56results about How to "Improve mission reliability" patented technology

The invention discloses a non-similar three-redundancy electric load management center, which consists of a three-redundancy passage electric load management center and an auxiliary control center, wherein core control chips of the three-redundancy passage electric load management center respectively adopt two DSPs (digital signal processors) and one FPGA (field programmable gate array), the different core control chips are adopted, great differences are realized on a hardware structure, and the non-similar redundancy design in the hardware level is realized. The two redundancies of the core control chips respectively the adopting DSPs adopt different programming languages and algorithms in the software design aspect, and the non-similar algorithm design at the software level is realized. The three-redundancy passage electric load management center synchronously collects data, generates electric load control instructions, and realizes the voting through the auxiliary control center, the enabled passage electric load management center works, and other passages are closed. The non-similar three-redundancy electric load management center has the advantages that the non-similar redundancy design is adopted, the homomorphic fault can be reduced, the system task reliability is improved, and higher practical values can be realized.

The invention provides a trusted redundant fault-tolerant computer system which aims at satisfying the requirement for high safety and high reliability of systems in safety control fields. The trusted redundant fault-tolerant computer system is capable of blocking the operation of illegal programs of malicious codes, viruses and the like, protecting the system and core applications from being destroyed, protecting important information from being revealed, stolen, tampered and ruined, and shielding faults by means of a failure switching function to enable the system to work normally when faults of the system occur. The trusted redundant fault-tolerant computer system is based on a trusted cryptography module (TCM) safety chip, and a dual-computer redundant hot standby method and a compact peripheral component interconnect (CPCI) bus framework are used. Two trusted computer subsystems are configured in a computer case, each of the trusted computer subsystems is composed of a trusted computer main module (including a TCM and a flash disk), a power source module, a flash disk expansion module and an interface expansion module, and the failure switching between the two subsystems is achieved through a heartbeat server and a failure switching module.

The invention belongs to the technical field of computer applications, and relates to a dual-redundancy hot backup CPU system for improving task reliability of airborne computers. The system comprisesdual-redundancy CPUs; after the system is started, both the dual-redundancy CPUs keeps an idle state; after software initiation is finished, two CPUs enables CPU output control through a main controlinstruction of writing specific addresses; the main control instruction comprises a delay processing control logic for deciding starting sequences of the two CPUs; an enable signal of a firstly started CPU module is set to be effective and obtain an output control right; the enable signal is connected to a channel logic fault circuit of the secondly started CPU; and the secondly started CPU is suppressed by the enable signal of the started CPU module to be located in an ineffective state. The dual-redundancy hot backup CPU system suitable for airborne computers is high in reliability and is capable of carrying out coordination.

The invention discloses a method for processing a signal failure of a control sensor by using a dual-redundancy control rule, and is characterized by providing the method for processing the signal failure of the control sensor by using the dual-redundancy control rule, a dual-redundancy control rule design concept and a copy dual-redundancy control rule design principle, and a copy control rule design method and a design process of the dual-redundancy control rule. The main control rule is designed with the goal of enabling an aero-engine to obtain optimal thrust and economy in full flight envelope and ensuring the working stability and the structure strength of the engine; and the copy control rule design method provided by the invention is to perform the copy control rule design according to the copy control rule design principle on the basis that the main control rule design is finished. The method has the following advantages that the failure processing property of a digital control system is improved, the mission reliability of the aero-engine can be improved, the requirement of real-time control of the high-performance aero-engine is satisfied more easily, the method is more liable to implement, and the combination property of the aero-engine is improved.

The invention relates to the field of ignition control of aircrafts, in particular to an ignition control circuit for a booster of an aircraft. The ignition control circuit for the booster of the aircraft comprises an ignition power supply control circuit A, an ignition signal control circuit and an ignition power supply control circuit B. The ignition signal control circuit sends an ignition signal to the ignition power supply control circuit B, the ignition power supply control circuit B enables an ignition power source line to be connected, and the ignition power supply control circuit A enables the ignition power source line to be connected to the booster for ignition. The ignition control circuit for the booster of the aircraft has the advantages of improving fighter plane flying safety and task reliability of the aircraft.

The invention discloses a CAN bus double redundancy heat backup method. The CAN bus double redundancy heat backup method comprises steps that, an arbitration domain and a data domain of a standard frame in a CAN protocol are customized by a user; the arbitration domain is defined to be five information types, and the five information types comprise an information type identification, a sending party node identification, a reception party node identification, a bus identification and a frame identification; interaction information content corresponding to each information type is defined, and main and secondary nodes are determined; information interaction fault types are defined, each information type is detected on the basis of the fault types, if the fault types occur during detection, double redundancy heat backup of a CAN bus is accomplished. Through the method, rapid smaller-than-100ms-bus heat switching can be realized, task reliability of the whole system is improved, moreover, only a backup CAN bus controller, a bus driver and an optical coupler are added to a hardware circuit, the circuit is simple, and extra cost is relatively low.

The invention discloses a computer-controlled double-computer hot redundancy system. The computer-controlled double-computer hot redundancy system includes a main control computer, a hot standby computer, a keyboard, a display, a mouse, a keyboard display, and a mouse switcher, wherein the main control computer is responsible for the test and task control of the current system; when the main control computer works normally, the hot standby computer is responsible for tracking the progress of the current control task and monitoring the working condition of the main control computer; the keyboard, the display and the mouse are used for input, output and display of the main control and hot standby computers; the keyboard display and the mouse switcher KVM can complete switching of the keyboard, the display and the mouse in the main control and hot standby computers; a switch signal output port of the main control computer is connected with a switch signal input port of the hot standby computer through a signal line; a power control port of the main control computer and a KVM switching port access the switch signal output port of the hot standby computer; and data ports of the keyboard, the display and the mouse are connected with a data input port of the KVM. The invention also discloses a computer-controlled double-computer hot redundancy method.

The invention provides a dynamic self-adaptive SOPC fault-tolerant method based on task levels, which is used for solving the technical problems of low user availability and low resource utilization rate in the prior art, and comprises the following implementation steps: constructing a dynamic adaptive programmable system-on-chip; internally configuring an access port ICAP to load a global bit stream of a task to the FPGA; enabling the FPGA to perform region division; acquiring the number of particle overturn signals in the static region; enabling the PS end to evaluate the task level; enabling the PS end to send configuration information to the ICAP; enabling the ICAP to load a part of bit streams to the dynamic reconfigurable region; enabling the reconfigurable module to execute the task; enabling the PS end to judge whether the reconfigurable module breaks down or not; and enabling the ICAP to load a part of bit streams to the fault reconfigurable module. According to the method, the task execution time, the task execution deadline and the fault repair time are used as task grading bases, so that the method has relatively high user availability and resource utilization rate.

The invention discloses an electric braking electromechanical drive architecture for an aircraft and a braking force control method. Each electromechanical driver in a driving control architecture isrespectively connected with an electromechanical actuator on each machine wheel brake apparatus, and simultaneously receives a left machine wheel braking integrated instruction and a right machine wheel braking integrated instruction from a first braking control and monitoring unit and a second braking control and monitoring unit. Each main wheel remote data concentrator mounted on each undercarriage wheel axle transfers the generated signal to the first braking control and monitoring unit or the second braking control and monitoring unit on the same side of the aircraft. According to the electric braking electromechanical drive architecture disclosed by the invention, the performance of a braking system can be ensured to the greatest degree in a multi-failure state of the aircraft, the drive architecture has extremely high safety, respectively and independently controlled redundancy advantages of multiple electromechanical actuators in the braking system are fully achieved, failure isolation and redundancy management abilities of the aircraft electromechanical braking system and the system reconstruction capability in a failure state are improved, the fault tolerance and mission reliability are enhanced, and the aircraft braking safety is ensured.

The invention relates to a reliable butt joint and self-destruction device and method suitable for an underwater unmanned underwater vehicle, and solves the problems of reliable butt joint, smooth release, safe self-destruction, good sealing and the like in task execution of the underwater vehicle. The device is an electromechanical combination device, the mode that a reverse stroke self-locking turbine worm reducer and gear rack pin transmission are combined is adopted, a motor rotates forwards, the relative position of the underwater vehicle and a butt joint opening is locked, the transmission design is reused, and after information transmission is finished, the motor rotates reversely; the sliding block moves forwards and backwards along with a rack pin, and touches a limiting microswitch back and forth to control the movement position of the rack pin, so that the rack pin can extend out, return and retract. In order to prevent the rack pin from being pressed back under the action of external hydraulic pressure after power-off, large reverse torque is designed. A guide pin is fixedly connected with a shell, and it is ensured that the rack pin moves in the fixed direction. The device is verified by multiple tests such as a real navigation test, and is reasonable, feasible and good in effect.

Provided are a redundant electric braking electromechanical-driven framework and a braking force control method. A typical electric braking and monitoring system is established with an airplane with four main braking wheels as a target machine, a plurality of electromechanical actuators on each main braking wheel are controlled by different electromechanical drivers, when certain channels are broken down, the braking capacity of the airplane is maintained to the greatest extent by increasing the braking compression force output by the normal electromechanical drivers, the task reliability of the airplane in the landing braking process is enhanced, meanwhile, severe unbalance of the braking torques of the two sides of the airplane is avoided, the airplane is prevented from drifting of a runway, deformation of an undercarriage under asymmetrical braking loads is reduced, and the working environment of a braking system is improved; and meanwhile, the braking distance is shortened, the safety of the airplane in case of failure of the electric braking system is further improved, the possibility that the airplane suffers braking failure under various complex combined failure states can be reduced, and the braking capacity of the airplane is improved to the greatest extent.

The invention pertains to the technical field of power applications, and relates to a dual-power bus cold standby power supply architecture and method. The dual-power bus cold standby power supply architecture comprises two power conversion circuits, a voltage detection circuit, a power-down protection circuit and a power switching control circuit. Through the above functional circuits, the cold standby function of the two conversion circuits can be realized. when the first conversion device is in normal power supply condition, the second conversion device is in the standby state, and then the first conversion device is in the power-down condition, the second conversion device is started to supply power. According to the invention, the mission reliability of electric equipment can be significantly improved, and the maintenance cost of the electric equipment in the whole life cycle can be reduced.

The attitude-adaptive sonde ejection throwing device comprises a pod mechanism, one end of the pod mechanism is connected with a sonde ejection controller, the top of the inner side of the pod mechanism is connected with one end of an electric mechanism, and the other end of the electric mechanism is connected with a sonde ejection mechanism; the pod mechanism, the sonde ejection mechanism and the electric mechanism are connected with the sonde ejection controller through cables. The invention further discloses a launching method of the sonde catapult launching device, and the problems that in the prior art, due to the fact that the structural size of a catapult mechanism is too large, the cross section area is too large, the wind resistance area is too large, and the aerodynamic characteristic and the flight quality of an aircraft (especially a small unmanned aerial vehicle) are affected are solved.

The invention belongs to the field of auxiliary power device control, particularly relates to an auxiliary power device intake valve control system and method. The problem that in air state, the airflow entering the APU is extremely unstable due to high Mach number and lower inlet pressure of the APU, and the APU is unsuccessful in ignition can be solved. When an APU main switch of a cockpit is pressed down, an ECU is powered on, and in the ground state, after an APU starting instruction is received, an air inlet valve is directly and fully opened, and then the APU is started. However, in theair state, the ECU gradually opens the intake valve according to a predetermined function relationship f (Ma, N, P2) with the flight Mach number, the APU rotating speed and the APU inlet pressure, sothat the air flow entering the APU is relatively stable. According to the invention, the opening or closing of the APU intake valve can be accurately controlled, and the opening degree can be controlled, so that the air inflow entering an APU combustion chamber is adjusted, the success rate of APU ignition is remarkably improved, and the method can be applied to the control of the APU intake valvewith wide flight envelope and complex use working conditions.

The invention discloses an automatic opening and closing cabin door of an extraterrestrial celestial body sampling return cabin. The automatic opening and closing cabin door comprises a metal cabin door, a cabin door heat protection structure, a pressing release device, a locking device, a transmission device, a driving device and a separation nut, the locking device and the separation nut are fixedly installed on the inner side of the metal cabin door, and the locking device is used for locking the metal cabin door in a closed state to the door frame. The transmission device is fixedly mounted on the door frame, is in transmission connection with the driving device, comprises a cabin door shaft fixedly connected with the metal cabin door, and is used for converting rotary motion providedby the driving device into linear translation motion and rotary motion of the metal cabin door so as to realize opening and closing actions of the metal cabin door; the pressing and releasing device is fixedly installed on the return cabin and matched with the separation nut to press, fix, unlock and release the metal cabin door in the open state. The automatic opening and closing cabin door has the advantages of small motion enveloping space and small influence of environmental factors.

The invention discloses a chip data redundancy processing method, which comprises the following steps: radar echo data is subjected to line production by a plurality of processing nodes through a data distribution interface, the processed data is sent to a sink node 1 and a sink node 2 through two SRIO channels, the sink node is switched between data processing 1 and data processing 2 through AB-path cross processing data streams, and the data processing 1 and the data processing 2 are switched between data processing 1 and data processing 2; it is ensured that the system does not have a single node and a single channel, each node and channel have redundant hot backup, and the task reliability of the information processor is improved.

The invention discloses a software and hardware cooperative control self-management main and standby switching method, which relates to main and standby switching of a main control board of digital multiplexing and demultiplexing equipment and comprises a CPU (central processing unit) module, an FPGA (field programmable gate array) module, an Ethernet interface, an Ethernet switching module and the like. According to the invention, the main and standby switching of the multiplexer main control board is realized; a special management control unit is not needed, and self-management is realized by the main control board; the FPGA and the CPU realize software and hardware cooperative control to realize master-slave switching, and the switching function can be completed under the condition that a master control CPU program is abnormal; the main and standby switching does not need to plug a cable and replace a maintenance management IP address; the multiplexing and demultiplexing parameters of the main and standby main control boards are updated synchronously, the service multiplexing and demultiplexing are carried out simultaneously, and the influence of main and standby switching on the current service transmission is small. The method is suitable for the digital multiplexer/demultiplexer with high reliability requirements.