Abstract: A fail-safe fluid transfer control apparatus has full redundancy in the response to various inputs such as overfill probe signals, ground detection signals, and the like. Independent microprocessor controllers independently evaluate the inputs and each output control signals to close a respective relay when the inputs indicate that fluid transfer may commence. The relays are arranged in series such that both must be closed for a fluid transfer to commence. The control signals from each controller include a static signal and an alternating signal, both of which must be properly output to close its respective relay. Each controller monitors the state of each relay, and discontinues its control signals if either relay appears to be malfunctioning. Each controller runs an different, independently written firmware program to process the detected inputs to prevent a common firmware error.

Abstract: A fail-safe fluid transfer control apparatus has full redundancy in the response to various inputs such as overfill probe signals, ground detection signals, and the like. Independent microprocessor controllers independently evaluate the inputs and each output control signals to close a respective relay when the inputs indicate that fluid transfer may commence. The relays are arranged in series such that both must be closed for a fluid transfer to commence. The control signals from each controller include a static signal and an alternating signal, both of which must be properly output to close its respective relay. Each controller monitors the state of each relay, and discontinues its control signals if either relay appears to be malfunctioning. Each controller runs an different, independently written firmware program to process the detected inputs to prevent a common firmware error.

Abstract: A fail-safe fluid transfer control apparatus has full redundancy in the response to various inputs such as overfill probe signals, ground detection signals, and the like. Independent microprocessor controllers independently evaluate the inputs and each output control signals to close a respective relay when the inputs indicate that fluid transfer may commence. The relays are arranged in series such that both must be closed for a fluid transfer to commence. The control signals from each controller include a static signal and an alternating signal, both of which must be properly output to close its respective relay. Each controller monitors the state of each relay, and discontinues its control signals if either relay appears to be malfunctioning. Each controller runs an different, independently written firmware program to process the detected inputs to prevent a common firmware error.

Abstract: A unique vehicle ID number and other verification information is stored in a small memory mounted on a tank truck. When the truck is connected to a loading terminal by means of a cable which is used by an existing overfill/ground system, an interface circuit connected between the memory and the cable prevents signals which are normally found on the cable leads from damaging the memory circuits. When information must be read from the memory, a special identification and verification system connected to the overfill/grounding circuits modifies some of the normal signals on the cable in order to activate the on-board memory and retrieve the stored information without disabling the overfill and ground proving capabilities.

Abstract: A fluid overfill and identification system uses a pulsed signal to both detect an overfill condition and identify a fluid product contained in a compartment. The pulsed signal is converted into an optical pulsed signal which is used with a retroreflective prism to detect when a fluid in the compartment has reached a desired capacity. Encoded in the pulse width of the same pulsed signal is the specific fluid product located in the compartment. Furthermore, different pulse frequencies are provided depending on whether the tanker truck is at a service station or at a loading terminal, thus allowing the system to distinguish between the two. At a marketing terminal, a new code is loaded into the system as a new fluid product is loaded into a compartment. A residue sensor may detect residual fluid in the compartment, and prevent the loading of a new fluid product and a new ID code.

Abstract: The present invention resides in a probe excitation and testing ("PET") system that can apply either a normal excitation or a "small" bias test excitation to overfill protection probes mounted within storage and transport tanks used to store, e.g., flammable fluids. The PET system applies the normal excitation for normal operation of the probes to provide overfill protection, and applies a "small" bias test excitation to the probes for performing diagnostic tests, including anti-cheating. The PET system can also perform a probe signature validation test under normal excitation to ascertain whether the probes are responding thereto in accordance with specifications relating to characteristic parameters of the probes' output waveforms, e.g., duty cycle, magnitude, and period.

Abstract: A dynamically self-calibrating, intrinsically safe DC--DC power supply generates a controlled output voltage during normal operation and limits the output voltage and current during fault conditions, such as applied overvoltages or short circuits within the supply. The supply has a voltage regulator for generating a controlled output voltage in response to a feedback voltage applied to a control terminal. The supply also has a voltage-clamping Zener barrier, which includes (i) a power Zener diode connected between the output and control terminals of the regulator for supplying the feedback voltage thereto, which is reverse-biased during normal operation of the supply, and (ii) a non-linear, low impedance path between the control terminal and ground in parallel with a resistor. The feedback voltage causes substantially constant current to flow through the diode during normal operation, thereby dynamically compensating for any variation in breakdown voltage of that Zener diode.