A Safety Analysis Method Based on Stamp Aeroengine Control System

Abstract

The present invention provides a safety analysis method based on the STAMP aero-engine control system, the steps of which are as follows: one: combing the system structure composition and functional principle; two: constructing a layered control structure model; three: using SysML module diagram and state machine diagram Describe the static structure and dynamic behavior of the system; four: convert the SysML model in the third to the NuSMV model; five: clarify the system-level hazards and safety constraints, and use the calculation tree logic CTL expression to describe the safety constraints; six: the CTL expression in the fifth Write the NuSMV model of No. 4, and use the NuSMV tool to verify whether it is satisfied; Seven: Analyze component function failure and impact conditions, build a fault model and then integrate it with the NuSMV model of No. 4; Eight: Determine the unsafe control behavior of the control loop structure of No. 5 , formulate safety constraints and describe with CTL expressions; Nine: write each CTL expression in the eighth into the complete NuSMV model in the seven, and if the verification is not satisfied, then the negative example output represents the cause of the accident; the method of the present invention is scientific and manufacturable. It has broad application value.

Description

technical field [0001] The invention provides a safety qualitative analysis of a STAMP-based aero-engine control system, which belongs to the field of system safety analysis. Background technique [0002] The aero-engine is the power plant and core of the aircraft, and its safety is of paramount importance, and the control system, as the "nerve center" of the aero-engine, is of the utmost importance to its safety. [0003] At present, traditional system security analysis methods such as fault tree analysis, failure mode and impact analysis, etc. are all security analysis methods based on event chains. The event chain theory believes that accidents are caused by the failure of the underlying components of the system, and this failure will Bottom-up transmission and eventually lead to accidents. However, for modern complex systems such as aero-engine control systems, the failure rate of its components has reached a very low level, and the cause of accidents has gradually evol...

AI Technical Summary

Problems solved by technology

[0011] The present invention aims at the deficiencies of the current STAMP relying on natural language description models and manual analysis results in the safety analysis of the aero-engine control system, and provides an improved STAMP-based aero-engine control system safety analysis method, so that the aero-engine control The security analysis of the system has certain formalized and automated means

Images