669results about "Safety arrangments" patented technology

A hybrid, redundant, fail-safe architecture provides a unified fail-operational framework for autonomous agents operating across physical and virtual domains. The system employs a multi-modal data source suite, an adaptive hybrid data fusion module, and an intelligent decision-making module. A novel closed-loop interaction enables a health monitoring module that detects an incipient fault in a data source by monitoring ancillary performance metrics. Upon detection, the module generates a fault signature, including a quantitative prognostic estimate of a future failure time, and transmits it to an adaptive data fusion module. The fusion module proactively reconfigures its state estimation algorithm by decreasing reliance on the degrading data source in proportion to the prognostic estimate. This preemptive compensation ensures the system maintains a high-integrity environmental model and achieves true fail-operational continuity. The architecture is applicable to numerous embodiments providing a universal solution for proactive fault management and system resilience.

The invention discloses a ship propulsion control system and method, and relates to the technical field of ship engineering.The ship propulsion control system comprises an acquisition module used for acquiring analog quantity signals during ship propulsion, and a main controller module used for receiving the analog quantity signals and generating a propulsion control instruction; according to the ship propulsion control system, two acquisition channels are arranged for analog quantity signals, a fault channel is rapidly detected and switched in combination with a self-checking mechanism, the fault channel can be rapidly detected, the fault channel can be rapidly switched, the fault channel can be rapidly detected, the fault channel can be rapidly switched, and the reliability of the ship propulsion control system can be improved. A digital quantity output channel fault is found in time and switched to a standby channel, a power supply and communication interface backup strategy is perfected, fault priorities are accurately divided, corresponding measures are taken, the strict requirements of modern ships for high reliability and high safety of propulsion control are met, and powerful technical support is provided for stable navigation of the ships.

The invention discloses a charging pile liquid cooling module intelligent cooperative control system based on an industrial Ethernet, and relates to the technical field of liquid cooling control. The charging pile liquid cooling module intelligent cooperative control system based on the industrial Ethernet comprises a liquid cooling data acquisition and preprocessing unit used for acquiring and preprocessing liquid cooling cooperative operation data; the thermal load sensing and intelligent liquid cooling regulation and control unit is used for dividing independent cooling branches, evaluating the thermal load degree of each cooling branch, judging the real-time thermal load state and generating and executing a control instruction; the anomaly detection and cooling redundancy control unit is used for evaluating the thermal response deviation condition of a cooling branch and judging whether a double-ring redundancy pipeline is started or not; and the fault root cause judgment and recovery enhancement unit is used for evaluating the component fault risk degree in the abnormal branch and executing fault-tolerant control and branch recovery strategies. The problem that a whole set of liquid cooling system is shut down due to the fact that local fault tolerance cannot be achieved when a local branch breaks down in a traditional pipeline structure is solved.

The invention discloses a safety control method and system for an emerging control main body, and belongs to the technical field of power system active control, and the method comprises the steps: carrying out the bidirectional data interaction through a master station AGC and a field station AGC, and carrying out the bidirectional data interaction based on a bidirectional data interaction result and a cooperative anti-error parameter; whether the emerging control main body is in a controllable state or not is judged in real time through collaborative security locking logic; if the control main body is in the controllable state, active measurement data of the emerging control main body are obtained, and jump detection and multi-source checking are carried out on the active measurement data; after verification is passed, a pre-control instruction is generated based on the control strategy, and reasonability verification and control effect simulation verification are carried out; and after the control effect simulation verification is passed, the pre-control instruction is taken as a final control instruction to be issued to the emerging control main body for execution. The method can greatly improve the safety control capability of AGC on an emerging control main body, guarantees the frequency operation safety of a power grid, and improves the safe and reliable power supply capability of the power grid.

The invention relates to the technical field of verification and evaluation, in particular to a reusable rocket attitude control system redundancy verification and fault tolerance evaluation method, which comprises the following steps: performing multi-dimensional combination on disturbance units according to disturbance types, action time periods and intensity grades to form a disturbance combination set, constructing a group of induction task profiles covering different attitude control abnormal situations; recording a switching state of an internal control path of the attitude control system, a redundant component intervention time sequence and a function takeover sequence in real time, and constructing a dynamic response path map of a redundant link; and generating a response integrity index and a fault tolerance conflict degree criterion of redundancy configuration as a fault tolerance capability evaluation result of the attitude control system. Compared with an existing method which only verifies individual static disturbance scenes, the method has the advantages that systematic design and composite excitation of disturbance conditions can be realized, scene complexity and coverage of redundancy verification are enhanced, and authenticity and representativeness of fault-tolerant testing are improved.

The invention discloses a piece placing sequence mistake proofing device which comprises a multi-dimensional sensing module, an intelligent control module, a reconfigurable positioning module, an execution intervention module, a block chain tracing module and a man-machine interaction module, and all the modules communicate through an industrial Ethernet. The multi-dimensional sensing module and the intelligent control module adopt a time-sensitive network protocol to guarantee the certainty of data transmission, the multi-dimensional sensing module integrates an AI vision assembly, an ultrahigh frequency radio frequency identification read-write unit and a polarized light detection assembly, and parallel acquisition and cross validation of cutting piece multi-dimensional information are realized through a time sequence synchronous triggering mechanism. According to the method, a full-dimensional recognition system can be constructed through cooperation of multi-modal sensing fusion and an intelligent algorithm to avoid a single detection blind area, multi-variety production requirements are adapted by relying on AI incremental learning and rapid remodeling design, non-tampering tracing of quality data is realized in combination with a block chain technology, and the method is suitable for mass production. And meanwhile, reliable operation of the system is guaranteed through redundancy control and emergency design.

A plastics processing system is described. This system comprises at least one plastics processing machine (100) and a control and operating system (10) for controlling and operating this plastics processing machine (100). The control and operating system includes a cycle control unit, which, in a production mode, controls the plastics processing machine at least indirectly and which, for this purpose, uses a first computing unit (20) equipped with a first operating system. Furthermore, the control and operating system includes a first interface device (30), which has at least one first input device, at least one visualization device, and a second computing unit (34) equipped with a second operating system and in communication with the first input device and the visualization device. The first computing unit (20) and the second computing unit (34) communicate via A bidirectional first communication device (36) is provided. This allows the plastics processing machine (100) to continue operating even if the first interface device (30) fails, for example, to process an existing production order. To ensure minimum communication with the cycle control system even if the first interface device (30) fails, a second interface device (50) is also provided, which has at least one second input device (52). The signals generated by the second input device (52) are transmitted to the first processing unit by means of a second communication device (54) that operates at least unidirectionally.

The invention relates to a working method of a vehicle control system of a redundant electrical architecture, belongs to the technical field of redundant control systems, and solves the problem that an existing control system is poor in reliability. The method provided by the invention comprises the following steps: during starting, the main controller is defaulted to be an effective controller in the controller group with the backup, the hot backup controller monitors whether the main controller is in an abnormal state or not through a heartbeat signal, a fault signal and a first verification signal of the main controller, and if the main controller is in the abnormal state, the main controller is controlled to be powered off; the hot backup controller is switched to an effective controller; the cold backup controller monitors whether the hot backup controller is in an abnormal state or not through a fault signal, a heartbeat signal and a second verification signal of the hot backup controller; if the hot backup controller is in the abnormal state, the hot backup controller is controlled to be powered off, the control mode of the cold backup controller is activated, and the cold backup controller is switched to the effective controller. According to the invention, the reliability of the system is improved through effective arbitration of the effective controller.

The invention relates to the technical field of satellites, in particular to a three-super platform actuator eddy current sensor fault autonomous reconstruction method. Comprising the following steps: according to a parallel mechanism kinematics relationship of each actuator, determining a first relationship between axial displacement measured by an actuator eddy current sensor and a load relative to a six-degree-of-freedom pose of a satellite platform; determining a parallel mechanism kinematics relationship of the fault-free eddy current sensor, and determining a second relationship between the axial displacement and the load measured by the fault-free eddy current sensor and the six-degree-of-freedom pose of the satellite platform; according to the first relation and the second relation, matrix reconstruction is carried out on the remaining fault-free actuator eddy current sensors, and an autonomous reconstruction matrix is obtained; and according to the autonomous reconstruction matrix and the measurement of the fault-free actuator eddy current sensor, obtaining all actuator eddy current measurement values of the actuator where the fault eddy current sensor is located. According to the method, when the eddy current sensor has a fault, the eddy current sensor distribution array is reconstructed, and three-super control is recovered.

The invention is suitable for the technical field of liquid cooling systems, and provides a liquid cooling CDU online control method and device, a group control system and a data center. The method is suitable for a liquid cooling CDU group control system comprising a plurality of online liquid cooling CDUs, and the liquid cooling CDUs are host machines or slave machines. The method comprises the following steps: when a host detects that any running slave is offline and a standby machine exists, controlling the standby machine to start, and controlling a running liquid cooling CDU to run with the same preset running parameters; the off-line slave is started and stopped according to the number of liquid cooling CDUs needing to be operated recorded before off-line; and when the host detects that any running liquid cooling CDU sends out a fault alarm and a standby machine exists, the standby machine is controlled to be started, and the liquid cooling CDU sending out the fault alarm is controlled according to the level of the fault alarm. Different control strategies are adopted for different faults, a one-step control mode is avoided, stable and reliable operation of the liquid cooling CDU group control system is effectively maintained, and cooling and heat dissipation of the data center are guaranteed.

The invention discloses a reciprocating type passenger ropeway constant deceleration control system, and relates to the technical field of brake control. According to the method, the first-stage constant deceleration braking mode and the second-stage constant torque braking mode are set, analysis is carried out through the second-stage braking conversion algorithm, the deceleration abnormal index, the speed tracking abnormal index and the response abnormal index are output, then the mode abnormal total value is obtained, the braking state is judged, self-adaptive mode switching is achieved, and the braking efficiency is improved. Constant braking deceleration is maintained, swinging of a hanging box is reduced, comfort of passengers is improved, brake rubber abrasion is reduced, meanwhile, regional debugging is not needed, and the operation difficulty of a construction site is reduced; hydraulic loop parameters are analyzed through a failure judgment logic algorithm set by the hydraulic redundancy protection module, a loop abnormal total value is output, and hydraulic loop switching is carried out based on the loop abnormal total value; and through visual display of the fault memory interaction module, the safety redundancy of the braking system is improved, fault tracing and maintenance are facilitated, and the running reliability of the cableway is guaranteed.

A cloud-based industrial safety system executes safety applications and interfaces with industrial assets on the plant floor using software encoded processing (SEP). The use of SEP ensures safety reliable execution of safety applications and data communication software by redundantly executing native code, thereby implementing a level of software-based fault detection that is independent of the hardware on which the safety application operates. This allows the cloud-based industrial safety applications to achieve at least SIL3 safety ratings for safety services even though the safety applications are executed using standard COTS hardware that is commonplace in the server market. The use of SEP to reliably execute safety software on the cloud can make possible a wide variety of safety applications that would be difficult to implement using purely localized industrial safety systems.

The invention relates to a carrier rocket secondary reusable electrical system based on a modular TTE-TSN bus, and aims to solve the problems of reliability, light weight and maintenance efficiency in high-speed reentry and precise recovery of a secondary rocket. The system comprises a modular comprehensive control unit, a redundant TTE-TSN high-speed bus, a distributed thermal protection monitoring network and an intelligent health assessment module. Through the modular design, electrical equipment is greatly reduced, and the mass is obviously reduced; the redundant TTE-TSN high-speed bus realizes high-bandwidth and high-reliability transmission of messages on the rocket; the thermal protection monitoring network and the attitude coordination system dynamically optimize reentry thermal load distribution; the intelligent health assessment model predicts the structural life and reuse feasibility based on machine learning. According to the method, the reuse economy and reliability of the two-stage rocket are remarkably improved, and the method is suitable for commercial spaceflight and hypersonic flight vehicle tasks.

The invention provides a carrier rocket time sequence control full redundancy implementation method, and aims to improve the fault adaptability and the working reliability of a time sequence control system. The full-redundancy design method of three-path information source redundancy, three-path transmission line redundancy, two-out-of-three voting control redundancy and five-tube relay instruction driving redundancy is adopted in the sequential control system, the capacity of adapting to all first-degree faults and most second-degree faults is achieved, a single-point failure link does not exist, and the reliability is high. Normal work of the sequential control system can be ensured in the flight process of the carrier rocket. Based on a three-bus communication electrical architecture of a new generation carrier rocket electrical system, a full-redundancy design implementation method of information source redundancy, transmission line redundancy, voting control redundancy and instruction driving redundancy is adopted, high-reliability carrier rocket time sequence control is completed, the fault adaptive capacity of the time sequence control system is improved, and the time sequence control system has a wide application prospect. And the working reliability of the system in the rocket flight process is ensured.

The invention provides an intelligent circuit breaker fault detection and maintenance method based on double MCUs, and the method achieves the automatic uninterrupted switching when a single MCU breaks down through the main and standby redundancy design, avoids the system breakdown, and greatly improves the usability and reliability. Quantitative scoring of the state of the main control MCU is achieved through a health assessment self-checking algorithm, and the accuracy of fault judgment is guaranteed. Through an intelligent switching arbitration mechanism, on the basis of switching probability calculation and confidence evaluation (health degree stability), a secondary confirmation mechanism is matched, and the error switching risk is effectively reduced. Line fault and MCU hardware fault detection is supported, and fault self-healing is achieved. And after the faulted MCU is recovered, the master and standby roles are automatically returned, so that the manual operation and maintenance cost is reduced.

The invention belongs to the technical field of ship electric propulsion, and particularly relates to a ship electric propulsion dual-mode control system with a multi-redundancy architecture, and the system comprises the steps: firstly, accurately obtaining the actual rotating speed and electromagnetic torque of a motor through a sensor group with redundancy configuration and two-out-of-three voting logic; secondly, calculating load disturbance intensity by utilizing time domain difference analysis, and calculating the deviation between the actual torque and the theoretical hydrodynamic torque in combination with a propeller characteristic coefficient, so as to generate a load anomaly index; generating a dynamic flexible factor with a damping characteristic based on the index by using a Sigmoid function and low-pass filtering logic; and finally, carrying out weighted fusion on output instructions of the rotating speed mode and the torque mode according to the factor. According to the method, normal acceleration and sea wave disturbance can be accurately distinguished, smooth seamless switching between a static water speed stabilization mode and a severe sea condition machine protection mode is achieved, and control oscillation and mechanical damage are effectively avoided.

A PLC redundancy control method, system, and storage medium are disclosed, relating to the field of industrial control technology. An arbitration server periodically collects multi-dimensional health parameters of each redundant PLC and dynamically adjusts the weights of these parameters based on this data. This ensures that the health score criteria accurately reflect actual operational risks, avoiding misjudgments caused by static weights. The arbitration server's time-series prediction model calculates early warning health scores based on historical data and weight change trends. This allows for early detection of potential future failure trends in redundant PLCs. Combined with dual threshold decision-making, proactive early warning switching of redundant PLCs can be implemented, achieving accurate judgment and real-time maintenance of PLC primary and backup roles.

The present disclosure involves systems, software, and computer implemented methods for controlling machinery. The system can include a chassis, a backplane with a communications bus installed within the chassis and configured to provide electrical power to a plurality of modules, a safety circuit installed on the backplane, and a primary control module installed on the backplane. The safety circuit can be configured to monitor one or more sensed parameters of a machine and determine whether to actuate a safety mechanism, the safety circuit does not receive signals from the communications bus of the backplane. The primary control module can be configured to receive one or more sensed parameters of a machine and generate a command signal to send to an actuator of the machine, the one or more sensed parameters can be received via the communications bus, from one or more additional modules of the plurality of modules.

A module system (20) includes a safety module (32) and an external output module (36). The external output module has: a first positive input terminal (170a) electrically connected to a positive electrode (26p) of a power supply (26); a negative input terminal (180) electrically connected to a negative electrode (26n) of the power supply; a positive power supply terminal (176) electrically connected to the first positive input terminal and electrically connectable to an external device (22); and a negative power supply terminal (186) electrically connected to the negative input terminal and electrically connectable to the external device.

The invention provides a dual-redundancy control method, device and system for a gas turbine, electronic equipment and a medium, the position of a valve is monitored through a plurality of sensors, position signals are transmitted to two servo cards, and each servo card independently executes first-stage optimization, screens out the most reliable sensor feedback signal and sends the signal to a controller. And the controller further performs second-stage optimization, so that the accuracy of the valve position information finally fed back to the control system is ensured. The servo valve is provided with a redundant coil, the redundant coil and the two servo cards form a control loop respectively, and the states of the two servo cards are mutually monitored through analog quantity heartbeat signals. Only when it is confirmed that the servo card of the opposite side operates normally, the servo card enters the bypass mode, and meanwhile the fault state is fed back to the controller. And the controller immediately adjusts the parameters of the other servo card so as to ensure the stability of the position of the valve. According to the design, the reliability and the fault-tolerant capability of the control system are remarkably improved, and safe and efficient operation of the gas turbine is guaranteed.

The invention discloses an intelligent electrostatic monitoring system and method based on state self-sensing, and belongs to the technical field of industrial safety monitoring, and the system comprises a pipeline, a Faraday cup sampling mechanism driven by a cylinder, a multi-sensor module and an intelligent control unit. The core of the method is that air pressure and displacement signals of an air cylinder are collected in real time and compared with a pre-stored reference model, the motion state of the air cylinder is intelligently diagnosed, a hierarchical fault-tolerant control strategy is triggered according to a diagnosis result, and self-recovery or shutdown protection is achieved. And the sampling frequency can be adaptively adjusted. The Faraday cup adopts a double-layer shielding structure with height difference and a connector with a round top and a square bottom so as to resist interference; and a top-speed opening and closing mechanism is combined with a multiple flexible anti-blocking sealing structure, so that the problems of mechanical blocking and sealing are effectively solved. According to the invention, the conversion from passive maintenance to predictive maintenance is realized, and the reliability, availability and intelligent level of monitoring equipment in a severe industrial environment are greatly improved.

We provide a shutdown system for robotic arms. [Solution] The robot arm shutdown system comprises an uninterruptible power supply (UPS), a robot arm, and a system operating device. The UPS receives power and generates system power. The system operating device is connected to the UPS and the robot arm and has a designated shutdown time. The system operating device detects the power supply status and generates data for the basic operating process by controlling the operation of the robot arm. When a voltage drop suddenly occurs in the power supply, if the abnormal condition persists and the designated shutdown time is reached, the shutdown process is initiated. The shutdown process involves the system operating device saving the data for the basic operating process when there is no time-series change in the watchdog signal of the system operating device, calculating the shutdown delay time, and shutting down the UPS when the countdown of the shutdown delay time is complete.

A surgical table for supporting a patient during a medical procedure includes a redundant controllers, communication networks and electrically-operated actuators for controlling the table. In the event a controller, communication network or electrically-operated actuator fails, a backup technique takes over thus enabling operation of the table.

The invention provides an all-digital networked fault-tolerant calculation control method and system, and relates to the technical field of power station operation control, and the method comprises the steps: independently collecting reactor data in real time through a main control unit and a plurality of standby control units, and carrying out the synchronization of corresponding output data messages through a high-speed redundant communication bus; verifying the data message, performing automatic correction when a correctable error is detected, and immediately generating and reporting a fault positioning code when an uncorrectable error is detected; identifying a fault component through the fault positioning code, taking the function daughter board as a minimum granularity isolation fault source, and starting a recovery mechanism; operation parameters of each control unit and a field sensor are collected in real time through a safety data bus, and an online machine learning model is utilized to predict potential faults and take prevention measures. According to the invention, the technical problems of low reliability, safety and intelligence of the power station control system are solved.

This control device (1) comprises: an auxiliary storage unit (11); a main storage unit (12) including a first region (121) and a second region (122); a noise acquisition unit (13); an fault occurrence determination unit (14); and a control unit (16) that executes a program of the first region (121) and stores the execution result obtained by executing the program of the first region (121) in the first region (121) and the second region (122). When information regarding noise is acquired by the noise acquisition unit (13), and the fault occurrence determination unit (14) determines that a fault has occurred in the first region (121), the control unit (16) i) stops the execution of the program in the first region (121), and ii) using the execution result obtained by executing the program in the first region (121) and stored in the second region (122), executes the program in the second region (122) to continue operation, and stores the program in the first region (121) from the auxiliary storage unit (11) to restore the first region (121).

The invention relates to a method for securing transmission of payload (17) from a transmitter device (3) to a receiver device (4). The payload (17) is calculated by a primary module (7) of the transmitter device (3) and, redundantly thereto, corresponding payload is calculated by a secondary module (8) of the transmitter device (3). The payload (17) calculated by the primary module (7) and a check value (20) calculated by the secondary module (8) for the payload calculated by the secondary module are combined in an overall data record (21). This overall data record (21) is then transmitted from the transmitter device (3) to the receiver device (4), with a check being carried out as to whether the contained check value (20) matches the contained payload (17). If this is not the case, an error is identified. The invention also relates to a corresponding transmitter device (3) and to a motor vehicle (1) configured for the method.

The invention relates to the technical field of precision optical control, in particular to a sum-difference mode cooperative control double-actuator visual axis stable imaging method and system, and the method comprises the steps: calculating a sum mode variable and a difference mode variable between the angular velocity information of a first actuator and the angular velocity information of a second actuator; performing inverse mode transformation on the two mode variables to obtain independent control commands for respectively controlling the first actuator and the second actuator; the two independent control commands are correspondingly input into the first actuator and the second actuator after being processed through a control algorithm based on data driving. The ultra-high precision of the two actuators is effectively combined, stable control over the optical axis of the optical imaging system is achieved, and the imaging definition and stability of the optical imaging system in the disturbance environment are remarkably improved.

The processing unit 24 includes an abnormality diagnosis unit 32 for diagnosing processor abnormalities or power supply abnormalities, and a control unit 34 that executes a reset process when a processor abnormality or power supply abnormality is detected by the abnormality diagnosis unit 32. When a processor abnormality or power supply abnormality is detected by the abnormality diagnosis unit 32, the control unit 34 can execute a reset process while holding the abnormality information acquired by the abnormality diagnosis unit 32 in the volatile memory 36 without writing it to the non-volatile memory 38, and can perform control to write the abnormality information held in the volatile memory 36 to the non-volatile memory 38 after the reset process is completed.

This invention discloses a master-slave task synchronization method, device, controller, and rail train, relating to the field of rail transit technology. The method includes: the current controller identifying the master-slave presence status on the rail train's chassis; determining the system master control status corresponding to the current controller based on the master-slave presence status; if the system master control status is in master control mode, generating an interrupt request at a first preset time interval, performing synchronization task processing according to the interrupt request, and sending the interrupt request to other present controllers. This invention achieves automatic master-slave controller identification by determining the system master control status corresponding to the current controller based on the identified master-slave presence status; by having one controller acting as the system master controller generate and send an interrupt request to other controllers acting as system slave controllers, all controllers can perform strict master-slave task synchronization according to the interrupt request of the system master controller, thus improving the accuracy of master-slave task synchronization.

The invention relates to the technical field of magnetic control transformer control, and discloses a magnetic control system based on a multi-core DSP and a control method thereof, and the system comprises a sampling module which is connected with a magnetic control transformer and is used for collecting the electric power parameters of the magnetic control transformer; the main control module is connected with the sampling module and used for receiving the electric power parameters of the magnetic control transformer and generating a control instruction according to the electric power parameters, the main control module is a multi-core DSP processor and comprises a plurality of cores, and each core is used for processing a corresponding task; and the power module is respectively connected with the magnetic control transformer and the main control module and is used for executing corresponding actions according to the control instruction so as to control the magnetic control transformer. Reliability and real-time performance of task processing of the magnetic control system can be improved so that real-time and reliable control of the magnetic control system on the magnetic control transformer can be realized. And through controllable output of the power module, accurate control of the magnetic control transformer is realized.