An independent and dissimilar oil level measurement and indication method and system

Abstract

This invention proposes a method and system for independent and dissimilar fuel level measurement indication, wherein low fuel level measurement and fuel quantity measurement are independent and dissimilar in principle and signal link, which can avoid the catastrophic event of "fuel quantity indication error and loss of low fuel level alarm" caused by common mode failure.

Description

Technical Field

[0001] This invention relates to technologies related to fuel measurement in civil transport aircraft. Background Technology

[0002] The fuel quantity measurement and indication system for civil aircraft measures the remaining fuel level in the aircraft's fuel tanks and displays the remaining fuel level in each tank on the instruments in the cockpit. The fuel level sensor, as a supplement to the fuel quantity sensor, is used to trigger low and high fuel level alarms. Currently, most civil aircraft use capacitive fuel level sensors. Considering the redundancy of low fuel level measurement, its function should be independent of the fuel quantity measurement and calculation.

[0003] Most advanced civil transport aircraft currently employ Integrated Modular Avionics (IMA) systems. The similarity in design features of IMA systems can lead to common-mode failures. Fuel level and low fuel level information are transmitted to the integrated display and warning processor via the IMA. If the Remote Data Interface Unit (RDIU) of the IMA system fails in a common-mode manner, both the fuel level and low fuel level signals will be transmitted incorrectly simultaneously, resulting in the catastrophic event of "incorrect fuel level indication and loss of low fuel level warning."

[0004] Therefore, there is a need for methods that can improve upon the shortcomings of existing technologies. Summary of the Invention

[0005] This summary is provided to introduce, in a simplified form, some concepts that will be further described in the following detailed description section. This summary is not intended to identify key or essential features of the claimed subject matter, nor is it intended to help determine the scope of the claimed subject matter.

[0006] To address the shortcomings of existing technologies, this invention proposes a method and system for independently indicating low fuel level, which is dissimilar to fuel quantity, in response to the impact of common-mode failure of the Integrated Modular Avionics (IMA) system on the fuel measurement system. This method and system are independent and dissimilar to fuel quantity measurement in principle and signal link, thereby avoiding the catastrophic event of "erroneous fuel quantity indication and loss of unannounced low fuel level warning" caused by common-mode failure of the IMA system, making the aircraft fuel system safer and more reliable.

[0007] Specifically, in one embodiment of the present invention, a system for independent and dissimilar low oil level measurement indication is provided, the system comprising:

[0008] A low fuel level sensor is arranged in each outer wing fuel tank and is configured to send a low fuel level sensor signal containing low fuel level information.

[0009] Low fuel level signal concentrators, located in each outer wing fuel tank, are configured to transmit the low fuel level sensor signal via a discrete interface to a remote data interface unit in the IMA system, and via another interface directly to the cockpit multifunction display without passing through the IMA system; and

[0010] The cockpit multifunction display receives the low fuel level sensor signal transmitted directly to it for displaying the low fuel level information on its EICAS page, wherein the low fuel level information is only displayed on the EICAS page when a fuel quantity indication error caused by a common-mode failure of the Integrated Module Avionics (IMA) and a loss of low fuel level warning are simultaneously triggered and the low fuel level information is true.

[0011] In one embodiment of the present invention, the low oil level sensor adopts a non-capacitive principle, and two low oil level sensors are arranged in each outer wing fuel tank.

[0012] In one embodiment of the invention, a low fuel level signal concentrator is arranged in each outer wing fuel tank.

[0013] In one embodiment of the present invention, the low oil level signal concentrator is also used for conditioning and data conversion of the low oil level sensor signal.

[0014] In one embodiment of the invention, the low oil level sensor signal is transmitted to the remote data interface unit and the cockpit multifunction display via a hardwire or bus.

[0015] In one embodiment of the present invention, the low fuel level sensor signal transmitted to the remote data interface unit is used only for the logical triggering of a low fuel level alarm signal executed by the fuel quantity measurement indication system in the event that the remote data interface unit does not experience a common-mode failure, and the low fuel level sensor signal transmitted directly to the cockpit multifunction display is used only for the display of the low fuel level information on the EICAS page.

[0016] In another embodiment of the invention, a method for indicating independent and dissimilar low oil level measurement is provided. This method is executed via a low oil level measurement indication system, which includes a low oil level sensor, a low oil level signal concentrator, and a cockpit multifunction display. The method includes:

[0017] Determine if the IMA system has malfunctioned;

[0018] In the event of a malfunction in the IMA system, determine whether a fuel quantity indication error and a low fuel level alarm loss are triggered simultaneously.

[0019] In the event that both a fuel level indication error and a low fuel level warning loss are triggered simultaneously, determine whether the low fuel level information from the low fuel level sensor and transmitted directly to the cockpit multifunction display via the low fuel level signal concentrator is true; and

[0020] If the low oil level information is true, the low oil level information will be displayed on the EICAS page of the cockpit multifunction display.

[0021] In one embodiment of the present invention, the method further includes logically triggering a low fuel level alarm signal by the fuel quantity measurement indication system when the IMA system is not malfunctioning, including:

[0022] The fuel quantity measurement and indication system determines whether to issue a low fuel level alarm.

[0023] Trigger a low oil level alarm message if it is determined that a low oil level alarm should be issued; and

[0024] Suppress the display of the low oil level information on the EICAS page.

[0025] In one embodiment of the present invention, the IMA system includes a remote data interface unit, and the fault of the IMA system includes a common mode failure of the remote data interface unit, the common mode failure causing the fuel quantity indication error and the loss of the low fuel level alarm.

[0026] In this embodiment of the invention, the low fuel level sensor is arranged in each outer wing fuel tank, and the low fuel level information is transmitted by the low fuel level signal concentrator arranged in each outer wing fuel tank through the low fuel level sensor signal to the remote data interface unit, and another path is transmitted directly to the cockpit multifunction display without passing through the IMA system. The low fuel level sensor signal transmitted to the remote data interface unit is only used for the logical triggering of the low fuel level alarm signal executed by the fuel quantity measurement indication system, and the low fuel level sensor signal directly transmitted to the cockpit multifunction display is only used for the display of the low fuel level information executed by the low fuel level measurement indication system on the EICAS page.

[0027] In another embodiment of the present invention, a computer-readable storage medium is also provided, which stores instructions for performing the above-described method.

[0028] Other aspects, features, and embodiments of the invention will become apparent to those skilled in the art after reading the following description of specific exemplary embodiments of the invention in conjunction with the accompanying drawings. Although features of the invention may be discussed below with reference to certain embodiments and drawings, all embodiments of the invention may include one or more of the advantageous features discussed herein. In other words, while one or more embodiments may be discussed having certain advantageous features, one or more of such features may also be used according to the various embodiments of the invention discussed herein. Similarly, although exemplary embodiments may be discussed below as embodiments of devices, systems, or methods, it should be understood that such exemplary embodiments may be implemented in various devices, systems, and methods. Attached Figure Description

[0029] To gain a more detailed understanding of the manner in which the features described above are presented in this disclosure, reference can be made to a more specific description of the foregoing brief overview, some of which are illustrated in the accompanying drawings. However, it should be noted that the drawings illustrate only certain typical aspects of this disclosure and should not be considered as limiting its scope, as other equivalent aspects are permissible in this description.

[0030] Figure 1 This is an architecture diagram of an independent, dissimilar low oil level measurement indication system according to an embodiment of the present disclosure.

[0031] Figure 2 This is a schematic diagram of a low oil level display according to an embodiment of the present disclosure.

[0032] Figure 3 A flowchart of a method for indicating independent and dissimilar low oil levels according to an embodiment of the present disclosure is shown. Detailed Implementation

[0033] The various embodiments will now be described in more detail with reference to the accompanying drawings, which form part of this invention and illustrate specific exemplary embodiments. However, the embodiments may be implemented in many different forms and should not be construed as limiting the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of these embodiments to those skilled in the art. The embodiments may be implemented as methods, systems, or devices. Therefore, these embodiments may be implemented in hardware, entirely in software, or in a combination of software and hardware aspects. Therefore, the following detailed description is not intended to be limiting.

[0034] The steps in each flowchart can be performed by hardware (e.g., processor, engine, memory, circuitry), software (e.g., operating system, application, driver, machine / processor executable instructions), or a combination thereof. As will be understood by those skilled in the art, the methods involved in each embodiment may include more or fewer steps than shown.

[0035] In the technical solution of this invention, a "low fuel level indication function" is introduced, adding a functional redundancy to the "fuel level indication error and low fuel level alarm loss" scenario, so that the top event becomes "fuel level indication error and low fuel level alarm indication function loss". Furthermore, a data transmission link is added to directly connect the low fuel level signal to the cockpit multifunction display, thus avoiding the impact of IMA common-mode failure by bypassing the IMA system. The various aspects of this disclosure will be described in detail below using block diagrams, data flow diagrams, and method flowcharts.

[0036] Figure 1 This is an architecture diagram of an independent, dissimilar low oil level measurement indication system according to an embodiment of the present disclosure.

[0037] like Figure 1 As shown, according to an embodiment of the present invention, a low oil level measurement indication system for independent and dissimilar oil levels (such as...) Figure 1 (As shown by the solid lines in the diagram) includes a low oil level sensor 102, a low oil level signal concentrator 104, and a cockpit multifunction display 106. In another embodiment of the invention, the system also includes cables (such as those for connecting the low oil level sensor 102, the low oil level signal concentrator 104, and the cockpit multifunction display 106) for connecting the low oil level sensor 102, the low oil level signal concentrator 104, and the cockpit multifunction display 106. Figure 1 The solid line with an arrow between the low oil level sensor 102 and the low oil level signal concentrator 104, and the solid line between the low oil level signal concentrator 104, the remote data interface unit, and the cockpit multifunction display 106 are shown in the image. Figure 1 It also includes fuel measurement and indication systems (such as fuel measurement and indication systems). Figure 1 (As shown by the dashed line in the diagram), the system may include an IMA network / system and several remote data interface units associated with the IMA network / system, as well as other components / modules (not shown in the diagram for simplicity). Figure 1 (As specifically indicated herein). As will be understood by those skilled in the art, Figure 1 The system shown is based on a federated architecture design, and the low oil level measurement indication system described in this invention is equally applicable and beneficial to architectures residing in IMAs.

[0038] In one embodiment of the invention, the low fuel level sensor 102 may be a non-capacitive low fuel level sensor and is configured to transmit a low fuel level sensor signal containing low fuel level information (to the low fuel level signal concentrator 104). In one embodiment of the invention, two low fuel level sensors 102 may be arranged in each outer wing fuel tank. Figure 1 For simplicity, only one low fuel level sensor is shown for each outer wing fuel tank. However, the invention is not limited to arranging two low fuel level sensors 102 in each outer wing fuel tank, but can arrange any suitable number of low fuel level sensors as needed.

[0039] In one embodiment of the invention, a low fuel level signal concentrator 104 may be arranged in each outer wing fuel tank. This concentrator is configured to transmit the low fuel level sensor signal from the low fuel level sensor via a discrete interface to a remote data interface unit in the IMA system, and another interface directly to the cockpit multifunction display 106 without passing through the IMA system. In another embodiment of the invention, the low fuel level sensor signal is transmitted to the remote data interface unit and the cockpit multifunction display via a hardwired or bus connection.

[0040] In one embodiment of the invention, the low fuel level sensor signal transmitted to the remote data interface unit is used only to logically trigger the fuel quantity measurement indication system to execute a low fuel level alarm signal when no common-mode failure occurs in the Integrated Module Avionics (IMA) system. The low fuel level sensor signal directly transmitted to the cockpit multifunction display 106 (from the low fuel level sensor 102 and directly transmitted to the cockpit multifunction display 106 via the low fuel level signal concentrator 104, without passing through the IMA system / network) is used only for displaying low fuel level information executed by the low fuel level measurement indication system on the EICAS page of the cockpit multifunction display 106. Thus, in this invention, the signal sources of the fuel quantity measurement indication system and the low fuel level measurement indication system are independent and dissimilar, and their signal transmission links are independent and dissimilar, avoiding the risk of common-mode failure between fuel quantity and low fuel level measurement indications.

[0041] In another embodiment of the invention, before transmitting the low oil level sensor signal from the low oil level sensor 102 to the remote data interface unit in the IMA system and the cockpit multifunction display 106, the low oil level signal concentrator 104 can also be used to condition and convert the low oil level sensor signal.

[0042] In one embodiment of the present invention, one low fuel level signal concentrator 104 may be arranged in each outer wing fuel tank. However, the present invention is not limited to arranging one low fuel level signal concentrator 104 in each outer wing fuel tank, but any suitable number of low fuel level signal concentrators 104 may be arranged as needed.

[0043] In one embodiment of the invention, the cockpit multifunction display 106 receives data directly transmitted to it (by...). Figure 1 The low oil level signal concentrator 104 transmits the signal directly to the cockpit multifunction display 106, without going through the low oil level sensor signal of the IMA network / system, for displaying the low oil level information on its EICAS page.

[0044] In one embodiment of the invention, the low fuel level information is only displayed on the EICAS page of the cockpit multifunction display 106 when a fuel quantity indication error caused by a common mode failure of the IMA network / system and a loss of low fuel level alarm are triggered simultaneously, and the received low fuel level information is true.

[0045] In one embodiment of the invention, the low oil level sensor signal, which is directly transmitted to the cockpit multifunction display 106, is used only for the low oil level measurement indication system to display the low oil level information on the EICAS page of the cockpit multifunction display 106.

[0046] This increases the usability and completeness of the functionality without interfering with pilot judgment, aligning with the design principles of cockpit crew warning displays. Furthermore, the low fuel level signal link (such as...) directly connects to the cockpit multifunction display 106. Figure 1 As shown, the low fuel level signal link includes a signal link directly connecting the low fuel level sensor 102 to the cockpit multifunction display 106 via the low fuel level signal concentrator 104. It is completely independent of the IMA network / system. Therefore, a common mode failure of the IMA network / system (a common mode failure of the remote data interface unit in the IMA network) will not cause the "low fuel level indication" function to fail, thus preventing the catastrophic event of "incorrect fuel level indication and loss of low fuel level warning indication function". This further improves flight safety.

[0047] Figure 2 This is a schematic diagram of a low fuel level display according to an embodiment of the present disclosure. The low fuel level information is displayed on the EICAS page of the cockpit multifunction display 106 only when a common-mode failure caused by an IMA network / system (specifically, a remote data interface unit associated with the IMA network / system) is detected, resulting in a fuel quantity indication error and a low fuel level alarm loss, and the low fuel level information received by the cockpit multifunction display 106 is true. Figure 2As shown, below the fuel level indicator on the left (right) wing, a different color (such as amber) of the character "LOW" is displayed (this is just an example and not limited to this expression) to remind the pilot that the aircraft's fuel level is low. As those skilled in the art will understand, the pilot can be reminded of a low fuel level in any other suitable manner, and not limited to... Figure 2 As shown in the diagram.

[0048] In one embodiment of the present invention, when the IMA system / network is in normal condition, Figure 2 The low fuel level display function is disabled. The low fuel level indicator will only be displayed on the cockpit EICAS page if the fuel level display for the left (right) wing tank is incorrect and low fuel level information from the IMA system is lost, and if the low fuel level information from the display for the left (right) wing tank is true. See below for detailed logic. Figure 3 describe.

[0049] Figure 3 A flowchart of a method for independent and dissimilar low oil level measurement indication according to an embodiment of the present disclosure is shown. The method is transmitted via a low oil level measurement indication system (such as...) according to an embodiment of the present disclosure. Figure 1 (As shown) to be performed. In another embodiment of the invention, the method may also involve both the low fuel level measurement indication system and the fuel quantity measurement indication system.

[0050] like Figure 3 As shown, the method begins at step 302.

[0051] In step 302, it is determined whether the IMA system has malfunctioned. In one embodiment of the invention, the IMA system may include... Figure 1 The diagram shows the IMA network and its associated remote data interface unit. In one embodiment of the invention, determining whether an IMA system malfunction has occurred includes determining whether an IMA common-mode failure has occurred.

[0052] If a failure of the IMA system is determined in decision block 302, the method then proceeds to step 304. In step 304, it is determined whether a fuel level indication error and a low fuel level alarm loss are triggered simultaneously. In one embodiment of the invention, a fuel level indication error may include an incorrect fuel level display in the left (right) wing fuel tank, and a low fuel level alarm loss may include the loss of low fuel level information from the left (right) wing fuel tank from the IMA system. In another embodiment of the invention, the fuel level indication error and the low fuel level alarm loss may be caused by a common-mode failure of the IMA, specifically by a common-mode failure of the remote data interface unit in the IMA system.

[0053] If decision box 304 determines that a fuel level indication error and a low fuel level alarm loss are triggered simultaneously, the method then proceeds to step 306. In step 306, it is determined whether the low fuel level information from the low fuel level sensor and transmitted directly to the cockpit multifunction display via the low fuel level signal concentrator is true. In one embodiment of the invention, low fuel level sensors are arranged in each outer wing fuel tank (two or any other suitable number of low fuel level sensors are arranged in each outer wing fuel tank), and the low fuel level information is transmitted by the low fuel level signal concentrator arranged in each outer wing fuel tank via a low fuel level sensor signal to the remote data interface unit (RTU), and another path directly to the cockpit multifunction display without going through the IMA system. The low fuel level sensor signal directly transmitted to the cockpit multifunction display is used only for displaying the low fuel level information on the EICAS page, as performed by the low fuel level measurement indication system.

[0054] If decision box 306 determines whether the low fuel level information is true, the method then proceeds to step 308. In step 308, the low fuel level information is displayed on the EICAS page of the cockpit multifunction display. Thus, the low fuel level information is only displayed on the EICAS page of the cockpit multifunction display when a fuel level indication error caused by a common-mode failure of the IMA network / system and a loss of low fuel level alarm are simultaneously triggered, and the low fuel level information received by the cockpit multifunction display is true.

[0055] In another embodiment of the invention, optionally, if it is determined at decision block 302 that the IMA system has not failed, the method continues to step 310. In step 310, the aircraft warning system determines whether to issue a low fuel level warning. In one embodiment of the invention, the low fuel level warning is executed based on a low fuel level sensor signal transmitted to the remote data interface unit. This low fuel level sensor signal is used only to logically trigger the low fuel level warning signal executed by the fuel quantity measurement indication system in the absence of a common-mode failure of the remote data interface unit.

[0056] If it is determined in decision box 310 that a low oil level alarm should be triggered, the method continues to step 312. In step 312, a low oil level alarm message is triggered and the display of the low oil level message on the EICAS page is suppressed.

[0057] In summary, this invention proposes an independent and dissimilar fuel level measurement and indication system and method, which can avoid catastrophic events related to the fuel system caused by common mode failure of the IMA system, making the aircraft fuel system safer and more reliable.

[0058] The embodiments of the present invention have been described above with reference to block diagrams and / or operational descriptions of methods, systems, and computer program products according to embodiments of the present invention. The functions / actions indicated in the blocks may appear in a different order than shown in any flowchart. For example, depending on the functions / actions involved, two blocks shown consecutively may actually be executed substantially simultaneously, or these blocks may sometimes be executed in reverse order.

[0059] The above description is merely a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A system for independent, non-similar low oil level measurement indication, the system comprising: A low fuel level sensor is arranged in each outer wing fuel tank, and the low fuel level sensor is configured to send a low fuel level sensor signal containing low fuel level information. A low fuel level signal concentrator is arranged in each outer wing fuel tank. The low fuel level signal concentrator is configured to transmit the low fuel level sensor signal through a discrete interface to the remote data interface unit in the integrated modular avionics system (IMA) system, and to transmit it directly to the cockpit multifunction display without going through the IMA system. as well as The cockpit multifunction display receives the low fuel level sensor signal directly transmitted to it, wherein the cockpit multifunction display is configured to display the low fuel level information on its EICAS page based on the low fuel level sensor signal directly transmitted to it when a fuel quantity indication error and low fuel level alarm loss caused by a common mode failure of the IMA are simultaneously triggered and the low fuel level information is true.

2. The system of claim 1, wherein the low oil level sensor employs a non-capacitive principle, and two of the low oil level sensors are arranged in each outer wing fuel tank.

3. The system of claim 1, wherein one of the low fuel level signal concentrators is arranged in each outer wing fuel tank.

4. The system of claim 1, wherein the low oil level signal concentrator is further used for conditioning and data conversion of the low oil level sensor signal.

5. The system of claim 1, wherein the low oil level sensor signal is transmitted to the remote data interface unit and the cockpit multifunction display via a hardwire or bus.

6. The system of claim 1, wherein the low fuel level sensor signal transmitted to the remote data interface unit is used only for the logical triggering of a low fuel level alarm signal executed by the fuel quantity measurement indication system in the absence of a common-mode failure of the remote data interface unit, and wherein the low fuel level sensor signal transmitted directly to the cockpit multifunction display is used only for the display of the low fuel level information on the EICAS page.

7. A method for independent, dissimilar low fuel level measurement indication, the method being performed via a low fuel level measurement indication system, the low fuel level measurement indication system including a low fuel level sensor, a low fuel level signal concentrator, and a cockpit multifunction display, the method comprising: Determine if the IMA system has malfunctioned; In the event of a malfunction in the IMA system, determine whether a fuel quantity indication error and a low fuel level alarm loss are triggered simultaneously. In the event that both fuel level indication error and low fuel level alarm loss are triggered simultaneously, determine whether the low fuel level information from the low fuel level sensor and transmitted directly to the cockpit multifunction display via the low fuel level signal concentrator is true. as well as If the low fuel level information is true, the low fuel level information will be displayed on the EICAS page of the cockpit multifunction display. The low fuel level sensor is located in each outer wing fuel tank, and the low fuel level information is transmitted from the low fuel level signal concentrator located in each outer wing fuel tank to the remote data interface unit via the low fuel level sensor signal, and to the cockpit multifunction display via another signal without passing through the IMA system.

8. The method of claim 7, further comprising, in the absence of a malfunction in the IMA system, a logical triggering of a low fuel level alarm signal by the fuel quantity measurement indication system, including: The fuel quantity measurement and indication system determines whether to issue a low fuel level alarm. If it is determined that a low oil level alarm should be triggered, a low oil level alarm message is sent. as well as Suppress the display of the low oil level information on the EICAS page.

9. The method of claim 8, wherein the IMA system includes a remote data interface unit, and the failure of the IMA system includes a common-mode failure of the remote data interface unit, the common-mode failure causing the fuel quantity indication error and the loss of the low fuel level alarm.

10. The method of claim 9, wherein: The low fuel level sensor signal transmitted to the remote data interface unit is used only for the fuel quantity measurement indication system to logically trigger the low fuel level alarm signal, and the low fuel level sensor signal transmitted directly to the cockpit multifunction display is used only for the display of the low fuel level information executed by the low fuel level measurement indication system on the EICAS page.

11. A computer-readable storage medium storing instructions for performing the method as described in any one of claims 7-10.

Images