Dual-redundancy electromechanical management system

Abstract

The double-redundancy electromechanical management system belongs to the technical field of aviation electromechanics, and comprises a first electromechanical management computer and a second electromechanical management computer, wherein the first electromechanical management computer and the second electromechanical management computer respectively comprise a first master control module and a second master control module; when the first master control module is normally working, the first power drive module preferentially executes a first instruction transmitted by the first master control module, and when the first master control module is faulty, the first power drive module executes an instruction of the second master control module; when the second master control module is normally working, the second power drive module preferentially executes a second instruction transmitted by the second master control module, and when the second master control module is faulty, the second power drive module executes an instruction of the first master control module, so that the system fault tolerance is improved.

Description

Technical Field

[0001] This invention belongs to the technical field of aviation electromechanical systems, and particularly relates to a dual-redundant electromechanical management system. Background Technology

[0002] Aircraft electromechanical systems are critical systems for ensuring the normal operation of aircraft systems and the safety of crew members. These include, but are not limited to, hydraulic actuation systems, fuel systems, environmental control and life-saving systems, power and distribution systems, takeoff and landing systems, APU systems, and other systems. Airborne electromechanical integration technology enables the integrated control and management of airborne electromechanical systems, changing the fragmented approach, reducing aircraft weight, and comprehensively improving aircraft safety, reliability, and maintainability. As a core component of electromechanical integration, the electromechanical management system (EMS) can collect signal parameters and status information from various aircraft electronic systems in real time, performing functions such as EMS control and integrated management, EMS alarm management, and enabling data exchange between the EMS and other onboard systems. Because the EMS has a significant impact on the overall functionality of the EMS, it typically employs a redundancy design, containing two or more EMS management computers. However, existing dual-redundancy EMS systems often suffer from the problem that if the main control module of a single EMS management computer fails, that computer completely loses its functionality, resulting in poor system fault tolerance and low reliability.

[0003] In view of this, the present invention is hereby proposed. Summary of the Invention

[0004] The purpose of this invention is to provide a dual-redundant electromechanical management system, which at least solves the technical problem of poor fault tolerance in existing methods. The technical solution of this invention has many beneficial effects, as described below:

[0005] A dual-redundant electromechanical management system is provided, which is suitable for data processing of airborne electromechanical management systems. It includes a first electromechanical management computer and a second electromechanical management computer. The first electromechanical management computer includes a first power supply module, a first main control module, a first switch analog signal acquisition module, a first bus switch, and a first power drive module. The first power supply module provides power to each module as an electrical energy output.

[0006] The second electromechanical management computer includes a second power supply module, a second main control module, a second switch analog signal acquisition module, a second bus switch, and a second power drive module. The second power supply module provides power to all modules as an output power source. The second bus switch serves as a hot backup for the first bus switch, converting signals before inputting them to the first and second main control modules.

[0007] The first electromechanical management computer and the second electromechanical management computer receive data transmitted by the electromechanical management system through the RapidIO bus, and also interact with each other through the RapidIO bus.

[0008] When the first main control module is working normally, the first power drive module prioritizes executing the first instruction transmitted by the first main control module, and when the first main control module reports a fault, the first power drive module executes the instruction of the second main control module.

[0009] When the second main control module is working normally, the second power drive module prioritizes executing the second instruction transmitted by the second main control module, and when the second main control module reports a fault, the second power drive module executes the instruction of the first main control module.

[0010] Compared with the prior art, the technical solution provided by the present invention has the following beneficial effects:

[0011] The device provided in this case solves the problem of complete loss of computer functionality due to the failure of the main control module in a single electromechanical management computer, thereby improving the system's fault tolerance and reliability. By constructing a dual-redundant data interaction network and a dual-redundant backup data and command transmission network, the electromechanical management system can prevent the complete loss of the computer's data acquisition and power drive functions in the event of a failure of the main control module of a single electromechanical management computer, thus improving the fault tolerance and reliability of the electromechanical management system. Attached Figure Description

[0012] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0013] Figure 1 This is a schematic diagram of the RapidIO bus network interconnection of the dual-redundant electromechanical management system of the present invention;

[0014] Figure 2 This is a schematic diagram of the system structure of the present invention;

[0015] Figure 3 This is a schematic diagram of the CAN bus network interconnection of the dual-redundant electromechanical management system of the present invention. Detailed Implementation

[0016] The following specific examples illustrate the implementation of the present invention. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present invention, and not all of them. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that, in the absence of conflict, the following embodiments and features in the embodiments can be combined with each other. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.

[0017] It should be noted that various aspects of embodiments within the scope of the appended claims are described below. It will be apparent that the aspects described herein can be embodied in a wide variety of forms, and any particular structure and / or function described herein is merely illustrative. Based on this invention, those skilled in the art will understand that one aspect described herein can be implemented independently of any other aspect, and two or more of these aspects can be combined in various ways. For example, any number of aspects set forth herein can be used to implement the device and / or practice the method. Additionally, this device and / or method can be implemented using structures and / or functionalities other than one or more of the aspects set forth herein.

[0018] It should also be noted that the illustrations provided in the following embodiments are only schematic representations of the basic concept of the present invention. The drawings only show the components related to the present invention and are not drawn according to the actual number, shape and size of the components in the actual implementation. In the actual implementation, the form, quantity and proportion of each component can be arbitrarily changed, and the layout of the components may also be more complex.

[0019] Furthermore, specific details are provided in the following description to facilitate a thorough understanding of the examples. However, those skilled in the art will understand that aspects can be practiced without these specific details. To enable those skilled in the art to better understand the invention, the invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. The terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Thus, features defined as "first" and "second" may explicitly or implicitly include one or more of that feature. In the description of the invention, unless otherwise stated, "a plurality of" means two or more.

[0020] like Figure 1The dual-redundant electromechanical management system shown is suitable for data processing in airborne electromechanical management systems. The electromechanical management system collects parameters from the onboard electromechanical system, including:

[0021] The first electromechanical management computer and the second electromechanical management computer, the first electromechanical management computer includes a first power supply module, a first main control module, a first switch analog signal acquisition module, a first bus switch and a first power drive module, the first power supply module as the power output to supply power to each module;

[0022] The second electromechanical management computer includes a second power supply module, a second main control module, a second switch analog signal acquisition module, a second bus switch, and a second power drive module. The second power supply module provides power to all modules as an output power source. The second bus switch serves as a hot backup for the first bus switch, converting signals before inputting them to the first main control module.

[0023] The first electromechanical management computer and the second electromechanical management computer receive data transmitted by the electromechanical management system through the RapidIO bus, and also interact with each other through the RapidIO bus.

[0024] When the first main control module is working normally, the first power drive module executes the first instruction transmitted by the first main control module first, and when the first main control module reports a fault, the first power drive module executes the instruction of the second main control module.

[0025] When the second main control module is working normally, the second power drive module prioritizes executing the second instruction transmitted by the second main control module, and when the second main control module reports a fault, the second power drive module executes the instruction of the first main control module.

[0026] The first and second electromechanical management computers form a dual-redundant system. For example, the first electromechanical management computer serves as the main computer, and the second electromechanical management computer serves as an auxiliary computing unit. By constructing a dual-redundant data interaction network and a dual-redundant backup data and instruction transmission network, the electromechanical management system can ensure that the acquisition and power drive functions of the computer are not completely lost in the event of a failure of a single electromechanical management computing main control module, thereby improving the fault tolerance and reliability of the electromechanical management system.

[0027] Both the first and second main control modules are configured with output execution command priorities. The first and second power drive modules receive commands from either the first or second main control module to control the onboard equipment. The first and second power drive modules execute command responses according to command priority. This priority comparison can be performed using a traditional judgment module. Specifically:

[0028] The first and second switch analog signal acquisition modules can acquire analog signals from the airborne electromechanical management system switches (including the switching status of the fuel system, hydraulic system, and engine system, etc.), and input them to the first and second main control modules through the first and second bus switches. The first and second bus switches are hot backups of each other to avoid single-point failure caused by the failure of one switch, and to ensure that data can be input to the first and second main control modules in real time.

[0029] RapidIO data network redundancy is achieved through the first bus switch and the second bus switch.

[0030] As a specific implementation method provided in this case, it also includes a first remote interface device and a second remote interface device. The remote interface devices are equipped with some auxiliary equipment, such as an aircraft door opening and closing system. Specifically,

[0031] The first remote interface device includes a first interface power module with power output, a first remote switch analog signal acquisition module and a first remote power drive module. The first interface power module provides working power to the first remote switch analog signal acquisition module and the first remote power drive module.

[0032] The second remote interface device includes a second interface power supply module for power output, a second remote switch analog signal acquisition module, and a second remote power drive module. The second interface power supply module provides operating power to the second remote switch analog signal acquisition module and the second remote power drive module, wherein:

[0033] The first remote interface device and the second remote interface device are connected to the RapidIO bus to interact with the first main control module and the second main control module.

[0034] The first remote switch analog signal acquisition module and the second remote switch analog signal acquisition module acquire analog signals of the switching of airborne auxiliary equipment; the first remote power drive module and the second remote power drive module control the airborne auxiliary equipment.

[0035] When the first main control module is working normally, the first remote power drive module prioritizes executing or responding to the third instruction sent by the first main control module, and when the first main control module reports a fault, the first remote power drive module executes the instruction of the second main control module.

[0036] When the second main control module is working normally, the second remote power drive module prioritizes executing the fourth instruction sent by the second main control module. When the second main control module reports a fault, the second remote power drive module executes the instructions from the first main control module. This improves the overall response efficiency of the auxiliary system. When the first main control module fails, it responds to the instructions from the second main control module. It should be noted that both main control modules can acquire all data in real time and allocate instruction sending based on priority settings.

[0037] Furthermore, it also includes using a CAN network bus as a backup for the RapidIO bus, and through the CAN network bus, only the data acquired by the first switch analog signal acquisition module, the second switch analog signal acquisition module, the first remote switch analog signal acquisition module, and the second remote switch analog signal acquisition module are transmitted to the first main control module and the second main control module, such as... Figure 3 As shown, neither is connected to the two switches. The RapidIO bus has a large data transmission capacity and high efficiency, but compared to the CAN network, it is more prone to particle jumps that can cause failures. When both the main and backup RapidIO data networks fail, the first and second main control modules can obtain data from the first switch analog signal acquisition module, the second switch analog signal acquisition module, the first remote switch analog signal acquisition module, and the second remote switch analog signal acquisition module through the CAN network bus. This ensures the safe operation of critical equipment in the airborne auxiliary system and airborne electromechanical management system, such as ensuring the normal operation of the landing gear control system. In other words, the CAN bus, as the last backup network, only transmits switch and analog signals. These signal data volumes are relatively small, which can ensure the control functions of critical equipment such as the landing gear control system.

[0038] like Figure 1 As shown, the two RapidIO switch modules in electromechanical management computer A and electromechanical management computer B constitute two redundant RapidIO bus networks A (RA) and RapidIO bus network B (RB). The main control modules in both electromechanical management computer A and electromechanical management computer B can obtain data from all RapidIO nodes of the electromechanical management system through RA.

[0039] When the RA fails, the main control modules in both electromechanical management computer A and electromechanical management computer B can obtain data from all RapidIO nodes of the electromechanical management system through the RB. Electromechanical management computer A, electromechanical management computer B, and the remote interface device can achieve backup communication of switch analog data and power drive control command communication via the CAN bus, such as... Figure 3The main control module of the electromechanical management computer A shown can directly obtain switch simulation data collected by electromechanical management computer B, remote interface device 1, and remote interface device 2 through CA, and directly control the power drive modules of electromechanical management computer B, remote interface device 1, and remote interface device 2 to perform power drive output through CA. Simultaneously, the main control module of electromechanical management computer B can also directly obtain switch simulation data collected by electromechanical management computer A, remote interface device 1, and remote interface device 2 through CA, and directly control the power drive modules of electromechanical management computer B, remote interface device 1, and remote interface device 2 to perform power drive output through CA. When CA fails, the above operations can also be performed through CB. The power drive modules of electromechanical management computer A, electromechanical management computer B, remote interface device 1, and remote interface device 2 can all receive power drive output commands from electromechanical management computer A and electromechanical management computer B through CA or CB, and select which to execute based on command priority.

[0040] The product provided by this invention has been described in detail above. Specific examples have been used to illustrate the principles and implementation methods of this invention. The descriptions of the embodiments above are merely for the purpose of helping to understand the core ideas of this invention. It should be noted that those skilled in the art can make various improvements and modifications to the invention without departing from the principles of the invention, and these improvements and modifications also fall within the protection scope of the invention claims.

Claims

1. A dual-redundant electromechanical management system, applicable to data processing in airborne electromechanical management systems, characterized in that, It includes a first electromechanical management computer and a second electromechanical management computer. The first electromechanical management computer includes a first power module, a first main control module, a first switch analog signal acquisition module, a first bus switch, and a first power drive module. The first power module provides power to each module as an electrical energy output. The second electromechanical management computer includes a second power supply module, a second main control module, a second switch analog signal acquisition module, a second bus switch, and a second power drive module. The second power supply module provides power to all modules as an output power source. The second bus switch serves as a hot backup for the first bus switch, converting signals before inputting them to the first and second main control modules. The first electromechanical management computer and the second electromechanical management computer receive data transmitted by the electromechanical management system through the RapidIO bus, and also interact with each other through the RapidIO bus. When the first main control module is working normally, the first power drive module prioritizes executing the first instruction transmitted by the first main control module, and when the first main control module reports a fault, the first power drive module executes the instruction of the second main control module. When the second main control module is working normally, the second power drive module prioritizes executing the second instruction transmitted by the second main control module, and when the second main control module reports a fault, the second power drive module executes the instruction of the first main control module; The first and second switch analog signal acquisition modules can acquire analog signals from the airborne electromechanical management system switches and convert them into signals before inputting them to the first and second main control modules. The first and second bus switches are hot backups of each other to avoid single-point failures caused by the failure of one switch, ensuring that data can be input to the first and second main control modules in real time. RapidIO data network redundancy is achieved through the first and second bus switches. It also includes a first remote interface device and a second remote interface device. The first remote interface device includes a first interface power module with power output, a first remote switch analog signal acquisition module, and a first remote power drive module. The first interface power module provides operating power to the first remote switch analog signal acquisition module and the first remote power drive module. The second remote interface device includes a second interface power module with power output, a second remote switch analog signal acquisition module, and a second remote power drive module. The second interface power module provides operating power to the second remote switch analog signal acquisition module and the second remote power drive module. Wherein: The first and second remote interface devices are connected to the RapidIO bus to interact with the first and second main control modules. The first and second remote switch analog signal acquisition modules acquire analog signals of the on / off switching of the airborne auxiliary equipment. The first and second remote power drive modules control the airborne auxiliary equipment. When the first main control module is working normally, the first remote power drive module prioritizes executing or responding to the third instruction sent by the first main control module. When the first main control module reports a fault, the first remote power drive module executes the instruction of the second main control module. When the second main control module is working normally, the second remote power drive module prioritizes executing the fourth instruction sent by the second main control module. When the second main control module reports a fault, the second remote power drive module executes the instruction of the first main control module.

2. The dual-redundant electromechanical management system according to claim 1, characterized in that, Both the first main control module and the second main control module are configured with priority for outputting execution instructions. The first power drive module and the second power drive module receive instructions from the first main control module or the second main control module to control the equipment on the machine.

3. The dual-redundant electromechanical management system according to claim 2, characterized in that, It also includes using the CAN network bus as a backup for the RapidIO bus, and transmitting the data acquired by the first switch analog signal acquisition module, the second switch analog signal acquisition module, the first remote switch analog signal acquisition module, and the second remote switch analog signal acquisition module to the first main control module and the second main control module via the CAN network bus to ensure the safe operation of critical equipment on board.

Images