A dual-engine unmanned aerial vehicle (UAV) redundancy power supply system and method

Abstract

The application discloses a kind of dual launch unmanned aerial vehicle's redundancy power supply system and method, it is related to aircraft power supply technical field, its technical solution key points are: including power supply device, protection voting module, redundancy reconfiguration module, DC-DC module, isolation module, SSPC distribution module and electrical equipment.The application adopts mature and stable contactor design redundancy reconfiguration module, simplifies redundancy circuit design, avoids excessive electronic components and reduces system reliability;At the same time, when certain road redundancy circuit or certain power supply device fails open circuit or short circuit, redundancy reconfiguration module carries out power supply path reconstruction, controls other fault-free redundancy path power supply, realizes equipment redundancy and function redundancy reasonable and effective combination, improves system reliability;In addition, protection voting module and isolation module can realize fault isolation, the double protection effect of two modules, enhance the security and reliability of system.

Description

Technical Field

[0001] This invention relates to the field of aircraft power supply technology, and more specifically, to a redundant power supply system and method for a twin-engine unmanned aerial vehicle. Background Technology

[0002] As unmanned aerial vehicle (UAV) systems become increasingly complex and their onboard equipment grows in number, ensuring the safe and stable operation of this equipment hinges on first and foremost the reliability of the power supply system. When some power supply units fail (open circuit or short circuit), the power supply system can perform system reconfiguration and fault isolation, while the remaining power supply units ensure the system remains powered, thus guaranteeing the normal operation of the onboard equipment and allowing the UAV to continue its mission or return safely. Therefore, designing a safe and reliable redundant power supply system is a fundamental condition for improving flight safety.

[0003] The existing Chinese invention patent application CN112072778A discloses a power distribution management system for twin-engine aircraft. This system uses a data acquisition module to collect electrical parameters of power interfaces, busbars, and electrical equipment in the power distribution system and transmits them to a control module. The control module then performs fault diagnosis based on these parameters and transmits the results to the flight control computer via a data transmission module. The flight control computer then sends isolation or reconfiguration commands to the control module based on the fault results, performing system reconfiguration or isolation. However, the power distribution system structure and redundancy reconfiguration process are overly complex, posing significant challenges to the development of such a system. When designing a power distribution management system, redundancy circuitry should be simplified as much as possible to avoid excessive use of components that could reduce system reliability and maintainability.

[0004] Furthermore, Chinese utility model patent CN204089325U discloses a novel power supply circuit for a flight control system. This circuit uses power switches, contactors, and relays to achieve a triple-redundant power supply design, consisting of a left DC generator + ground power supply, a right DC generator + ground power supply, and a battery bank. While this power supply circuit is simple to design, highly maintainable, and has lower development costs, its main circuit relies heavily on relays, making it difficult to handle high-power loads. Additionally, the system lacks overcurrent protection and isolation measures. Backflow from a large inductive load or a failure in one of the redundant power supplies could affect the front-end power supply equipment (DC generator, ground power supply, emergency battery, etc.), causing system instability or burnout. Therefore, this power supply circuit has poor fault isolation and low system reliability.

[0005] In addition, Chinese invention patent application with publication number CN114204539A discloses an aircraft redundant power supply system architecture based on an energy storage device, which consists of a low-voltage DC bus bar, a high-voltage DC bus bar, an energy storage device, an energy feedback controller, a motor controller, and a motor. During normal aircraft power supply and load operation, the low-voltage DC bus and high-voltage DC bus supply power to the motor controller and motor, enabling motor control and drive functions. During regenerative braking, the regenerative energy is stored in the energy storage device through the energy feedback controller, realizing motor energy recovery. When the low-voltage DC bus fails, the output of the high-voltage DC bus is converted to low voltage to supply power to the low-voltage side load. Conversely, when the high-voltage DC bus fails, the output of the low-voltage DC bus is boosted through the energy feedback controller to provide high voltage for load operation, achieving redundancy in the power supply system. When both the low-voltage and high-voltage DC bus fail simultaneously, the energy storage device supplies power to the failed low-voltage and high-voltage DC bus through the energy feedback controller, providing emergency power to critical onboard equipment. This redundant power supply system architecture achieves current isolation between low-voltage DC busbars and high-voltage DC busbars through DC-DC conversion to prevent the impact of a power failure on the other. However, the high-voltage DC busbars (270VDC BUS L and 270VDC BUS R) and the high-voltage DC busbars are directly connected to other power supply equipment (G1, G2, APU, and energy feedback controller, etc.), lacking protection and isolation modules. When a device fails, it cannot be isolated, resulting in low system fault isolation and reduced system reliability and safety.

[0006] Therefore, how to research and design a redundant power supply system and method for twin-engine UAVs that can overcome the above-mentioned defects is an urgent problem that we need to solve. Summary of the Invention

[0007] To address the shortcomings of existing technologies, the present invention aims to provide a redundant power supply system and method for dual-engine unmanned aerial vehicles (UAVs). It employs a mature and stable contactor design for the redundancy reconfiguration module, simplifying the redundancy circuit design and avoiding excessive electronic components that could reduce system reliability. Furthermore, when a redundancy circuit or power supply device experiences an open circuit or short circuit, the redundancy reconfiguration module reconfigures the power supply path, controlling the power supply to other fault-free redundancy paths. This achieves a reasonable and effective combination of equipment redundancy and functional redundancy, improving system reliability. In addition, both the protection voting module and the isolation module can achieve fault isolation; the dual protection provided by these two modules enhances the system's safety and reliability.

[0008] The above-mentioned technical objective of the present invention is achieved through the following technical solution:

[0009] In the first aspect, a redundant power supply system for a dual-engine unmanned aerial vehicle is provided, including a power supply device, a protection voting module, a redundancy reconfiguration module, a DC-DC module, an isolation module, an SSPC power distribution module, and electrical equipment;

[0010] The power supply device is used to provide 28-29V DC power to the system;

[0011] The protection voting module is used for voltage voting and isolation protection to isolate the fault from the system when the power supply path is overcurrent due to a fault in the redundancy circuit or power supply device.

[0012] The redundancy reconfiguration module is used to collect electrical signals in the power supply system, control the fault-free redundancy circuit to supply power to the system, and complete the power supply path reconfiguration.

[0013] The DC-DC module is used for power supply buck-boost conversion and filtering to obtain DC voltages of multiple different voltage levels;

[0014] The isolation module is used to prevent current from flowing back to the front-end power supply equipment when there is backflow from a large inductive load.

[0015] The SSPC power distribution module is used to control the on / off state of the power supply channels for all equipment.

[0016] The electrical equipment is used to start working when the corresponding power supply channel is connected.

[0017] Furthermore, the power supply device consists of a ground-based commissioning power supply, an airborne emergency battery, a DC generator G1, and a DC generator G2;

[0018] The ground commissioning power supply, DC generator G1, and DC generator G2 can provide the first DC power to the system;

[0019] The onboard emergency battery can provide a second DC power to the system;

[0020] The voltage of the first DC current is greater than the voltage of the second DC current.

[0021] Furthermore, the first DC voltage is 29V, and the second DC voltage is 28V.

[0022] Furthermore, the protection voting module consists of fuses FU1-FU4 and high-power diodes D1-D4;

[0023] Among them, fuses FU1, FU2, FU3 and FU4 are respectively connected to the output terminals of the ground debugging power supply, DC generator G1, airborne emergency battery and DC generator G2, so that when the power supply path is overcurrent due to system failure, the corresponding fuses will disconnect to isolate the fault and realize overcurrent protection.

[0024] Additionally, high-power diodes D1, D2, D3, and D4 are used for voltage voting of the DC generator and the onboard emergency battery to achieve the following: when both engines are operating normally or when a single engine fails during flight, the DC generator supplies power to the system; when both engines fail or the DC generator's output power is insufficient, causing the system voltage to drop, the onboard emergency battery provides supplementary power.

[0025] Furthermore, the redundancy reconfiguration module consists of contactors EPC, 1DLC, 2DLC, 1ETC, and 2ETC, to construct different power supply paths under different operating modes.

[0026] Furthermore, the operating mode includes:

[0027] In ground operation mode, the ground commissioning power supply powers the system through the control contactor EPC and 1DLC, and / or the ground commissioning power supply powers the system through the control contactor EPC and 2DLC;

[0028] The DC generator operates in the following modes: DC generator G1 supplies power to the system by controlling contactors 1ETC, EPC, and 1DLC; and / or DC generator G2 supplies power to the system by controlling contactors 2ETC, EPC, 1DLC, and 2DLC.

[0029] In the fault mode, when a single generator fails, a DC generator is used to power the system by controlling contactors 1ETC, 2ETC, and 1DLC or 2DLC; when both generators fail simultaneously, the onboard emergency battery is used to power the system by controlling contactors 1DLC, 2DLC, 1ETC, and 2ETC.

[0030] Furthermore, the DC-DC module includes a 28V filter module 1, a 28V filter module 2, a 28-12V DC-DC1, a 28-12V DC-DC2, a 28-120V DC-DC1, and a 28-120V DC-DC2;

[0031] Among them, after the redundancy reconfiguration module constructs the power supply path, the DC-DC module performs power step-up / step-down conversion and filtering to obtain 12V DC1, 12V DC2, 28V DC1, 28V DC2, 120V DC1 and 120V DC2 voltages.

[0032] Furthermore, the isolation module is composed of diodes D5, D6, D7, D8, D9, and D10;

[0033] 28V DC1 and 28V DC2 voltages are connected to the 28V ES BUS busbar via diodes D5 and D6, respectively.

[0034] 12V DC1 and 12V DC2 voltages are connected to the 12V ES BUS busbar via diodes D7 and D8, respectively.

[0035] Additionally, 120V DC1 and 120V DC2 voltages are connected to the 120V ES BUS busbar via diodes D9 and D10, respectively.

[0036] Furthermore, the SSPC power distribution module draws power from the busbars 12V ES BUS, 28V ES BUS and 120V ES BUS.

[0037] Secondly, a method for redundant power supply to a dual-engine unmanned aerial vehicle (UAV) is provided, comprising the following steps:

[0038] S101: Provides 28-29V DC power to the system via a power supply unit;

[0039] S102: Voltage voting and isolation protection are performed through the protection voting module to isolate the fault from the system when the power supply path is overcurrent due to a fault in the redundancy circuit or power supply device.

[0040] S103: The redundancy reconfiguration module collects electrical signals from the power supply system, controls the fault-free redundancy circuit to supply power to the system, and completes the power supply path reconfiguration.

[0041] S104: The DC-DC module performs power step-up / step-down conversion and filtering to obtain DC voltages of multiple different voltage levels;

[0042] S105: The isolation module prevents current from flowing back to the front-end power supply equipment when a large inductive load experiences backflow.

[0043] S106: Controls the on / off of power supply channels for all equipment via the SSPC power distribution module;

[0044] S107: Electrical equipment starts working when the corresponding power supply channel is connected.

[0045] Compared with the prior art, the present invention has the following beneficial effects:

[0046] 1. The present invention provides a redundant power supply system for a dual-engine unmanned aerial vehicle (UAV). It adopts a mature and stable contactor design for the redundancy reconfiguration module, which simplifies the redundancy circuit design and avoids excessive electronic components that reduce system reliability. At the same time, when a certain redundancy circuit or power supply device fails to open or short-circuit, the redundancy reconfiguration module reconfigures the power supply path and controls the power supply of other fault-free redundancy paths, thereby achieving a reasonable and effective combination of equipment redundancy and functional redundancy and improving system reliability.

[0047] 2. Both the protection voting module and the isolation module in this invention can achieve fault isolation. Under normal operating conditions, the diodes of the protection voting module are used for voltage voting of the DC generator and the onboard emergency battery. When a fault in a certain redundant circuit or a certain power supply device causes an overcurrent in the power supply path, the protection voting module will disconnect the power supply path to isolate the fault. When a large inductive load current flows back, the isolation module prevents the current from flowing back to the front-end power supply equipment, thus playing a good protective role. The dual protection of the two modules enhances the safety and reliability of the system.

[0048] 3. The protection voting module, redundancy reconfiguration module and isolation module in this invention are composed of devices such as fuses, contactors and high-power diodes, which are easy to replace and highly maintainable. Attached Figure Description

[0049] The accompanying drawings, which are included to provide a further understanding of embodiments of the invention and form part of this application, do not constitute a limitation thereof. In the drawings:

[0050] Figure 1 This is the circuit schematic diagram in Embodiment 1 of the present invention;

[0051] Figure 2 This is a flowchart from Embodiment 2 of the present invention.

[0052] The attached diagram shows the markings and corresponding component names:

[0053] 1. Power supply unit; 2. Protection voting module; 3. Redundancy reconfiguration module; 4. DC-DC module; 5. Isolation module; 6. SSPC power distribution module; 7. Electrical equipment. Detailed Implementation

[0054] To make the objectives, technical solutions, and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the embodiments and accompanying drawings. The illustrative embodiments and descriptions of the present invention are only used to explain the present invention and are not intended to limit the present invention.

[0055] Example 1: A redundant power supply system for a dual-engine unmanned aerial vehicle, such as Figure 1 As shown, it includes a power supply unit 1, a protection voting module 2, a redundancy reconfiguration module 3, a DC-DC module 4, an isolation module 5, an SSPC power distribution module 6, and electrical equipment 7.

[0056] The system includes: a power supply unit 1, which provides 28-29V DC power to the system; a protection voting module 2, which performs voltage voting and isolation protection to isolate the fault from the system when an overcurrent occurs in the power supply path due to a fault in the redundancy circuit or power supply unit 1; a redundancy reconfiguration module 3, which collects electrical signals in the power supply system and controls the fault-free redundancy circuit to supply power to the system, thus completing the power supply path reconfiguration; a DC-DC module 4, which performs power step-up / step-down conversion and filtering to obtain multiple DC voltages of different levels; an isolation module 5, which prevents current from flowing back to the front-end power supply equipment when there is a backflow of large inductive loads; an SSPC power distribution module 6, which controls the on / off of the power supply channels for all equipment; and an electrical device 7, which starts working when the corresponding power supply channel is connected.

[0057] Specifically, power supply unit 1 consists of a ground-based commissioning power supply, an onboard emergency battery, and DC generators G1 and G2. During ground maintenance and commissioning, the ground-based commissioning power supply provides 29V DC power to the system. After the engine starts and drives the DC generators to generate electricity and connect to the grid, the system automatically disconnects the ground-based commissioning power supply, and the DC generators provide 29V DC power to the system. The DC generators are configured as a dual-DC generator architecture, and the output power of either DC generator can meet the power needs of the entire aircraft. When both engines fail or the output power of the DC generators is insufficient, the onboard emergency battery will seamlessly supplement the power supply. The onboard emergency battery provides 28V DC power. The dual-DC generator and onboard emergency battery configuration architecture enables the system to achieve the goal of ensuring that a single engine failure does not affect the flight mission, and that failures of both engines do not affect flight safety.

[0058] The protection voting module 2 consists of fuses FU1-FU4 and high-power diodes D1-D4. Fuses FU1, FU2, FU3, and FU4 are connected to the output terminals of the ground debugging power supply, DC generator G1, airborne emergency battery, and DC generator G2, respectively. This ensures that in the event of an overcurrent in the power supply path caused by a system fault, the corresponding fuse will trip to isolate the fault and provide overcurrent protection. Furthermore, high-power diodes D1, D2, D3, and D4 are used for voltage voting between the DC generator and the airborne emergency battery. This ensures that, since the DC generator's 29V voltage is higher than the airborne emergency battery's 28V, the DC generator supplies power to the system during normal operation of both engines or during single-engine failure flight. When both engines fail or the DC generator's output power is insufficient, causing a drop in system voltage, the airborne emergency battery provides supplemental power.

[0059] The redundancy reconfiguration module 3 consists of contactors EPC, 1DLC, 2DLC, 1ETC and 2ETC, which are used to construct different power supply paths under different working modes.

[0060] In this embodiment, the operating modes include ground operating mode, DC generator operating mode, and fault mode.

[0061] In ground operation mode, when the start button 1SB is closed, the contactor EPC coil in the ground debugging power control circuit is energized through the FU1-1SB-EPC-1DLC1 and FU1-1SB-EPC-2DLC1 circuits. The EPC contact states change: the normally open main contact of EPC1 closes, the normally open auxiliary contacts of EPC2 and EPC3 close, and the normally closed auxiliary contacts of EPC4 and EPC5 open. At this time, the ground debugging power supply supplies power to the system through the main circuits FU1-EPC1-1ETC1-28V BUS1 and FU1-EPC1-2ETC1-28V BUS2.

[0062] After the ground-based commissioning power supply provides power to the system, the engine is started, and the DC generator is powered by the engine to generate electricity, entering the DC generator working mode.

[0063] When DC generator G1 is connected to the grid, the coil of contactor 1DLC in the control circuit of DC generator G1 is energized, and the contact state of 1DLC changes: the normally closed auxiliary contact of 1DLC1 opens, and the normally open auxiliary contacts of 1DLC2, 1DLC3, and 1DLC4 close. The coil of contactor 1ETC is energized through the FU2-1ETC-EPC2-1DLC4 control circuit, the normally closed main contact of 1ETC1 opens, busbar 28VBUS1 is powered by DC generator G1, and busbar 28V BUS2 is still powered by the ground commissioning power supply.

[0064] When DC generator G2 is connected to the grid, the coil of contactor 2DLC in the control circuit of DC generator G2 is energized, and the contact states of 2DLC change: the normally closed auxiliary contact of 2DLC1 opens, and the normally open auxiliary contacts of 2DLC2, 2DLC3, and 2DLC4 close. When contactor EPC coil is de-energized, the contact states of EPC change: the normally open main contact of EPC1 opens, the normally open auxiliary contacts of EPC2 and EPC3 open, and the normally closed auxiliary contacts of EPC4 and EPC5 close. Contactor 1ETC coil is energized through the FU2-1ETC-EPC4-1DLC2-2DLC2 control circuit, and its contact states remain unchanged. Contactor 2ETC coil is energized through the FU4-2ETC-EPC5-1DLC3-2DLC3 control circuit, and its contact states change: the normally closed main contact of 2ETC1 opens, and busbar 28V BUS2 is powered by DC generator G2.

[0065] At this time, both generators are operating normally and connected to the grid. Disconnect the start button 1SB and close the start button 2SB. The 28V DC power from the onboard emergency battery is used for hot backup through the voting circuit.

[0066] If a power supply device 1 or a redundancy circuit fails, the system enters fault mode.

[0067] In the event of a single generator or single-redundancy circuit failure, taking the failure of DC generator G1 as an example: At this time, the coil of contactor 1DLC in the control circuit of DC generator G1 is de-energized, and the contact state of 1DLC changes: the normally closed auxiliary contact of 1DLC1 closes, and the normally open auxiliary contacts of 1DLC2, 1DLC3, and 1DLC4 open. The coils of contactors 1ETC and 2ETC are also de-energized, and the contact states of 1ETC and 2ETC change: the normally closed main contacts of 1ETC1 and 2ETC1 close. DC generator G2 supplies power to busbar 28V BUS1 through the FU4-D2-2ETC1-1ETC1 path and to busbar 28V BUS2 through the FU4-D2 path. Similarly, if DC generator G2 fails, DC generator G1 supplies power to busbar 28V BUS2 through the FU2-D1-1ETC1-2ETC1 path and to busbar 28V BUS1 through the FU2-D1 path.

[0068] If the system fails due to a dual-engine malfunction, both contactor 1ETC and 2ETC coils will lose power, and the normally closed main contacts 1ETC1 and 2ETC1 of the contactors will open. The emergency battery will supply power to busbars 28V BUS1 and 28V BUS2 through the FU3-2SB-D3 and FU3-2SB-D4 circuits. At this time, the UAV should abort its flight mission and return to base immediately.

[0069] DC-DC module 4 includes 28V filter module 1, 28V filter module 2, 28-12V DC-DC1, 28-12V DC-DC2, 28-120V DC-DC1, and 28-120V DC-DC2. After the redundancy reconfiguration module 3 constructs the power supply path, DC-DC module 4 performs power step-up / step-down conversion and filtering. After processing by DC-DC module 4, voltages such as 12V DC1, 12V DC2, 28V DC1, 28V DC2, 120V DC1, and 120V DC2 are obtained, providing multi-voltage outputs for the system to meet the needs of multi-electrical systems.

[0070] The multi-voltage circuits are connected to the 28V ES BUS, 12V ES BUS, and 120V ES BUS via diodes D5, D6, D7, D8, D9, and D10 of isolation module 5, respectively. When a large inductive load current flows backward, isolation module 5 isolates the front-end power supply equipment from the back-end power consumption equipment 7, enhancing system safety.

[0071] The SSPC power distribution module 6 draws power from the 12V ES BUS, 28V ES BUS and 120V ES BUS of the bus bar. By controlling the operation of the SSPC, it controls the on / off of the power supply channel of the electrical equipment 7. When the power supply channel is connected, the electrical equipment 7 starts to work.

[0072] Example 2: A redundant power supply method for a dual-engine unmanned aerial vehicle (UAV), which is applied to the redundant power supply system for a dual-engine UAV described in Example 1, such as... Figure 2 As shown, it includes the following steps:

[0073] S101: Provides 28-29V DC power to the system via power supply unit 1;

[0074] S102: Voltage voting and isolation protection are performed through the protection voting module 2 to isolate the fault from the system when the power supply path is overcurrent due to a fault in the redundancy circuit or power supply device 1.

[0075] S103: The redundancy reconfiguration module 3 collects electrical signals from the power supply system, controls the fault-free redundancy circuit to supply power to the system, and completes the power supply path reconfiguration.

[0076] S104: Through DC-DC module 4, the power supply is converted from step-up to step-down and filtered to obtain DC voltages of multiple different voltage levels;

[0077] S105: The isolation module 5 prevents current from flowing back to the front-end power supply equipment when a large inductive load experiences reverse current flow.

[0078] S106: Controls the on / off of power supply channels for all equipment via SSPC power distribution module 6;

[0079] S107: Electrical equipment 7 starts working when the corresponding power supply channel is connected.

[0080] Working Principle: This invention employs a mature and stable contactor design for the redundancy reconfiguration module 3, simplifying the redundancy circuit design and avoiding excessive electronic components that could reduce system reliability. Simultaneously, when a redundancy circuit or power supply device 1 experiences an open circuit or short circuit, the redundancy reconfiguration module 3 reconfigures the power supply path, controlling the power supply to other fault-free redundancy paths. This achieves a reasonable and effective combination of equipment redundancy and functional redundancy, improving system reliability. Furthermore, both the protection voting module 2 and the isolation module 5 in this invention can achieve fault isolation. Under normal operating conditions, the diodes in the protection voting module 2 are used for voltage voting of the DC generator and the onboard emergency battery. When a fault in a redundancy circuit or power supply device 1 causes overcurrent in the power supply path, the protection voting module 2 disconnects the power supply channel to isolate the fault. When a large inductive load current flows back, the isolation module 5 prevents the current from flowing back to the front-end power supply equipment, providing excellent protection. The dual protection provided by these two modules enhances the safety and reliability of the system.

[0081] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A redundant power supply system for a dual-engine unmanned aerial vehicle (UAV), characterized in that, It includes a power supply unit (1), a protection voting module (2), a redundancy reconfiguration module (3), a DC-DC module (4), an isolation module (5), an SSPC power distribution module (6), and electrical equipment (7); The power supply device (1) is used to provide 28-29V DC power to the system. The power supply device (1) consists of a ground debugging power supply, an airborne emergency battery, a DC generator G1 and a DC generator G2. The protection voting module (2) is used for voltage voting and isolation protection to isolate the fault from the system when the power supply path is overcurrent caused by the failure of the redundancy circuit or power supply device (1); the protection voting module (2) is composed of fuses FU1-FU4 and high-power diodes D1-D4. Among them, fuses FU1, FU2, FU3 and FU4 are respectively connected to the output terminals of the ground debugging power supply, DC generator G1, airborne emergency battery and DC generator G2, so that when the power supply path is overcurrent due to system failure, the corresponding fuses will disconnect to isolate the fault and realize overcurrent protection. Additionally, high-power diodes D1, D2, D3, and D4 are used for voltage voting of the DC generator and the onboard emergency battery to achieve the following: when both engines are operating normally or when a single engine fails during flight, the DC generator supplies power to the system; when both engines fail or the DC generator's output power is insufficient, causing the system voltage to drop, the onboard emergency battery provides supplementary power. The redundancy reconfiguration module (3) is used to collect electrical signals in the power supply system, control the fault-free redundancy circuit to supply power to the system, and complete the power supply path reconfiguration; the redundancy reconfiguration module (3) is composed of contactors EPC, 1DLC, 2DLC, 1ETC and 2ETC, so as to construct different power supply paths in different working modes; wherein, the working modes include: In ground operation mode, the ground commissioning power supply powers the system through the control contactor EPC and 1DLC, and / or the ground commissioning power supply powers the system through the control contactor EPC and 2DLC. The DC generator operates in the following modes: DC generator G1 supplies power to the system by controlling contactors 1ETC, EPC, and 1DLC; and / or DC generator G2 supplies power to the system by controlling contactors 2ETC, EPC, 1DLC, and 2DLC. In the fault mode, when a single engine fails, a DC generator is used to power the system by controlling contactors 1ETC, 2ETC, and 1DLC or 2DLC; and when both engines fail simultaneously, the onboard emergency battery is used to power the system by controlling contactors 1DLC, 2DLC, 1ETC, and 2ETC. The DC-DC module (4) is used to perform power supply step-up / step-down conversion and filtering to obtain DC voltages of multiple different voltage levels; The isolation module (5) is used to prevent current from flowing back to the front-end power supply equipment when there is backflow from a large inductive load; The SSPC power distribution module (6) is used to control the on / off state of the power supply channels for all equipment; The electrical equipment (7) is used to start working when the corresponding power supply channel is connected.

2. The redundant power supply system for a dual-engine unmanned aerial vehicle according to claim 1, characterized in that, The ground commissioning power supply, DC generator G1, and DC generator G2 can provide the first DC power to the system; The onboard emergency battery can provide a second DC power to the system; The voltage of the first DC current is greater than the voltage of the second DC current.

3. The redundant power supply system for a dual-engine unmanned aerial vehicle according to claim 2, characterized in that, The first DC voltage is 29V, and the second DC voltage is 28V.

4. The redundant power supply system for a dual-engine unmanned aerial vehicle according to claim 1, characterized in that, The DC-DC module (4) includes a 28V filter module 1, a 28V filter module 2, a 28-12V DC-DC1, a 28-12V DC-DC2, a 28-120V DC-DC1, and a 28-120V DC-DC2; Among them, after the redundancy reconstruction module (3) constructs the power supply path, the DC-DC module (4) performs power step-up / step-down conversion and filtering to obtain 12V DC1, 12V DC2, 28V DC1, 28V DC2, 120V DC1 and 120V DC2 voltages.

5. A redundant power supply system for a dual-engine unmanned aerial vehicle according to claim 4, characterized in that, The isolation module (5) is composed of diodes D5, D6, D7, D8, D9 and D10; 28V DC1 and 28V DC2 voltages are connected to the 28V ES BUS busbar via diodes D5 and D6, respectively. 12V DC1 and 12V DC2 voltages are connected to the 12V ES BUS busbar via diodes D7 and D8, respectively. Additionally, 120V DC1 and 120V DC2 voltages are connected to the 120V ES BUS busbar via diodes D9 and D10, respectively.

6. A redundant power supply system for a dual-engine unmanned aerial vehicle according to claim 5, characterized in that, The SSPC power distribution module (6) draws power from the busbars 12V ES BUS, 28V ES BUS and 120V ES BUS.

7. A method for redundant power supply for a dual-engine unmanned aerial vehicle (UAV), based on the redundant power supply system for a dual-engine UAV as described in any one of claims 1-6, characterized in that, Includes the following steps: S101: Provides 28-29V DC power to the system via power supply device (1); S102: Voltage voting and isolation protection are performed through the protection voting module (2) to isolate the fault from the system when the power supply path is overcurrent caused by the failure of the redundancy circuit or power supply device (1); S103: The redundancy reconfiguration module (3) collects electrical signals in the power supply system, controls the fault-free redundancy circuit to supply power to the system, and completes the power supply path reconfiguration; S104: The DC-DC module (4) performs power step-up / step-down conversion and filtering to obtain DC voltages of different voltage levels; S105: By using the isolation module (5), current is prevented from flowing back to the front-end power supply equipment when a large inductive load experiences backflow; S106: Control the on / off of power supply channels for all equipment via the SSPC power distribution module (6); S107: Electrical equipment (7) starts working when the corresponding power supply channel is connected.

Images