A dual-redundancy key-destruction triggering device

Abstract

The present invention provides a dual-redundancy key-destruction triggering device, which includes a detection and control circuit. The input end of the detection and control circuit is connected to a power supply, and the output end is respectively connected to a time control circuit and a signal output circuit. The output end of the time control circuit is connected to the signal output circuit, and the output end of the signal output circuit is connected to a key-destruction control device. When the acceleration reaches the key-destruction triggering condition, the detection and control circuit provides power for the time control circuit and the signal output circuit, and outputs a control signal CON to the time control circuit. When the signal output circuit has a power input, the signal output circuit outputs a GND1 signal. When the signal output circuit receives the control signal CON output by the time control circuit, it outputs a GND2 signal. When the key-destruction device receives both the GND1 signal and the GND2 signal simultaneously, it outputs a large current. The dual-redundancy key-destruction triggering device of the present invention can not only ensure the timely triggering of the key-destruction device, but also ensure the high security of the key-destruction device.

Description

Technical Field

[0001] The present invention relates to the field of avionics technology, and particularly to a dual-redundancy key-destruction triggering device. Background Art

[0002] A certain type of inertial control device belongs to the avionics system of a certain type of aircraft, and can realize the detection, judgment and key-destruction triggering of external acceleration. When receiving a sufficiently large impact acceleration, it outputs a key-destruction triggering signal. Due to the different characteristics of on-board electronic devices, it is only possible to destroy the electronic device with a very large current. Therefore, the key-destruction triggering signal must ensure both high safety and high reliability. Currently, the common method is to adopt a single or multiple determination method. When it is detected that a certain determination condition is met, only one triggering signal is output to trigger the key-destruction device to output a very large current. The main existing problems are that after the detection and determination meet the triggering conditions, switch-like devices are mostly used to indicate that the triggering conditions are met. However, switch-like devices have limitations such as mis-triggering and switch jitter closing, which are prone to causing the output of the triggering signal. At the same time, only one triggering signal is output. During the transmission to the key-destruction device, due to the complex electromagnetic characteristics of on-board devices, it is easily affected by external interference, and there is a risk of accidentally triggering the key-destruction current. Moreover, there is a single-point failure in the triggering circuit, and only the reliability of all devices in the circuit can be improved to ensure the high-reliability requirements of the circuit. Summary of the Invention

[0003] In view of this, the embodiments of the present application provide a dual-redundancy key-destruction triggering device, which adopts long-time detection of the switch closing signal, has anti-mis-triggering and anti-jitter functions, outputs two triggering signals, and only when the key-destruction device receives the two triggering signals, will it output the key-destruction current. And the triggering signal is output in a dual-redundancy manner to ensure that there is no single-point failure in the circuit, can safely and timely output the key-destruction triggering signal, and effectively improve the reliability and safety of the traditional key-destruction triggering device.

[0004] The embodiments of the present application provide the following technical solutions: A dual-redundancy key-destruction triggering device includes a detection and control circuit. The input end of the detection and control circuit is connected to a power supply, and the output end is respectively connected to a time control circuit and a signal output circuit. The output end of the time control circuit is connected to the signal output circuit, and the output end of the signal output circuit is connected to a key-destruction control device;

[0005] The detection and control circuit detects the external acceleration of the aircraft in real time. When the acceleration reaches the key-destruction triggering condition, the detection and control circuit provides power for the time control circuit and the signal output circuit, and at the same time, after logically converting the detection result, outputs a control signal CON to the time control circuit;

[0006] The time control circuit includes a charging circuit and a storage element. When there is a power input to the time control circuit, the charging circuit charges the storage element to control the voltage rising time across the storage element. When the voltage across the storage element reaches the voltage value of the control signal CON, the time control circuit sends the control signal CON to the signal output circuit;

[0007] When there is a power input to the signal output circuit, the signal output circuit outputs a GND1 signal to the key destruction control device; when the signal output circuit receives the control signal CON, it outputs a GND2 signal to the key destruction control device; when the key driving device receives both the GND1 signal and the GND2 signal simultaneously, it outputs a large current to destroy the keys of the on-board electronic devices.

[0008] According to an implementation manner of an embodiment of the present application, the detection control circuit includes a switch and a detection circuit. One end of the switch is connected to the power supply, and the other end is connected to the time control circuit and the signal output circuit; when the acceleration reaches the key destruction trigger condition, the external acceleration detection control end of the aircraft controls the switch to close, and the power supply enters the time control circuit and the signal output circuit respectively; the detection circuit is used to determine the closed state of the switch. After comparing the difference between the switch determination result and the sampling reference source, the output signal is logically converted and then a control signal CON is output to the time control circuit.

[0009] According to an implementation manner of an embodiment of the present application, it further includes a power supply protection circuit. The input end of the power supply protection circuit is connected to the on-board DC power supply, and the output end is connected to the input end of the detection control circuit, which is used to provide protection for the DC power supply and then supply power and a sampling reference source to the detection control circuit.

[0010] According to an implementation manner of an embodiment of the present application, the power supply protection circuit includes an inverse connection protection unit, a spike suppression unit, an overvoltage protection unit, an electrostatic protection unit, and a power conversion unit.

[0011] According to an implementation manner of an embodiment of the present application, the signal output circuit includes a voltage dividing resistor, a first MOS transistor, and a second MOS transistor. One end of the voltage dividing resistor is connected to the switch, and the other end is connected to the first MOS transistor. When the switch is closed, the power supply is divided by the voltage dividing resistor to turn on the first MOS transistor and output the GND1 signal; the second MOS transistor is connected to the control signal CON output end of the time control circuit to turn on the second MOS transistor and output the GND2 signal.

[0012] According to an implementation manner of an embodiment of the present application, both the first MOS transistor and the second MOS transistor are N-channel MOS transistors.

[0013] According to an implementation manner of an embodiment of the present application, the charging circuit includes a diode V5, a diode V6, a resistor R7, a resistor R9, a resistor R8, and a triode V7, and the energy storage element includes a capacitor C3 and a voltage stabilizing diode V13; after the switch is closed, the power supply enters the time control circuit; the power supply is connected to the anode of the diode V5 and one end of the resistor R8, the cathode of the diode V5 is connected to the anode of the diode V6, the cathode of the diode V6 is connected to the base of the triode V7 and one end of the resistor R7, the other end of the resistor R8 is connected to the emitter of the triode V7, and the collector of the triode V7 is connected to one end of the resistor R9; the control signal CON output by the detection control circuit is connected to the other end of the resistor R9, one end of the capacitor C3, and the cathode of the voltage stabilizing diode V13, and then enters the signal output circuit; the power supply ground GND is connected to the other end of the resistor R7, the other end of the capacitor C3, and the anode of the voltage stabilizing diode V13.

[0014] Currently, in the field of avionics, a single relay is mostly used to output a large current to destroy equipment. By controlling the positive or negative end of the relay to output a large current, there is a single-point failure, and it is impossible to ensure both high reliability and a certain degree of safety at the same time. Compared with the prior art, the beneficial effects that can be achieved by at least one of the above technical solutions adopted in the embodiments of this specification at least include: The embodiments of the present invention adopt a dual-redundancy discrimination and anti-mis-triggering method, which can effectively improve the safety of the key-destruction trigger device. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required to be used in the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0016] Figure 1 It is a principle block diagram of a dual-redundancy key-destruction trigger device according to an embodiment of the present invention;

[0017] Figure 2 It is a principle block diagram of a detection control circuit according to an embodiment of the present invention;

[0018] Figure 3 It is an example application diagram of a detection control circuit according to an embodiment of the present invention;

[0019] Figure 4 It is a principle block diagram of a time control circuit according to an embodiment of the present invention;

[0020] Figure 5 It is an example application diagram of a time control circuit according to an embodiment of the present invention;

[0021] Figure 6It is an example application diagram of the power protection circuit according to an embodiment of the present invention;

[0022] Figure 7 It is an example application diagram of the signal output circuit according to an embodiment of the present invention. Detailed implementation manners

[0023] The embodiments of the present application will be described in detail below with reference to the accompanying drawings.

[0024] It should be noted that, without conflict, the embodiments in the present application and the features in the embodiments may be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in conjunction with the embodiments. The technical solutions of the present invention are clearly and completely described. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0025] As Figure 1 shown, an embodiment of the present invention provides a dual-redundancy key-destruction trigger device, including a detection and control circuit. The input end of the detection and control circuit is connected to a power supply, and the output end is respectively connected to a time control circuit and a signal output circuit. The output end of the time control circuit is connected to the signal output circuit, and the output end of the signal output circuit is connected to a key-destruction control device;

[0026] The detection and control circuit detects the external acceleration of the aircraft in real time. When the acceleration reaches the key-destruction trigger condition, the detection and control circuit provides power for the time control circuit and the signal output circuit, and at the same time, after logical conversion of the detection result, outputs a control signal CON to the time control circuit;

[0027] The time control circuit includes a charging circuit and a storage element. When the time control circuit has a power input, the charging circuit charges the storage element to control the voltage rising time at both ends of the storage element. When the voltage at both ends of the storage element reaches the voltage value of the control signal CON, the time control circuit sends the control signal CON to the signal output circuit;

[0028] When the signal output circuit has a power input, the signal output circuit outputs a GND1 signal to the key-destruction control device; when the signal output circuit receives the control signal CON, it outputs a GND2 signal to the key-destruction control device; when the key-destruction driving device receives both the GND1 signal and the GND2 signal at the same time, it outputs a large current to destroy the key of the on-board electronic equipment.

[0029] It further includes a power protection circuit. The input end of the power protection circuit is connected to the on-board DC power supply, and the output end is connected to the input end of the detection and control circuit, which is used to provide power supply and sampling reference source for the detection and control circuit after protecting the DC power supply.

[0030] A dual-redundancy key-destruction trigger device of the present invention includes a power protection circuit, a detection and control circuit, a time control circuit, and a signal output circuit. The power protection circuit provides reverse connection protection, spike suppression, overvoltage protection, electrostatic protection, and power conversion for the key-destruction trigger device; the detection and control circuit detects whether the key-destruction condition is met; the time control circuit prevents the key-destruction condition from being accidentally triggered; the signal output circuit outputs a "ground" signal to drive the key-destruction device to output a large current. This key-destruction trigger device is installed in the inertial control equipment of a certain type of aircraft, near the exit of the external control interface, and provides a trigger signal for the key-destruction device.

[0031] As Figure 1 shown, the dual-redundancy key-destruction trigger device protects the 28V DC power supply on the aircraft through the power protection circuit and provides power supply and sampling reference source for the detection and control circuit; the detection and control circuit detects the switch situation in real time. When the acceleration reaches the key-destruction trigger requirement, the K1 switch closes. When the acceleration does not reach the key-destruction trigger requirement, the K1 switch remains open. The detection and control circuit outputs "ground" or "12V" through the detection circuit according to the closed or open state of the K1 switch. The CON signal after logic conversion is "floating" or "ground". When the K1 switch closes, the control signal CON is "floating". When the CON signal is "floating", it enters the time control circuit. The 12V power supply starts to charge the energy storage element through the charging circuit. As the voltage across the energy storage element continuously rises, the output voltage reaches the turn-on voltage of the MOS transistor after a certain time, and finally the MOS transistor conducts, outputting the GND2 signal. At the same time, when the K1 switch closes, the 12V power supply passes through the switch K1 and is divided by resistors to make the MOS transistor conduct, outputting the GND1 signal. After the two ground signals enter the key-destruction control device, the key-destruction device can output a large current to destroy the key of the on-board electronic equipment. Therefore, the time control circuit can simply, reliably, and effectively control the conduction time of the MOS transistor, thus avoiding switch misoperation and jitter. The two output GND1 and GND2 trigger signals are common-ground with the on-board shield ground, and have strong anti-interference ability. Due to the setting of dual-redundancy discrimination, a single-point failure of the device will not cause GND1 and GND2 to be triggered simultaneously. Therefore, the circuit used in the present invention has no single-point failure, effectively improving the reliability of the circuit.

[0032] The described detection control circuit includes a switch and a detection circuit, specifically a detection control circuit composed of a comparator, a sampling resistor, a zener diode, or a reference source, etc. One end of the switch is connected to the power supply, and the other end is connected to the time control circuit and the signal output circuit; when the acceleration reaches the key-destruction trigger condition, the external acceleration detection control terminal of the aircraft controls the switch to close, and the power supply enters the time control circuit and the signal output circuit respectively; the detection circuit is used to determine the closing state of the switch. After comparing the difference between the switch determination result and the sampling reference source, the output signal is logically converted and then a control signal CON is output to the time control circuit.

[0033] As Figure 2 shown, when the protected 12V power supply enters the detection control circuit, it is connected to one end of switch K1, and at the same time provides a sampling reference source for the detection circuit, and continuously detects whether switch K1 is closed. If switch K1 is closed, the other end of the switch will immediately send the determination result to the detection circuit, and at the same time send the 12V power supply to the time control circuit. The detection circuit compares the difference between the switch determination result and the sampling reference source, and after the output signal is logically converted, the final control signal CON is output. The detection control circuit can quickly detect whether the external acceleration sensor meets the requirements and quickly make conditional changes to control the subsequent circuit to start working.

[0034] In one embodiment, as Figure 3 shown, the detection control circuit consists of switch K1, current-limiting resistor R3, voltage-dividing resistor R4, voltage-dividing resistor R5, comparator N1, capacitor C2, zener diode V4, pull-up resistor R6, and N-channel MOS transistor V8. Among them, the 12V power supply is connected to pin 1 of switch K1, one end of resistor R3, one end of resistor R6, one end of capacitor C2, and pin 8 of comparator N1. The other end of resistor R3 is connected to the cathode of zener diode V4 and pin 3 of comparator N1. Pin 2 of switch K1 is connected to one end of voltage-dividing resistor R4 and enters the time control circuit and the signal output circuit. The other end of R4 is connected to pin 2 of comparator K1 and one end of voltage-dividing resistor R5. The other end of pull-up resistor R6 is connected to pin 1 of comparator N1 and the gate of the N-channel MOS transistor. Pin 7 of the comparator N1 is left floating. The power supply ground GND is connected to the anode of zener diode V4, the other end of voltage-dividing resistor R5, pin 4 of comparator N1, pin 5 of comparator N1, pin 6 of comparator N1, and the source of N-channel MOS transistor V8. The drain of the N-channel MOS transistor V8 outputs the control signal CON and enters the time control circuit and the signal output circuit.

[0035] The time control circuit is composed of a circuit using resistors, diodes, PNP-type transistors, etc., which outputs a constant current. The devices used are simple and reliable. At the same time, by judging the number of times through time control, it can effectively avoid the serious consequences caused by the mis-triggering of the sensor, thereby improving the safety of the device. For example, Figure 4 As shown, when the switch K1 is turned on and closed, the 12V power supply charges the energy storage element through the charging circuit. The charging method can adopt constant voltage charging, constant current charging or constant power charging to charge the energy storage element, and control the rising time of the voltage across the energy storage element, so as to achieve the voltage value of the control signal CON and send the CON signal to the signal output circuit.

[0036] In one embodiment, as Figure 5 shown, the charging circuit includes diodes V5, V6, resistors R7, R9, R8, and transistor V7, and the energy storage element includes capacitor C3 and zener diode V13; when the switch is closed, the power supply enters the time control circuit; the power supply is connected to the anode of diode V5 and one end of resistor R8, the cathode of diode V5 is connected to the anode of diode V6, the cathode of diode V6 is connected to the base of transistor V7 and one end of resistor R7, the other end of resistor R8 is connected to the emitter of transistor V7, and the collector of transistor V7 is connected to one end of resistor R9; the control signal CON output by the detection control circuit is connected to the other end of resistor R9, one end of capacitor C3, and the cathode of zener diode V13, and then enters the signal output circuit; the power supply ground GND is connected to the other end of resistor R7, the other end of capacitor C3, and the anode of zener diode V13.

[0037] The power supply protection circuit is composed of a power supply conversion circuit using diodes, zener diodes, NPN-type transistors, etc., which can effectively protect the devices at the back end, and the functions of the devices used are single and the reliability is relatively high.

[0038] In one embodiment, as Figure 6As shown in the figure, the power protection circuit consists of an anti-reverse diode V1, a transient suppression diode V12, a current-limiting resistor R13, a current-limiting resistor R14, an NPN transistor V3, a voltage-regulating diode V2, a capacitor C1, and a capacitor C4. The 28V DC power supply input by the aircraft and the 28V power supply ground enter X4 and X5 through the jacks respectively, and the 28VIN power supply and the power supply ground GND are output from the jacks. The 28VIN power supply is connected to the anode of the diode V1 and one end of the transient suppression diode V12. The other end of the transient suppression diode V12 is connected to the power supply ground GND and one end of the capacitor C4. The other end of the capacitor C4 is connected to the housing of the device. The cathode of the diode V1 is connected to one end of the current-limiting resistor R13 and the collector of the NPN transistor V3. The other end of the current-limiting resistor R13 is connected to one end of the current-limiting resistor R14. The other end of the current-limiting resistor R14 is connected to the cathode of the voltage-regulating diode and the base of the NPN transistor. After the emitter of the NPN transistor is connected to one end of the capacitor C1, a stable 12V power supply is output. The other end of the capacitor C1 and the anode of the voltage-regulating diode V2 are connected to the power supply ground GND.

[0039] The signal output circuit is composed of a circuit formed by resistors, N-channel MOS transistors, etc. The circuit is simple and reliable. At the same time, a dual-redundant output method is adopted, which can effectively avoid the key-destruction trigger signal output by a single-point circuit failure, greatly improving the safety of the device.

[0040] In one embodiment, as Figure 7 shown, the signal output circuit consists of an N-channel MOS transistor V10, an N-channel MOS transistor V11, a resistor R10, and a resistor R11. After K1 is closed, the 12V power supply enters the signal output circuit through the 2nd pin of K1. The 12V power supply is connected to one end of the resistor R10. The other end of the resistor R10 is connected to one end of the resistor R11 and the gate of the N-channel MOS transistor V10. The control signal CON is connected to the gate of the N-channel MOS transistor V11. The source of the N-channel MOS transistor V10 is connected to the drain of the N-channel MOS transistor V11 and outputs the GND2 signal. The power supply ground GND signal is connected to the other end of the resistor R11 and the source of the N-channel MOS transistor V11. The drain of the N-channel MOS transistor V10 outputs the GND1 signal.

[0041] The above is only the specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by those skilled in the art within the technical scope disclosed in the present application should be covered by the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A dual-redundancy key-destruction triggering device, characterized in that, It includes a detection control circuit. The input end of the detection control circuit is connected to a power supply, and the output end is respectively connected to a time control circuit and a signal output circuit. The output end of the time control circuit is connected to the signal output circuit, and the output end of the signal output circuit is connected to a key destruction control device; The detection control circuit detects the external acceleration of the aircraft in real time. When the acceleration reaches the key destruction trigger condition, the detection control circuit provides power for the time control circuit and the signal output circuit, and at the same time, after logical conversion of the detection result, outputs a control signal CON to the time control circuit; The time control circuit includes a charging circuit and an energy storage element. When the time control circuit has a power input, the charging circuit charges the energy storage element and controls the voltage rise time at both ends of the energy storage element. When the voltage at both ends of the energy storage element reaches the voltage value of the control signal CON, the time control circuit sends the control signal CON to the signal output circuit; When the signal output circuit has a power input, the signal output circuit outputs a GND1 signal to the key destruction control device; when the signal output circuit receives the control signal CON, it outputs a GND2 signal to the key destruction control device; when the key destruction device receives both the GND1 signal and the GND2 signal at the same time, it outputs a large current to destroy the key of the on-board electronic equipment.

2. The dual-redundancy key-destruction triggering device according to claim 1, wherein The detection control circuit includes a switch and a detection circuit. One end of the switch is connected to the power supply, and the other end is connected to the time control circuit and the signal output circuit; when the acceleration reaches the key destruction trigger condition, the external acceleration detection control end of the aircraft controls the switch to close, and the power supply enters the time control circuit and the signal output circuit respectively; the detection circuit is used to determine the closed state of the switch. After comparing the difference between the switch determination result and the sampling reference source, the output signal is logically converted and then a control signal CON is output to the time control circuit.

3. The dual-redundancy key-destruction triggering device according to claim 1, characterized in that, It further includes a power protection circuit. The input end of the power protection circuit is connected to the on-board DC power supply, and the output end is connected to the input end of the detection control circuit, which is used to provide protection for the DC power supply and then provide power supply and sampling reference source for the detection control circuit.

4. The dual-redundancy key destruction trigger device according to claim 3, wherein The power protection circuit includes an anti-reverse connection protection unit, a spike suppression unit, an overvoltage protection unit, an electrostatic protection unit and a power conversion unit.

5. The double-redundancy key-destruction triggering device according to claim 2, wherein The signal output circuit includes a voltage dividing resistor, a first MOS transistor and a second MOS transistor. One end of the voltage dividing resistor is connected to the switch, and the other end is connected to the first MOS transistor. When the switch closes, the power supply is divided by the voltage dividing resistor, making the first MOS transistor conduct and output the GND1 signal; the second MOS transistor is connected to the control signal CON output end of the time control circuit, making the second MOS transistor conduct and output the GND2 signal.

6. The dual-redundancy key destruction triggering device according to claim 5, wherein, Both the first MOS transistor and the second MOS transistor are N-channel MOS transistors.

7. The dual-redundancy key-destruction triggering device according to claim 2, wherein The charging circuit includes diode V5, diode V6, resistor R7, resistor R9, resistor R8, and triode V7. The energy storage element includes capacitor C3 and voltage regulator diode V13. After the switch is closed, the power supply enters the time control circuit. The power supply is connected to the anode of diode V5 and one end of resistor R8. The cathode of diode V5 is connected to the anode of diode V6. The cathode of diode V6 is connected to the base of triode V7 and one end of resistor R7. The other end of resistor R8 is connected to the emitter of triode V7. The collector of triode V7 is connected to one end of resistor R9. The control signal CON output by the detection control circuit is connected to the other end of resistor R9, one end of capacitor C3, and the cathode of voltage regulator diode V13, and then enters the signal output circuit. The power supply ground GND is connected to the other end of resistor R7, the other end of capacitor C3, and the anode of voltage regulator diode V13.

Images