILL below. Table III and FIG. 9 show the operator action, the controller action (sense and control response) and the LCD display prompts to the user/operator during VEHICLE FILL.
TABLE III
__________________________________________________________________________
Normal Vehicle Fill
Operator Action
Controller Action LCD Display
__________________________________________________________________________
1 "Insert Card In Card Reader To
Begin Fueling"
2 Insert Card
Validate Card "Fill Vehicle Yes or No?
3 Push YES Button "Connect Hoses and Ground Wire,
Push YES"
4 Push YES Button
Verify DV-2 In Recirculation
Position
5 Open DV-1
6 Monitor DT-1 Until DT-1 is
<T.sub.start
7 Start Pump
8 Monitor DT-1 Until DT-1 is
<T.sub.fill
9 Display User Prompt
"Fuel Temp = ??? Push Yes To
Fill or No To Abort"
10 Push YES Button
Open DV-2 To Fill Position
11 Calculate Gallons Pumped
Real-Time Gallons Pumped
Displayed
12 Monitor Full Tank Condition
--
13 ?Increase In Pump Discharge
--
Pressure?
14 Open DV-2 To Recirculate Position
Display Total Gallons Pumped
15 Close DV-1 "Disconnect Hoses And Ground
Wire And Enter Yes"
16 Disconnect Hoses and
Ground
17 Push YES Button
Complete Transaction Record
"Don't Forget Your Card"
18 Signal Card Reader To Eject Card
19 Reset For Next Fill
"Insert Card In Reader To Begin
Fueling"
__________________________________________________________________________
The VEHICLE FILL control mode shown in FIG. 9 (see also FIGS. 7 and 8) is entered when a user entering an authorized USER or OPERATOR card selects a vehicle fill transaction via the LCD display 20 (FIG. 1). As described above, vehicle fill operations require as a precondition a wait for chill 91a pump temperature condition (Pump Chill 64) and system recirculation 66 prior to dispensing the fuel 100. Free to initiate chill command 90 is made, the pump is chilled 64. When that terminates 64a as determined by the time or temperature, the initiate recirculation signal 92 is sent to the pump and valves DV1, DV2, the pump starts the recirculation 66. The operator waits for the pump chill 64. The recirculation 66 to be completed, 91a and 91b respectively, while observing the display 20. The sensor DT1 (FIG. 1) sends a pump discharged temperature signal to the microcontroller which presents pump discharge temperature (DT-1) and estimated time to ready-for-fill condition on the LCD display 20 during PUMP CHILL 66 and RECIRC 66 control modes. When ready, the recirculation terminates 66a, e.g., valve DV2 switches to supply 27 (FIG. 1). The microcontroller then initiates LCD menu options 93 for the desired fill operation termination condition which may be: (1) a vehicle fill to capacity; or (2) a vehicle fill of a user defined number of gallons of fuel. If the operator delays too long, the microcontroller can return the system to time out 94. The user is then prompted by the LCD panel to connect the vehicle to the skid vehicle fill lines and initiate the vehicle fill operation. This is called the "Hook up message" 95. Again, if no timely fill, the system returns to the waiting state 96. The user initiates fill 100 by connecting fill line to supply fitting 27 and vapor return to vent fitting 28 and DV4 is opened by the microcontroller. The pump then fills the vehicle from the TVAC LNG storage tank 22 via open valves 30, 34 while the LCD display monitors the fill progress 97 until either: (1) user (or safety system) action to abort further filling 98 or (2) fill completion 99. Upon completion or filling 98 or (2) fill completion 99. Upon completion or abort, the microcontroller firmware exits to the RECORD TRANSACTION states 81, or to the host 82 as discussed in the description accompanying FIG. 8. Likewise for the storage tank fill/refill, FIG. 10 Table IV illustrate the operation:
TABLE IV
__________________________________________________________________________
Normal TVAC Fill
Operator Action
Controller Action LCD Display (Positive Response)
__________________________________________________________________________
"Insert Card In Card Reader To
Begin Fueling"
1 Insert Card
Validate Card "Connect Hose From Truck,
Ground Wire And Push YES"
2 "Top Fill = YES, Bottom Fill = NO"
3 Push YES or NO
If YES go to STEP 4, if NO go to
"Connect Hoses and Ground Wire
Button STEP 16 Connected, Push YES"
4 Push YES Button "Close V-1 and open DV-7 and
Push Yes"
5 Push YES Button
If YES. If NO, go to TIME OUT
6 Verify DV-2 In Recirculation
Position
7 Open DV-1
8 Monitor DT-1 Until DT-1 Is
<T.sub.start
9 Start Pump "Top Fill Started Push Cancel
To Stop"
10 Push Cancel Button
Stop Pump "Top Fill Stopped"
11 Close DV-1 "Continue Filling YES or NO?"
12 Push YES or NO
If YES Repeat Steps 2 and 3 and
Button Top or Bottom Fill Procedure
13 If NO "Open Valve V-1 and Push Yes"
14 Push YES Button "TVAC Fill Complete - YES OR
NO"
15 Push YES or NO
If NO Go To Step 2, If YES Go To
Button Step 22
16 If No at Step 4
17 Display Manual Instructions
"Open Valve V-1 on TVAC and
Press YES"
18 Push YES Button
-- "Fill From Truck"
19 "Push CANCEL When Button Fill
is Complete"
21 Push YES or NO
If YES Go To Step 2. IF NO, Go To
Button Step 22
22 "Enter Gallons Filled"
23 Push Numeric Keys "???? Gallons Filled YES or
NO?"
24 Push YES or NO
If No Go To Step 22, If No Go To
Button Step 25
25 "Confirm Valves DV-7 is Closed
and V-1 is Open and Enter YES
26 Push YES Button "Disconnect Hoses and Ground
Wire, Push YES"
27 Push YES Button
Complete Transaction Record
"Don't Forget Your Card"
28 Signal Card Reader To Eject Card
29 Reset For Next Fill
"Insert Card In Card Reader To
Begin Fueling"
__________________________________________________________________________
The TVAC FILL control mode shown in FIG. 10 (see also FIGS. 7 and 8) is entered when a user entering an authorized USER or OPERATOR card requests a TVAC fill transaction via keypad selection 88 prompted by menu options presented on the LCD display 20. As described in the discussion accompanying FIG. 9, TVAC fill operations require pump temperature conditioning 64 and system recirculation 66 prior to accepting the fuel. The microcontroller presents pump discharge temperature (DT-1) and estimated time to ready-for-fill condition on the LCD display during PUMP CHILL and RECIRC control modes 91a and 91b respectively. When ready, the microcontroller initiates LCD menu options for the desired fill condition 93 which may be: (1) a TVAC fill to capacity; (2) a TVAC fill of a user defined number of gallons of fuel. The user is then prompted to connect the skid TVAC fill connections and initiate the TVAC fill operation, Hook up message 95. The fill is initiated by hook up to fitting 26 and manual valve 25 is opened by the operator (and may be prompted on the screen). Three-way valve DV-2 does not connect to fuel supply 27 and DV-4 does not open. The tank is filled through lines 34 and 31. The LCD display monitors the fill progress until either: (1) user (or safety system) action to abort further filling 98; or (2) fill completion 99. Upon completion, the microcontroller firmware exits to the RECORD TRANSACTION state 81, or to the host 82 as discussed in the description accompanying FIG. 8. The LNG Skid Microcontroller V1.0 is equipped with RS232 serial connections to a Microcom model modem (operating at 9600 or better baud rate) which is in turn connected to a conventional cellular telephone (e.g., a Motorola model SLN4103A cellular telephone) or land line. Firmware operating states for modem activation, determination of secure connection, and modem operations are described by way of illustration in FIG. 11. Modem operation begins by firmware initiation of the RS232 UART protocol 112 which is performed on system power-up 110. The modem firmware resides in the WAIT FOR CALL (WFC) 114 state unless placed in DIAL state 116 by the firmware in response to: (1) emergency shut-down condition 118; (2) scheduled transaction data upload condition 120; or (3) transaction limit condition 122. If an incoming RING (RG) message 124 is received while in WFC state, the firmware will either: (1) establish the carrier and proceed to the CONNECT (CN) state 126; or (2) log an error message and proceed to the CLEAR MESSAGE (CM) state 128. The firmware then expects to receive a dial-back phone number which it compares to an internally stored list of valid dial-back numbers. Dial-back number lists may be periodically modified in microcontroller memory by an authorized HOST to enable remote access security. If the dial back number is verified, the firmware will hang up the modem 130 and initiate the dial back 132 to the authorized HOST. Upon connection, the microcontroller enters the RESPONSE state 134 wherein the HOST directed transactions are enabled. In DIAL state 116, the microcontroller will proceed through the list of authorized HOST phone numbers until able to establish a valid connection. The firmware then enters the EMERGENCY RESPONSE state 118 wherein all microcontroller initiated transactions are enabled. If no valid connection is established from the internal list of authorized phone numbers, the firmware will power down the system 136 to conserve battery back-up power, wait fifteen minutes 138 and then reinitiate the DIAL state sequence. HOST SOFTWARE: The HOST software resides-within one or more PC-type computers located remote from the LNG skid. Example HOST sites are the skid owner's home office, the skid owner's local office, or the field technician's laptop computer. HOST software enables remote access to the LNG skid microcontroller via modem using cellular or land line telephone connections. The HOST site may perform all possible station operations by way of the microcontroller and upload and download microcontroller memory information. Initializing the HOST software is shown in FIG. 12. The HOST software control flow routine is initiated 140 by the user's input of the LNG.EXE command at the DOS prompt within the appropriate subdirectory, normally C:/LNG which is the INSTALL program default. The software first initializes the HOST system. If unsuccessful, the software halts program execution 141 and issues an error message to the user. Otherwise, the program proceeds to display the appropriate proprietary and copyright notice screen 142. The user must respond to the screen with a carriage return, thereby initiating program execution including HOST computer user input (GUI) 143. The software then cycles between background system tasks performed in IDLE mode 144 and response to user keyboard/mouse inputs 145 as required until exit, 146 (QUIT). Control modes of the HOST software, when assessing the LNG skid microcontroller, are defined in FIG. 13. From IDLE mode 60 (also called QUIET TIME), the host system operator may initiate a connection to the LNG skid microcontroller by point-and-click action with the computer's mouse. Upon connection, the HOST downloads a user request for call-back and enters the CALL-BACK WAIT mode 150. Upon call-back connection, the HOST may proceed to either: (1) MONITOR mode 151 wherein all LNG skid control and monitoring transactions are enabled; or (2) MANUAL UPLOAD mode 152 wherein all skid microcontroller memory read/write transactions are enabled. The skid microcontroller may initiate the AUTO UPLOAD mode 153 via call-in to the HOST which may on a preset timed routine (timer 154 in FIG. 13). The HOST may also revisit and analyze previously uploaded data stored in HOST memory via the REPLAY mode 155. REPLAY mode features simulated real-time playback of stored data for system diagnostic, training, or analysis purposes. All HOST operating modes are interrupted by an emergency call-in from any field skid unit. This interrupt places the HOST into EMERGENCY mode 156. EMERGENCY mode posts an operator alert (including an audible beep), performs a log entry, and immediately uploads and stores all memory resident data from the calling skid microcontroller. EMERGENCY mode terminates automatically when the data exchange is completed 157. As noted above with respect to FIG. 12, the HOST software is initiated by the user's input of the LNG.EXE command at the DOS prompt within the appropriate subdirectory, normally C:.backslash.LNG which is the INSTALL program default. The software first initializes the HOST system by performing the tasks diagrammed in FIG. 14. The primary functions of the initialization routines are to set the HOST system operating parameters and load the pertinent database information from HOST storage. After start of routine 160 and loading the HOST computer user input 161 (Get User Input) the screen displays are initialized 162, which includes presentation of the copyright, patent, trademark and proprietary notices, the system will: (1) load the schedule database 163 describing the HOST auto upload schedule for the remote station microcontrollers; (2) load the database of port configurations 164 and initialize the communications ports 165; (3) proceed to the IDLE control mode 60 and update the station icon tables and screen 166; and (4) update the alert tables and notify of unanswered or open alert conditions 167. The software then returns 168 to its normal priority driven progression through the SYSTEM TASKS (See FIG. 13), unless interrupted by user input or station call-in. The HOST system tasks control flow routine is diagrammed in FIG. 15. This diagram illustrates the normal operating functions of the HOST software. Upon startup of the routine 170, each task cycle begins with an update to the system clock 171. The software then checks the status of each enabled interconnection port for input of any call-in message or disconnect message 172. If the software detects a disconnect message, a timer is initiated for the anticipated call-back 173 from the remote station. If the software has registered a disconnect during a previous cycle, the timer is updated. If a `time-out` condition is reached in the current cycle, the software logs a user alert message 174 to the screen and to memory then returns to normal processing flow 60 (FIG. 13). In the event that no call-in or disconnects are received, the system continues with normal processing flow 175. The software next proceeds to a priority driven scheduler wherein each current system task is listed 176 and prioritized 177 in a task queue. The single highest priority task 178 is executed within the current software cycle. Remaining tasks are retained in the task queue for completion during subsequent cycles. The software next evaluates its internal auto upload schedule tables 179 to determine the need to initiate an upload cycle. If a positive response is obtained, the auto upload routines 153 (See FIG. 13) are initiated. Finally, the software evaluates the control mode state to determine if the system is performing in REPLAY 155 (Se FIG. 13) rather than real-time mode. If operations are occurring in REPLAY mode, the software extracts the next log file input data set 180 prior to concluding the routine by returning to the beginning of the system control software cycle. The software control flow for evaluating and reacting to HOST system data port interfaces to the remote skid locations is illustrated in FIG. 16. Upon starting the routine 187, the software evaluates the port status 181 for each remote skid location (called a channel in the figure) during each system control cycle to determine: (1) whether the channel is active 182; and (2) whether the channel connection is valid and functioning properly 183. The software then responds to the call-in by establishing the data connection 184a, or alternately attempts to reestablish the connection should an existing connection fail 185a. This includes evaluating changes in field micro controller identification 186, and handling lost connections 185b and call-ins 184b. The software control flow for reevaluating and prioritizing the HOST system tasks for each remote skid location is illustrated in FIG. 17. Upon routine startup 190 the software evaluates the current task list for each remote skid location 191 (called a channel in the figure) during each system control cycle to determine: (1) whether the channel is active 192; and (2) whether the channel (field station) status (state or mode in which the station is at polling time) 193 has changed from the previous system control cycle. The software then responds to any status change 194 (See FIG. 13) by reevaluating the task priority list 195 and logging alerts 196, when necessary. It should be understood that various modifications within the scope of this invention can be made by one of ordinary skill in the art without departing from the spirit thereof. We therefore wish our invention to be defined by the scope of the appended claims as broadly as the prior art will permit, and in view of the specification if need be.
|
Same subclass Same class Consider this |
||||||||||
