Airborne hydrogen system safety analysis method, system, equipment and medium

Abstract

The invention discloses an airborne hydrogen system safety analysis method, system, device and medium, and relates to the technical field of aviation safety, and the method comprises the steps: building a functional resonance confrontation hierarchy model; dividing the whole system through the functional feature description of the airborne hydrogen system of the functional resonance analysis method to obtain the functional resonance influence of the sub-components, and drawing a dynamic interaction network of the functional modules of the sub-components; performing dimension reduction and simplification on the dynamic interaction network, and obtaining a reachable matrix; performing adversarial layer extraction on the obtained data based on a reachable matrix to obtain overall division of a resonance model; and hierarchy importance and structure importance are obtained through topological structure data analysis, and airborne hydrogen system safety analysis is carried out. According to the method, the functional resonance confrontation hierarchy model is established, and a series of technical problems that an analysis method of an airborne hydrogen system in the prior art is greatly influenced by subjective effects of researchers, hierarchy fuzziness occurs in hierarchy division and the like can be solved.

Description

Technical Field

[0001] This invention relates to the field of aviation safety technology, and in particular to a method, system, equipment and medium for safety analysis of airborne hydrogen systems. Background Technology

[0002] In the civil aviation sector, safety analysis is an essential part of ensuring the safe and stable operation of systems. The security of these systems faces challenges such as leaks, sensor failures, and insufficient redundancy.

[0003] The dynamic functional interactions of a system are prone to triggering cascading resonance failures, and existing models cannot effectively quantify the priority of their impact. Furthermore, traditional security analysis methods (such as the ISM model) rely on static hierarchical divisions, making it difficult to capture the dynamic resonance risks of complex systems. Moreover, they lack multi-perspective adversarial verification, which can easily lead to one-sided analysis results.

[0004] In existing technologies, the coupled use of functional resonance analysis and interpretive structural models can, to some extent, solve the shortcomings of traditional security analysis methods that rely on expert judgment, are highly subjective, and ignore the differences in the strength of relationships between elements. Furthermore, "dynamic functional analysis" can compensate for the traditional methods' neglect of dynamic functional interaction and cascading resonance failure. However, due to the monotony of layer extraction, hierarchical division can lead to hierarchical ambiguity errors within the hierarchical division, resulting in unreliable security analysis results. Summary of the Invention

[0005] The purpose of this invention is to address the shortcomings of the prior art by providing a method, system, equipment, and medium for safety analysis of airborne hydrogen systems, thereby solving the problems in the prior art.

[0006] The present invention specifically provides the following technical solution: A method for safety analysis of an airborne hydrogen system includes: This paper analyzes the interrelationships of sub-components in an airborne hydrogen system from the perspective of functional resonance. By hierarchical division under an adversarial network structure, a functional resonance diagram corresponding to the interrelationships of sub-components is derived. Through topological data analysis of the functional resonance diagram, the influence of sub-components on the whole, key risk nodes, and optimized paths for protective measures are obtained, and a hierarchical model of functional resonance adversarial measures is established. The key risk nodes are the links in the overall process that play a decisive role in safety. The airborne hydrogen system is divided by system functional feature description, the functions of each sub-component are extracted, and the functional relationships are coupled to obtain the dynamic interaction network of sub-component functions; the system functional feature description is a conditional feature that represents the system function during startup, operation, and execution. Based on the directed graph of ordered triples, the dynamic interaction network is dimensionality reduced to obtain the adjacency matrix generated by the relationship between sub-components. The adjacency matrix is ​​then repeatedly processed by the transition matrix to obtain the reachability matrix of the connection paths between sub-components. Adversarial layer extraction is performed on the reachability matrix to obtain the overall partitioning of the functional resonance adversarial hierarchy model. Topological data analysis is then performed on the overall partitioning results to obtain the hierarchy importance and structural importance. The safety analysis of the airborne hydrogen system is then conducted based on the hierarchy importance and structural importance.

[0007] Preferably, the process of dividing the airborne hydrogen system through system functional feature description, extracting the functions of each sub-component, and coupling functional relationships to obtain a dynamic interaction network of sub-component functions specifically involves: The airborne hydrogen system is divided into sub-components including electronic / electrical systems, hydrogen storage systems, booster pump pressurization systems, hydrogen supply pipeline systems, hydrogen internal combustion engine combustion systems, cooling systems, and sensing systems. The functions of sub-components are defined by the input, output, time, prerequisite, resource, and control dimensions in the system functional characteristic description, and the relationships between functions are obtained to obtain the dynamic interaction network of sub-component functions.

[0008] Preferably, the step of using a directed graph of ordered triples as a basis to reduce the dimensionality of the dynamic interaction network and obtain the adjacency matrix generated by the relationships between sub-components is as follows: Input and output analysis is performed on dynamic interaction networks, where the input of the dynamic interaction network is the thing that initiates the function or the thing that the function will process or transform, and the output, time, premise, resources, and control of the dynamic interaction network are all points to the starting point of the connection when the function is running. Through the data in the matrix Represents nodes in a directed graph i and nodes j The relationships between components; where nodes represent the functions of sub-components; Based on the aforementioned relationships, the interrelationships of the sub-components of the airborne hydrogen system are digitized from the directed graph, and an adjacency matrix is ​​constructed using the matrix data generated from the digitized interrelationships of the sub-components.

[0009] Preferably, the relationship includes: =0 indicates a node i For nodes j No direct impact, i.e., node i To the node j There is no path of length 1, and the functions do not affect each other; =1 indicates a node i For nodes j There is a direct impact, meaning there exists a path of length 1 such that the node... iDirectly reach the node j The functions are related.

[0010] Preferably, the adversarial layer removal of the reachability matrix specifically includes: The factors influencing a function are hierarchically divided using the reachability matrix, and the reachability set and antecedent set of each sub-component are obtained. The common set is determined based on the reachability set and the antecedent set. The antecedent set refers to the set of all upstream factors that cause a functional component to fail, the reachability set refers to the set of all cascading failure states that can be triggered by the system coupling relationship starting from the failure of a component, and the common set refers to the intersection of the reachability set and the antecedent set. The first layer of extraction is performed on the antecedent set, reachable set, and common set through adversarial layer extraction. After the first layer extraction is completed, the rows and columns of the adjacent Boolean matrices of the extracted sub-components are deleted to obtain the updated matrix. The extraction is then iterated for each layer to complete the adversarial layer extraction.

[0011] Preferably, the anti-delamination method specifically includes: The methods for combating layer extraction include: result-priority UP-type extraction and DOWN-type topology layer extraction; wherein, result-priority UP-type extraction means that the sub-component is the highest priority sub-component during layer extraction, and DOWN-type topology layer extraction is performed according to the principle of cause priority, and the sub-component is the highest priority sub-component during layer extraction.

[0012] Preferably, the step of performing topological structure data analysis on the overall partitioning results to obtain hierarchical importance and structural importance specifically involves: The overall system is divided into adversarial extraction. n Layers, each level uses L express; The specific expression for obtaining the weights of each level in the overall system is as follows: ; Among them, the weight of each level M L Indicates the importance of the hierarchy; Functions that point to the function to be computed are defined as in-degree functions, and functions that the function to which the function to be computed points are defined as out-degree functions. Based on the weights of each level, the structural importance of functional modules at each level is obtained, as expressed in the following expression: ; in, Indication Function p The importance of the structure Indicates the function to be calculated p The weight of the level it belongs to Indicates pointing function p Functions q The weight of the level it belongs to Indication Function p Pointing function k The weight of the level it belongs to O It is the out-degree coefficient. I It is the in-degree coefficient.

[0013] This invention provides an airborne hydrogen system safety analysis system, comprising: The model building module is used to analyze the mutual influence relationships of sub-components of the airborne hydrogen system from the perspective of functional resonance. It derives the functional resonance diagram corresponding to the mutual influence relationships of sub-components through hierarchical division under the adversarial network structure. Through topological data analysis of the functional resonance diagram, it obtains the influence relationship of sub-components on the whole, key risk nodes, and optimized paths of protective measures, and establishes a functional resonance adversarial hierarchical model. The key risk nodes are the links in the overall process that play a decisive role in safety. The system partitioning module is used to partition the airborne hydrogen system through system functional feature description, extract the functions of each sub-component, and couple the functional relationships to obtain the dynamic interaction network of sub-component functions; the system functional feature description is a conditional feature that represents the system functions during startup, operation, and execution. The image matrix processing module is used to reduce the dimensionality of the dynamic interactive network based on the directed graph of ordered triples, obtain the adjacency matrix generated by the relationship between sub-components, and repeatedly perform transition matrix processing on the adjacency matrix to obtain the reachability matrix of the connection path between sub-components. The layer extraction analysis module is used to perform adversarial layer extraction on the reachability matrix, obtain the overall partition of the functional resonance adversarial hierarchy model, and perform topological structure data analysis on the overall partition results to obtain the hierarchy importance and structural importance. The safety analysis of the airborne hydrogen system is then performed based on the hierarchy importance and structural importance.

[0014] The present invention provides a computer device, including a memory and a processor. The memory stores a program, and when the program is executed by the processor, the processor performs the steps of the above-described airborne hydrogen system safety analysis method.

[0015] The present invention provides a storage medium storing a computer program thereon, which, when executed by a processor, implements the steps of the above-described airborne hydrogen system safety analysis method.

[0016] Compared with the prior art, the present invention has the following significant advantages: This invention dissects the interrelationships of sub-components in an airborne hydrogen system from the perspective of functional resonance. It derives a functional resonance diagram through hierarchical partitioning under an adversarial network structure, performs topological structure calculations to analyze the impact of sub-components on the overall system, identify key risk nodes, and optimize protective measures. This establishes a functional resonance adversarial hierarchical model, addressing a series of technical problems in existing airborne hydrogen system analysis methods, such as significant subjective influence from researchers and hierarchical ambiguity within the hierarchical partitioning. Furthermore, by describing the system's functional characteristics through functional resonance analysis, the overall system is partitioned to obtain the functional resonance impact of sub-components. Adversarial layer extraction is performed on the reachability matrix to obtain the overall partitioning of the functional resonance adversarial hierarchical model. This achieves the effect of dynamically identifying key risk nodes in the system, optimizing protective measures, and reducing the probability of system resonance failure through functional resonance analysis and adversarial hierarchical partitioning. It improves the reliability of safety analysis and provides theoretical support for the safety design of complex aerospace systems. Attached Figure Description

[0017] Figure 1 This is an overall flowchart of the method used in this invention; Figure 2 This is a functional diagram of the airborne hydrogen system FRAM of the present invention; Figure 3 This is a simplified directed graph of the FRAM functional diagram of the airborne hydrogen system of the present invention; Figure 4 This is a FRAM-AISM hierarchical diagram of the airborne hydrogen system of the present invention; Figure 5 Functional diagram of the airborne hydrogen system FRAM-AISM under the protection of this invention; Figure 6 This is a priority-UP type hierarchical partitioning diagram of the FRAM-AISM results for the airborne hydrogen system under the protection of this invention; Figure 7 This invention provides a FRAM-AISM cause-priority-DOWN type hierarchical partitioning diagram for an airborne hydrogen system. Figure 8 This is a FRAM-AISM hierarchical diagram of the airborne hydrogen system under the protection of this invention; Figure 9 This is a flowchart of a safety analysis method for an airborne hydrogen system proposed in this invention. Detailed Implementation

[0018] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0019] like Figure 1 and Figure 9 As shown, this embodiment of the invention provides a safety analysis method for airborne hydrogen systems based on resonance theory and adversarial interpretation structures, including the following steps: Step S1: Analyze the mutual influence relationship of sub-components of the airborne hydrogen system from the perspective of functional resonance, and derive the functional resonance diagram corresponding to the mutual influence relationship of sub-components through hierarchical division under the adversarial network structure. Analyze the functional resonance diagram through topological data to obtain the influence relationship of sub-components on the whole, key risk nodes, and optimized paths of protective measures, and establish a functional resonance adversarial hierarchical model; key risk nodes are the links in the overall process that play a decisive role in safety.

[0020] Functional resonance diagrams are diagrams that describe the functions of a large system from a functional perspective, aiming to complete the overall function. They summarize the relationships between multiple interconnected subsystems that complete their respective functions and the mutual influence of these subsystems.

[0021] Optimization path refers to the method of increasing the overall system security by adding protective measures in areas where functional resonance has a significant impact when the obtained results are unacceptable.

[0022] Step S2: Divide the airborne hydrogen system by system functional feature description, extract the functions of each sub-component, and couple the functional relationships to obtain the dynamic interaction network of sub-component functions; system functional feature description is a conditional feature that represents the system functions during startup, operation, and execution.

[0023] The airborne hydrogen system is divided into sub-components including electronic / electrical systems, hydrogen storage systems, booster pump pressurization systems, hydrogen supply pipeline systems, hydrogen internal combustion engine combustion systems, cooling systems, and sensing systems.

[0024] The functional resonance analysis method describes the functional characteristics of an airborne hydrogen system, including input, output, time, prerequisites, resources, and control. It focuses on the resonant relationships between each sub-component and the overall function, divides the system into functional parts, and extracts the specific functions of different systems. That is, it defines the functions of sub-components through the input, output, time, prerequisites, resources, and control dimensions in the system's functional characteristic description, fills in the functional characteristics of the airborne hydrogen system, couples functional relationships, obtains the relationships between functions, and obtains the dynamic interaction network of sub-component functions.

[0025] Step S3: Based on the directed graph of ordered triples, the dynamic interaction network is dimensionality reduced to obtain the adjacency matrix generated by the relationship between sub-components. The adjacency matrix is ​​then repeatedly processed by the transition matrix to obtain the reachability matrix of the connection paths between sub-components.

[0026] Input-output analysis is performed on the dynamic interaction network of the resonant system. The inputs to the dynamic interaction network are those pointed to by directed arrows, representing the things that initiate the function or the things the function will process or transform. The outputs, time, prerequisites, resources, and control of the dynamic interaction network are all the starting points of the connections during function execution. This analysis is conducted using data from the matrix. Represents nodes in a directed graph i and nodes j The relationships between subsystems are simplified from the directed graph based on these relationships, i.e., digitized. The numbers in the matrix represent the one-way relationship between column elements and row elements, and the adjacency matrix is ​​constructed using the matrix data generated from the digitized relationships between subsystems.

[0027] Relationships include: =0 indicates a node i For nodes j No direct impact, i.e., node i To the node j There is no path of length 1, and the functions do not affect each other; =1 indicates a node i For nodes j There is a direct impact, meaning there exists a path of length 1 such that the node... i Directly reach the node j The functions are related.

[0028] Step S4: Perform adversarial layer extraction on the reachability matrix to obtain the overall partitioning of the functional resonance adversarial hierarchical model, and perform topological structure data analysis on the overall partitioning results to obtain the hierarchical importance and structural importance. Then, conduct airborne hydrogen system safety analysis based on the hierarchical importance and structural importance.

[0029] Methods to combat layer extraction include: result-priority UP extraction and DOWN-type topology layer extraction; among them, result-priority UP extraction means that the sub-component is the highest priority sub-component during layer extraction, i.e., R( )= T( DOWN-type topology hierarchy extraction follows a cause-first principle, where the sub-component has the highest priority during hierarchy extraction, i.e., T( )= Q( ).

[0030] Adversarial layer extraction is performed on the reachability matrix, specifically as follows: The factors influencing a function are hierarchically divided using the reachability matrix. The reachability set and antecedent set of each sub-component are obtained, and the common set is determined based on the reachability set and antecedent set. The antecedent set refers to the set of all upstream factors that cause a functional component to fail. The reachability set refers to the set of all cascading failure states that can be triggered by the system coupling relationship starting from the failure of a component. The common set refers to the intersection of the reachability set and the antecedent set.

[0031] By performing first-level extraction on the antecedent set, reachable set, and common set through adversarial layer extraction, the extracted sub-components are then deleted. The row and column of the adjacent Boolean matrix are used to obtain the updated matrix. Model reasoning is performed again to obtain the secondary factors again. The adversarial layer extraction is iteratively processed to complete the extraction of UP / DOWM type adversarial layers. That is, the extraction of each layer is performed iteratively to complete the extraction of adversarial layers.

[0032] The hierarchy importance and structural importance are obtained through topological data analysis, specifically: The overall system is divided into adversarial extraction. n Layers, each level uses L express; The specific expression for obtaining the weights of each level in the overall system is as follows: ; Among them, the weight of each level M L Indicates the importance of the hierarchy.

[0033] Functions that point to the function to be computed are defined as in-degree functions, and functions that the function to which the function to be computed points are defined as out-degree functions. Based on the weights of each level, the structural importance of functional modules at each level is obtained, as expressed in the following expression: ; in, Indication Function p The importance of the structure Indicates the function to be calculated p The weight of the level it belongs to Indicates pointing function p Functions q The weight of the level it belongs to Indication Function p Pointing function k The weight of the level it belongs to O It is the out-degree coefficient. I It is the in-degree coefficient.

[0034] Example: To verify the feasibility of the method proposed in this invention, an airborne hydrogen system is used as an example to conduct a safety analysis. The system components include: F1: electronic / electrical system, F2: hydrogen storage system, F3: booster pump pressurization system, F4: hydrogen supply pipeline system, F5: hydrogen internal combustion engine combustion system, F6: pilot control system, F7: cooling system, and F8: sensing system. The airborne hydrogen system safety analysis method based on resonance theory and antagonistic interpretation structure provided in this invention includes the following steps performed in sequence:

[0035] Step 1: Classify airborne hydrogen systems from a functional perspective: The core function of an airborne hydrogen system is to achieve the safe storage and efficient allocation of hydrogen. Its primary task is to continuously and stably deliver hydrogen fuel to the aircraft engines under complex flight conditions (covering different altitudes, attitudes, and environmental conditions) while meeting the required pressure and flow parameters. The system also possesses several synergistic functions: providing thermal management for airborne equipment through hydrogen fuel cycling, adjusting aircraft attitude using hydrogen fuel trim technology, and dynamically controlling the aircraft's center of gravity through intelligent scheduling of fuel tanks to ensure it remains within the optimal aerodynamic configuration range.

[0036] A large system completes a portion of the overall task, and this large system is further decomposed into different smaller systems. These smaller systems perform specific tasks, and the tasks of the large system are completed through the interaction between the smaller systems. This invention does not divide systems simply based on mechanical relationships, but rather on their ability to complete tasks. In this example, the large system is the airborne hydrogen system, whose core function is the safe storage and efficient allocation of hydrogen. To accomplish this task, the large system is divided into the following eight smaller systems, as described in step 2 of the specification.

[0037] Step 2: Based on the functional division of the airborne hydrogen system, identify the relationships between functions and construct an FRAM functional model: The electronic / electrical system (F1) receives input from pilot flight commands and data collected by various sensors. Through automatic control algorithms, it outputs electrical signals to various components of the system, enabling the onboard hydrogen system to perform its various functions. The hydrogen storage system (F2) refuels from ground-based hydrogen tanks and supplies the stored hydrogen to the booster pump pressurization system (F3) during aircraft operation. The sensing system (F8) acquires hydrogen storage information and provides it to the electronic / electrical system (F1) via electrical signals, which are then displayed in real-time to the pilot (F6) on the instrument panel. Upon receiving the electrical signal from the electronic / electrical system (F1), the booster pump pressurization system (F3) activates the booster pump to pressurize the hydrogen supply pipeline (F4). The hydrogen enters the combustion chamber of the hydrogen internal combustion engine (F5) through the hydrogen supply pipeline system (F4) for combustion. The sensing system (F8) detects the flow rate at both ends of the pipeline and provides it to the electronic / electrical system (F1) in real-time. The hydrogen internal combustion engine (F5), protected by the cooling system (F7), provides power for aircraft flight. To maintain a reasonable temperature in the hydrogen internal combustion engine's combustion system (F5), a sensing system (F8) is added to the cooling system (F7), which can output signals to protect the engine's safety. The established FRAM model is as follows: Figure 2 As shown.

[0038] Step 3: Simplify the established FRAM model using a directed graph: Based on the functional relationship network between the systems, the FRAM network diagram, i.e., the functional connections in the diagram, is transformed into the mutual influence relationships between the system elements. The system is then simplified into a directed graph, as shown below. Figure 3 .

[0039] The mutual influence relationship refers to the "coupling of functional relationships to obtain a dynamic interaction network of sub-component functions" in step S2 of the specification. Each small system completes the function of the larger system through interaction. However, this interaction may be accomplished through different forms and characteristic descriptions between different systems. For example, in this case, the input source of the electronic / electrical system (F1) is the pilot's command, which is manual input from the pilot. The sensing system receives electrical signals directly from the hydrogen storage system. The hydrogen storage system outputs hydrogen gas, a resource, to the booster pump system. These different forms and characteristic descriptions of interaction all belong to functional connection situations. When the hydrogen storage system runs out of hydrogen, it cannot supply hydrogen gas to the booster pump, causing the booster pump to malfunction. This situation is called the "mutual influence relationship between elements." Because this influence relationship is also linked through different forms and characteristic descriptions, there are inconveniences in hierarchical division and calculation during subsequent analysis, so a directed graph simplification is used.

[0040] Step 4: AISM Reachability Matrix Establishment: Based on the pointing relationship of the directed graph, the link from the pointing end to the pointed end is defined. The relationship between nodes is determined by whether there is an output effect, and the adjacency matrix A can be established. Under the improved Warshall algorithm, the self-multiplication matrix is ​​obtained and the transition matrix is ​​repeatedly processed to obtain the reachability matrix R.

[0041] ; Step 5: AISM Extraction and Hierarchical Partitioning: After calculating the reachability matrix R, it can be used to hierarchically divide the influencing factors. First, identify each system. The reachable set R( ) and the antecedent set Q( Then, based on these two, their intersection is determined, as shown in Table 1.

[0042] The influencing factors here are actually the small systems mentioned in step 3. Due to the concept of functional resonance, changes in each small system directly or indirectly affect other systems. For other systems, the changed small system becomes an influencing factor. Furthermore, because the changed or affected small system cannot complete all functions or errors occur in the interaction between functions, the larger system also cannot fully perform its functions. In this case, the larger system is also affected from a functional perspective; therefore, the changed or affected small system is an influencing factor for the larger system. Since every small system can change or be affected, every small system is an influencing factor for the larger system.

[0043] Table 1. Reachable set, cause set, and their intersection After obtaining the reachable sets, antecedent sets, and intersections of each factor, the UP / DOWN hierarchical division can be obtained according to the adversarial extraction rules of AISM, as shown in Table 2. The UP type hierarchical differentiation is {F5}≺{F1, F3, F4, F6, F7, F8}≺{F2}. The DOWN type hierarchical differentiation is {F5}≺{F1, F3, F4, F6, F7, F8}≺{F2}. The UP and DOWN hierarchical differentiations are exactly the same, as shown in Table 2. Figure 4 An FRAM analysis graph can be obtained.

[0044] Table 2 Hierarchical decomposition extraction results Step 6: Add protection analysis: Based on the basic FRAM airborne hydrogen system, safety protection measures are introduced for the entire system, conforming to the protection and suppression principles of FRAM. The specific protection measures are based on the concepts of "human-machine-environment" and "intrinsic safety." A leak prevention system (F9) is added to the hydrogen storage system (F2) to reduce the risk of hydrogen leakage from the storage system (F2) and to effectively suppress hydrogen leakage in the event of a leak. In accordance with relevant airworthiness regulations, a redundant design is added to the pump pressurization system (F3) – a booster pump redundancy design system (F10). The sensing system (F8) is monitored and protected (F11).

[0045] Protected FRAM models such as Figure 5 As shown. The security analysis and protection practice here implements the concept of "optimization path of protection measures" in step S1 of the above specification. Protection measures refer to introducing new subsystems into a large system to reduce the impact of functional resonance between systems and improve system security. The purpose of adding protection systems here is mainly as follows: 1. To prove the usefulness of the invention. After analyzing the unprotected system, the analysis and comparison with the system with added protection shows that the system can indeed improve system security. (However, for some other cases where the desired security standard can be achieved without adding protection measures, protection measures may not be added.) 2. In this example, the hierarchical decomposition extraction result obtained from the large system without added protection measures does not show the existence of the resonance root cause layer, and cannot demonstrate the advantages of AISM in this method compared with the traditional ISM method.

[0046] Step 7: Repeat steps 2 to 5 above for the protected system to obtain... Figure 6 Results of FRAM-AISM model for airborne hydrogen system under protection - UP type network diagram and Figure 7 Cause-first-DOWN network diagram of FRAM-AISM model for airborne hydrogen system under protection.

[0047] Step 8: FRMA-AISM under protection: Regarding the adversarial extraction results, the UP and DOWN extraction results for the first three layers are consistent, with each layer being directly independent and non-interfering with the others. Systems F10 and F11 occupy different layers in the UP and DOWN types. From the AISM method perspective, all systems in the third to fourth layers have equal effects and belong to the resonance root layer in this case. The specific FRMA-AISM hierarchical network diagram under protection is as follows: Figure 8 As shown.

[0048] Step 9: Functional Structure Quantitative Analysis: For the structural quantitative analysis of the airborne hydrogen system, the weights of the levels from the system resonance surface to the system resonance root are calculated according to the hierarchical division of the FRAM-AISM model. Substituting n=3 into (1) can calculate the weight of each level. The results are shown in Table 3.

[0049] Table 3. Importance of FRAM-AISM Functional Hierarchy Based on the calculation of the functional hierarchy importance of FRAM-AISM, and according to the introduced concept of node in-degree and out-degree, the calculation of subsystem in-degree and out-degree is added to each system.

[0050] Substituting the results of the functional hierarchy importance calculation into (2), the structural importance of each level of the system can be calculated. R i The calculation results are shown in Table 4.

[0051] Table 4. Calculation of the structural importance of the FRAM-AISM system. The weights of each level can be calculated by substituting n=4 into (1) based on the FRAM-AISM hierarchical network diagram under protection. The results are shown in Table 5.

[0052] Table 5. Importance of FRAM-AISM Functional Levels under Protection Based on the calculation of the functional hierarchy importance of FRAM-AISM, and according to the introduced concept of node in-degree and out-degree, the in-degree and out-degree calculation of each subsystem is added to the calculation of each system. Substituting the calculation results of the functional hierarchy importance into (2), the structural importance of each level of the system can be calculated. The calculation results are shown in Table 6.

[0053] Table 6. Calculation of Structural Importance of FRAM-AISM System under Protection This invention proposes an airborne hydrogen system safety analysis system, comprising: a model building module, a system partitioning module, an image matrix processing module, a layer extraction analysis module, and a safety analysis module.

[0054] The model building module is used to analyze the mutual influence relationships of sub-components of the airborne hydrogen system from the perspective of functional resonance. It derives the functional resonance diagram corresponding to the mutual influence relationships of sub-components through hierarchical division under the adversarial network structure. Through topological data analysis of the functional resonance diagram, it obtains the influence relationship of sub-components on the whole, key risk nodes, and optimized paths of protective measures, and establishes a hierarchical model of functional resonance adversarial measures. Key risk nodes are the links in the overall process that play a decisive role in safety. The system partitioning module is used to partition the airborne hydrogen system through the description of system functional characteristics, extract the functions of each sub-component, and couple the functional relationships to obtain the dynamic interaction network of sub-component functions. The system functional characteristics description represents the conditional characteristics that define the system functions during startup, operation, and execution. The image matrix processing module is used to reduce the dimensionality of the dynamic interaction network based on the directed graph of ordered triples, obtain the adjacency matrix generated by the interrelationships of sub-components, and repeatedly perform transition matrix processing on the adjacency matrix to obtain the reachability matrix of the connection paths between sub-components. The layer extraction analysis module is used to perform adversarial layer extraction on the reachability matrix, obtain the overall partition of the functional resonance adversarial hierarchical model, and perform topological structure data analysis on the overall partition results to obtain the hierarchical importance and structural importance. The safety analysis of the airborne hydrogen system is then performed based on the hierarchical importance and structural importance.

[0055] The present invention also provides a computer device, including a memory and a processor, wherein the memory stores a program, and when the program is executed by the processor, the processor performs the steps of an airborne hydrogen system safety analysis method.

[0056] According to the disclosed embodiments, the computer device can communicate with one or more external devices (e.g., keyboard, pointing device, Bluetooth communication, etc.) or with any device that enables the computing device to communicate with one or more other computing devices (e.g., router, demodulator, etc.).

[0057] The above description, in conjunction with specific preferred embodiments, provides a more detailed explanation of the present invention. For those skilled in the art, various simple deductions or substitutions can be made without departing from the concept of the present invention, and all such deductions or substitutions should be considered to fall within the scope of protection of the present invention.

Claims

1. A method for safety analysis of an airborne hydrogen system, characterized in that, include: This paper analyzes the interrelationships of sub-components in an airborne hydrogen system from the perspective of functional resonance. By hierarchical division under an adversarial network structure, a functional resonance diagram corresponding to the interrelationships of sub-components is derived. Through topological data analysis of the functional resonance diagram, the influence of sub-components on the whole, key risk nodes, and optimized paths for protective measures are obtained, and a hierarchical model of functional resonance adversarial measures is established. The key risk nodes are the links in the overall process that play a decisive role in safety. The airborne hydrogen system is divided by system functional feature description, the functions of each sub-component are extracted, and the functional relationships are coupled to obtain the dynamic interaction network of sub-component functions; the system functional feature description is a conditional feature that represents the system function during startup, operation, and execution. Based on the directed graph of ordered triples, the dynamic interaction network is dimensionality reduced to obtain the adjacency matrix generated by the relationship between sub-components. The adjacency matrix is ​​then repeatedly processed by the transition matrix to obtain the reachability matrix of the connection paths between sub-components. Adversarial layer extraction is performed on the reachability matrix to obtain the overall partitioning of the functional resonance adversarial hierarchy model. Topological data analysis is then performed on the overall partitioning results to obtain the hierarchy importance and structural importance. The safety analysis of the airborne hydrogen system is then conducted based on the hierarchy importance and structural importance.

2. The airborne hydrogen system safety analysis method as described in claim 1, characterized in that, The airborne hydrogen system is divided based on system functional characteristics, the functions of each sub-component are extracted, and the functional relationships are coupled to obtain a dynamic interaction network of sub-component functions, specifically: The airborne hydrogen system is divided into sub-components including electronic / electrical systems, hydrogen storage systems, booster pump pressurization systems, hydrogen supply pipeline systems, hydrogen internal combustion engine combustion systems, cooling systems, and sensing systems. The functions of sub-components are defined by the input, output, time, prerequisite, resource, and control dimensions in the system functional characteristic description, and the relationships between functions are obtained to obtain the dynamic interaction network of sub-component functions.

3. The airborne hydrogen system safety analysis method as described in claim 2, characterized in that, The method of using a directed graph of ordered triples as a basis to reduce the dimensionality of the dynamic interaction network and obtain the adjacency matrix generated by the relationships between sub-components is as follows: Input and output analysis is performed on dynamic interaction networks, where the input of the dynamic interaction network is the thing that initiates the function or the thing that the function will process or transform, and the output, time, premise, resources, and control of the dynamic interaction network are all points to the starting point of the connection when the function is running. Through the data in the matrix Represents nodes in a directed graph i and nodes j The relationships between components; where nodes represent the functions of sub-components; Based on the aforementioned relationships, the interrelationships of the sub-components of the airborne hydrogen system are digitized from the directed graph, and an adjacency matrix is ​​constructed using the matrix data generated from the digitized interrelationships of the sub-components.

4. The airborne hydrogen system safety analysis method as described in claim 3, characterized in that, The relationship includes: =0 indicates a node i For nodes j No direct impact, i.e., node i To the node j There is no path of length 1, and the functions do not affect each other; =1 indicates a node i For nodes j There is a direct impact, meaning there exists a path of length 1 such that the node... i Directly reach the node j The functions are related.

5. The airborne hydrogen system safety analysis method as described in claim 1, characterized in that, The adversarial layer extraction of the reachability matrix specifically involves: The factors influencing a function are hierarchically divided using the reachability matrix, and the reachability set and antecedent set of each sub-component are obtained. The common set is determined based on the reachability set and the antecedent set. The antecedent set refers to the set of all upstream factors that cause a functional component to fail, the reachability set refers to the set of all cascading failure states that can be triggered by the system coupling relationship starting from the failure of a component, and the common set refers to the intersection of the reachability set and the antecedent set. The first layer of extraction is performed on the antecedent set, reachable set, and common set through adversarial layer extraction. After the first layer extraction is completed, the rows and columns of the adjacent Boolean matrices of the extracted sub-components are deleted to obtain the updated matrix. The extraction is then iterated for each layer to complete the adversarial layer extraction.

6. The airborne hydrogen system safety analysis method as described in claim 5, characterized in that, The anti-depletion measures specifically refer to: The methods for combating layer extraction include: result-priority UP-type extraction and DOWN-type topology layer extraction; wherein, result-priority UP-type extraction means that the sub-component is the highest priority sub-component during layer extraction, and DOWN-type topology layer extraction is performed according to the principle of cause priority, and the sub-component is the highest priority sub-component during layer extraction.

7. The airborne hydrogen system safety analysis method as described in claim 1, characterized in that, The topological data analysis of the overall partitioning results yields hierarchical importance and structural importance, specifically as follows: The overall system is divided into adversarial extraction. n Layers, each level uses L express; The specific expression for obtaining the weights of each level in the overall system is as follows: ； Among them, the weight of each level M L Indicates the importance of the hierarchy; Functions that point to the function to be computed are defined as in-degree functions, and functions that the function to which the function to be computed points are defined as out-degree functions. Based on the weights of each level, the structural importance of functional modules at each level is obtained, as expressed in the following expression: ； in, Indication Function p The importance of the structure Indicates the function to be calculated p The weight of the level it belongs to Indicates pointing function p Functions q The weight of the level it belongs to Indication Function p Pointing function k The weight of the level it belongs to O It is the out-degree coefficient. I It is the in-degree coefficient.

8. A safety analysis system for an airborne hydrogen system, characterized in that, include: The model building module is used to analyze the mutual influence relationships of sub-components of the airborne hydrogen system from the perspective of functional resonance. It derives the functional resonance diagram corresponding to the mutual influence relationships of sub-components through hierarchical division under the adversarial network structure. Through topological data analysis of the functional resonance diagram, it obtains the influence relationship of sub-components on the whole, key risk nodes, and optimized paths of protective measures, and establishes a functional resonance adversarial hierarchical model. The key risk nodes are the links in the overall process that play a decisive role in safety. The system partitioning module is used to partition the airborne hydrogen system through system functional feature description, extract the functions of each sub-component, and couple the functional relationships to obtain the dynamic interaction network of sub-component functions; the system functional feature description is a conditional feature that represents the system functions during startup, operation, and execution. The image matrix processing module is used to reduce the dimensionality of the dynamic interactive network based on the directed graph of ordered triples, obtain the adjacency matrix generated by the relationship between sub-components, and repeatedly perform transition matrix processing on the adjacency matrix to obtain the reachability matrix of the connection path between sub-components. The layer extraction analysis module is used to perform adversarial layer extraction on the reachability matrix, obtain the overall partition of the functional resonance adversarial hierarchy model, and perform topological structure data analysis on the overall partition results to obtain the hierarchy importance and structural importance. The safety analysis of the airborne hydrogen system is then performed based on the hierarchy importance and structural importance.

9. A computer device, characterized in that, The system includes a memory and a processor, wherein the memory stores a program that, when executed by the processor, causes the processor to perform the steps of the airborne hydrogen system safety analysis method as described in any one of claims 1 to 7.

10. A storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the steps of the airborne hydrogen system safety analysis method according to any one of claims 1 to 7.

Images