A protection module against accidental explosion

Abstract

The present invention discloses an anti-misfire protection module for preventing the safety and control device of a carrier rocket from misfire, comprising: an A / D sampling circuit for collecting and measuring the voltage of the detonation preparation output terminal and the detonation output terminal of the safety and control device. A protection logic circuit electrically connected to the A / D sampling circuit and the safety and control logic module of the safety and control device, respectively, for receiving signals from the A / D sampling circuit and the safety and control logic module and performing protection operations, and outputting a detonation circuit breaker control signal when it is determined that there is a hidden danger of misfire. A protection decision circuit for receiving the detonation circuit breaker control signal and driving the protection switch array to disconnect. A protection switch array electrically connected to the detonation output terminal and the detonator of the safety and control device, respectively, is controlled by the protection decision circuit to cut off the detonation output terminal and the detonator to prevent the safety and control device from misfire. It has excellent integration and can effectively improve the safety and reliability of the safety and control device by controlling the on and off of the detonation path.

Description

Technical Field

[0001] The present invention belongs to the field of launch vehicle safety and control, and in particular relates to an anti-accidental explosion protection module. Background Art

[0002] Launch vehicle failures can occur during flight. To prevent crashes that could threaten the lives and property of personnel on the ground or land in foreign territorial waters or airspace, potentially leading to technical breaches and international disputes, my country's launch vehicles are equipped with safety and control products within their external safety and measurement systems. During flight, these safety and control products maintain a safety and control range within which they are permitted to operate. If a remote-controlled command to destroy the rocket is received, it is immediately executed, sending a detonation voltage to the detonator to destroy the malfunctioning rocket. If an attitude instability command is received from the control system, the detonation voltage is then output to the detonator after a specified delay, implementing safety and control measures.

[0003] Therefore, the safety of safety control products is paramount. A false output of detonation voltage can result in serious consequences, including rocket destruction and loss of life. Traditional design approaches rely on triple redundancy within the safety control logic subcircuit. This means that a detonation control signal is only sent to the back-end detonation execution circuit when at least two of the three safety control logic subcircuits are outputting detonation control signals. However, this traditional approach fails to monitor the detonation execution circuit. Failures in the safety control decision circuit or a short circuit in the detonation path can still lead to an inadvertent rocket explosion.

[0004] Currently, no description or report of similar technology to the present invention has been found, and similar information at home and abroad has not been collected. Summary of the Invention

[0005] The technical purpose of the present invention is to provide an anti-accidental explosion protection module to solve the technical problem of accidental explosion of the security and control device of the carrier rocket.

[0006] In order to solve the above problems, the technical solution of the present invention is:

[0007] A protection module against accidental explosion, used to prevent accidental explosion of a launch vehicle's security and control device, comprising:

[0008] A / D sampling circuit, protection logic circuit, protection decision circuit and protection switch array;

[0009] The A / D sampling circuit is used to collect and measure the voltage of the detonation preparation output terminal and the detonation output terminal of the security control device;

[0010] The protection logic circuit is electrically connected to the A / D sampling circuit and the safety control logic module of the safety control device, and is used to receive signals from the A / D sampling circuit and the safety control logic module and perform protection operations. When it is determined that there is a hidden danger of accidental explosion, it outputs a detonation circuit breaker control signal;

[0011] The protection decision circuit is used to receive the detonation circuit breaker control signal and drive the protection switch array to disconnect;

[0012] The two ends of the protection switch array are electrically connected to the detonation output end and the detonator of the security control device respectively, and are controlled by the protection judgment circuit to cut off the detonation output end and the detonator to prevent the security control device from accidentally exploding.

[0013] Specifically, the A / D sampling circuit includes three redundant circuits, namely a first A / D sub-sampling circuit, a second A / D sub-sampling circuit and a third A / D sub-sampling circuit;

[0014] The first A / D sub-sampling circuit, the second A / D sub-sampling circuit, and the third A / D sub-sampling circuit each include:

[0015] An optocoupler isolator, used to isolate the voltage signal received at the detonation preparation output terminal or the detonation output terminal;

[0016] Operational amplifier devices, used for impedance matching and signal amplification;

[0017] Multi-channel analog switch, used for switching sampling channels;

[0018] The A / D converter is used to convert the analog voltage at the detonation preparation output terminal or the detonation output terminal into a digital value.

[0019] Specifically, the protection logic circuit includes three redundant circuits, namely a first protection logic sub-circuit, a second protection logic sub-circuit and a third protection logic sub-circuit;

[0020] The first protection logic sub-circuit, the second protection logic sub-circuit, and the third protection logic sub-circuit each include:

[0021] The field programmable gate array device is used to control the corresponding A / D sampling sub-circuit, alternately sample the voltages at the detonation preparation output terminal and the detonation output terminal, and also collect the detonation preparation control signal and detonation control signal output by the three redundant safety and control logic sub-circuits of the safety and control logic module, and determine whether to output the detonation circuit breaker control signal through the protection algorithm.

[0022] Specifically, when any protection logic sub-circuit receives that at least two security control logic sub-circuits do not output the detonation preparation control signal, and samples the voltage of the detonation preparation output terminal for 500 μs continuously, it outputs the detonation circuit breaker control signal;

[0023] Alternatively, when any protection logic sub-circuit receives that at least two security control logic sub-circuits do not output the detonation control signal and samples the voltage at the detonation output terminal for 500 μs continuously, it outputs the detonation circuit breaker control signal.

[0024] Specifically, the protection decision circuit includes three redundant circuits, namely a first protection decision sub-circuit, a second protection decision sub-circuit and a third protection decision sub-circuit;

[0025] The first protection decision sub-circuit, the second protection decision sub-circuit and the third protection decision sub-circuit each include an electromagnetic relay coil package, which is used to drive the corresponding relay contacts in the protection switch array to perform an action when a valid detonation circuit breaker control signal is received. Each electromagnetic relay includes two groups of contacts.

[0026] Specifically, the protection switch array includes three protection sub-circuits arranged in parallel; each protection sub-circuit is provided with two switches in series, and these two switches are a set of contacts corresponding to the two electromagnetic relays in the protection decision circuit. That is, each protection decision sub-circuit can drive two corresponding switches located on the two protection sub-circuits;

[0027] It is used to disconnect all three protection sub-circuits when at least two protection judgment sub-circuits receive valid output detonation circuit-breaking control signals, thereby preventing accidental explosions.

[0028] Due to the adoption of the above technical solution, the present invention has the following advantages and positive effects compared with the prior art:

[0029] The present invention can be directly installed in a security control device, achieving a high level of integration. By collecting the output signals of the three redundant security control logic subcircuits in the security control logic module and sampling the voltages at the detonation preparation output and detonation output terminals, the protection algorithm controls the on / off state of the protection switch array, thereby controlling the on / off state of the detonation path. This effectively improves the safety and reliability of the security control device. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Various other advantages and benefits will become apparent to those skilled in the art by reading the following detailed description of the preferred embodiment.The accompanying drawings are only for the purpose of illustrating the preferred embodiment and are not to be considered as limiting the present invention.

[0031] Figure 1 This is a structural diagram of an anti-accidental explosion protection module of the present invention. DETAILED DESCRIPTION

[0032] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the specific embodiments of the present invention will be described below with reference to the accompanying drawings. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings and other embodiments can be obtained based on these drawings without inventive work.

[0033] To simplify the drawings, only the parts relevant to the present invention are schematically shown in each figure. They do not represent the actual structure of the product. Furthermore, to simplify the drawings and facilitate understanding, in some figures, only one of the components with the same structure or function is schematically depicted or labeled. As used herein, "one" not only means "only one" but also "more than one."

[0034] The following is a detailed description of the protection module against accidental explosions proposed by the present invention in conjunction with the accompanying drawings and specific embodiments. The advantages and features of the present invention will become more apparent from the following description and claims.

[0035] Example

[0036] See Figure 1 This embodiment provides a protection module to prevent accidental explosion of the safety and control device of the carrier rocket. Figure 1 The lower half is a principle block diagram of this embodiment. In order to more clearly describe the embodiment of the present invention, Figure 1 The upper part includes the principle block diagram of the security control logic module and the detonation execution module of the security control device.

[0037] Conventional safety and control devices consist solely of a safety and control logic module and a detonation execution module. Within the safety and control logic module, three redundant safety and control logic subcircuits respond to external safety and control signals, independently outputting their own detonation preparation control signals and detonation signals to the safety and control decision circuit. When at least two detonation preparation control signals are output, the safety and control decision circuit outputs a detonation preparation control voltage to the detonation execution module, closing the first of two series switches in the detonation path. When at least two detonation control signals are output, the safety and control decision circuit outputs a detonation control voltage to the detonation execution module, closing the second of two series switches in the detonation path. Therefore, when both series switches in the detonation path are closed, the detonation voltage is output through the detonation path to the external detonator, causing it to detonate. This embodiment, however, connects the safety and control logic subcircuit, the safety and control decision circuit, and the detonator.

[0038] Specifically, this embodiment includes: an A / D sampling circuit, a protection logic circuit, a protection decision circuit, and a protection switch array.

[0039] The A / D sampling circuit is used to collect and measure voltages at the security control device's ready-to-fire output and detonation output. Specifically, the A / D sampling circuit includes three redundant circuits: a first A / D sub-sampling circuit, a second A / D sub-sampling circuit, and a third A / D sub-sampling circuit. Each A / D sub-sampling circuit includes an optocoupler isolator for isolating the voltage signal received from the ready-to-fire output or the detonation output; an operational amplifier for impedance matching and signal amplification; a multi-way analog switch for switching sampling paths; and an A / D converter for converting the analog voltage from the ready-to-fire output or the detonation output into a digital value.

[0040] The protection logic circuit is electrically connected to the A / D sampling circuit and the safety control logic module of the safety control device respectively, and is used to receive signals from the A / D sampling circuit and the safety control logic module and perform protection operations. When it is determined that there is a hidden danger of accidental explosion, it outputs a detonation circuit breaker control signal.

[0041] Specifically, the protection logic circuit includes three redundant circuits: a first protection logic sub-circuit, a second protection logic sub-circuit, and a third protection logic sub-circuit. The first protection logic sub-circuit is signal-connected to the first A / D sub-sampling circuit, and the remaining sub-circuits are similarly connected. Each logic sub-circuit includes a field programmable gate array device that controls the corresponding A / D sampling sub-circuit, alternately sampling the voltages at the detonation preparation output terminal and the detonation output terminal. It also collects the detonation preparation control signals and detonation control signals output by the three redundant safety and control logic sub-circuits of the safety and control logic module, and uses the protection algorithm to determine whether to output a detonation disconnection control signal.

[0042] Specifically, when any protection logic sub-circuit receives that at least two security control logic sub-circuits do not output the detonation preparation control signal, and the voltage of the detonation preparation output terminal is sampled continuously for 500μs, it outputs the detonation circuit breaker control signal; or, when any protection logic sub-circuit receives that at least two security control logic sub-circuits do not output the detonation control signal, and the voltage of the detonation output terminal is sampled continuously for 500μs, it outputs the detonation circuit breaker control signal.

[0043] The protection decision circuit receives a trigger trip control signal and drives the protection switch array to disconnect. Specifically, the protection decision circuit comprises three redundant circuits: a first protection decision subcircuit, a second protection decision subcircuit, and a third protection decision subcircuit. The first protection decision subcircuit is signal-connected to the first protection logic subcircuit, and the remaining subcircuits function similarly. Each protection decision subcircuit includes an electromagnetic relay coil. Upon receiving a valid trigger trip control signal, it drives the corresponding relay contacts in the protection switch array to disconnect. Each electromagnetic relay includes two sets of contacts.

[0044] The two ends of the protection switch array are electrically connected to the detonation output terminal and the detonator of the security control device, respectively. Controlled by a protection decision circuit, the detonation output terminal and the detonator are disconnected to prevent accidental explosions of the security control device. Specifically, the protection switch array includes three protection sub-circuits arranged in parallel; each protection sub-circuit is equipped with two switches connected in series. These two switches are a set of contacts contained in each of the two electromagnetic relays in the protection decision circuit. In other words, each protection decision sub-circuit can drive two corresponding switches located in two protection sub-circuits. When at least two protection decision sub-circuits receive a valid output detonation disconnect control signal, all three protection sub-circuits are disconnected, preventing accidental explosions. The specific principle is as follows.

[0045] See Figure 1 In the protection switch array, switch 1 (the first set of contacts of the electromagnetic relay in the first protection decision subcircuit) and switch 2 (the first set of contacts of the electromagnetic relay in the second protection decision subcircuit) are connected in series, switch 2 (the second set of contacts of the electromagnetic relay in the second protection decision subcircuit) and switch 3 (the first set of contacts of the electromagnetic relay in the third protection decision subcircuit) are connected in series, and switch 1 (the second set of contacts of the electromagnetic relay in the first protection decision subcircuit) and switch 3 (the second set of contacts of the electromagnetic relay in the third protection decision subcircuit) are connected in series. The three series-connected protection subcircuits are connected in parallel and installed at the end of the detonation path, forming the final switch of the detonator. Each protection subcircuit is in the on state by default. When at least two relay coils in the protection decision circuit receive a valid detonation disconnect control signal, at least one normally closed contact switch in each of the three parallel protection subcircuits opens, disconnecting the detonation voltage from the external detonator, thereby providing protection against accidental explosions.

[0046] The embodiments of the present invention have been described in detail above with reference to the accompanying drawings, but the present invention is not limited to the above embodiments. Even if various changes are made to the present invention, if these changes fall within the scope of the claims of the present invention and their equivalents, they still fall within the scope of protection of the present invention.

Claims

1. A protection module against accidental explosion, used to prevent accidental explosion of the safety and control device of a carrier rocket, characterized in that: include: A / D sampling circuit, protection logic circuit, protection decision circuit and protection switch array; The A / D sampling circuit is used to collect and measure the voltage of the detonation preparation output terminal and the detonation output terminal of the security control device; The protection logic circuit is electrically connected to the A / D sampling circuit and the safety control logic module of the safety control device, respectively, and is used to receive signals from the A / D sampling circuit and the safety control logic module and perform protection operations, and output a detonation circuit breaker control signal when it is determined that there is a risk of accidental explosion; The protection decision circuit is used to receive the detonation circuit breaker control signal and drive the protection switch array to disconnect; The two ends of the protection switch array are electrically connected to the detonation output end and the detonator of the security control device respectively, and are controlled by the protection judgment circuit to cut off the detonation output end and the detonator to prevent the security control device from accidentally exploding; Wherein, the A / D sampling circuit includes three redundant circuits, namely a first A / D sub-sampling circuit, a second A / D sub-sampling circuit and a third A / D sub-sampling circuit; The first A / D sub-sampling circuit, the second A / D sub-sampling circuit, and the third A / D sub-sampling circuit each include: an optical coupling isolator, configured to isolate the voltage signal received from the detonation preparation output terminal or the detonation output terminal; Operational amplifier devices, used for impedance matching and signal amplification; Multi-channel analog switch, used for switching sampling channels; An A / D converter device is used to convert the analog voltage of the detonation preparation output terminal or the detonation output terminal into a digital value; The protection logic circuit includes three redundant circuits, namely a first protection logic sub-circuit, a second protection logic sub-circuit and a third protection logic sub-circuit; The first protection logic sub-circuit, the second protection logic sub-circuit, and the third protection logic sub-circuit each include: A field programmable gate array device is used to control the corresponding A / D sampling sub-circuit, alternately sample the voltages of the detonation preparation output terminal and the detonation output terminal, and also collect the detonation preparation control signal and the detonation control signal output by the three redundant safety control logic sub-circuits of the safety control logic module, and determine whether to output the detonation circuit breaker control signal through a protection algorithm.

2. The protection module against accidental explosion according to claim 1, characterized in that: When any protection logic sub-circuit receives at least two of the security control logic sub-circuits that do not output the detonation preparation control signal for 500 consecutive times, Sampling the voltage of the detonation preparation output terminal, and outputting the detonation circuit breaker control signal; Alternatively, when any protection logic sub-circuit receives at least two of the security control logic sub-circuits that do not output the detonation control signal for 500 consecutive times, The voltage at the detonation output terminal is sampled and the detonation circuit breaker control signal is output.

3. The protection module against accidental explosion according to claim 2, characterized in that: The protection decision circuit includes three redundant circuits, namely a first protection decision sub-circuit, a second protection decision sub-circuit and a third protection decision sub-circuit; The first protection decision sub-circuit, the second protection decision sub-circuit and the third protection decision sub-circuit each include an electromagnetic relay coil, which is used to drive the corresponding relay contacts in the protection switch array to perform an action when receiving a valid detonation circuit breaker control signal. Each electromagnetic relay includes two groups of contacts.

4. The protection module against accidental explosion according to claim 3, characterized in that: The protection switch array includes three protection sub-circuits arranged in parallel; each protection sub-circuit is provided with two switches in series, and these two switches are a set of contacts corresponding to the two electromagnetic relays in the protection decision circuit, that is, each protection decision sub-circuit can drive two corresponding switches located on the two protection sub-circuits; When at least two protection judgment sub-circuits receive a valid detonation circuit-breaking control signal, all three protection sub-circuits are disconnected, thereby preventing accidental explosions.

Images