A critical electrical load control system and redundant control strategy

Abstract

The present invention discloses a critical electrical load control system and a redundant control strategy. The critical electrical load control system is composed of an integrated management device and an electrical load distribution device. The control strategy is a redundant control strategy for critical electrical loads by an electrical load distribution system composed of an integrated management device and an electrical load distribution device. The control strategy is that the electrical load distribution system adopts a remote bus communication mode under normal circumstances, uses a control chip to control the output of hard-wired discrete quantity signals under emergency circumstances, and uses a manual switch to directly control the output of hard-wired discrete quantity signals under emergency circumstances. The electrical load distribution system can be switched between three control modes: normal, emergency and emergency. The present invention is applicable to the aviation field, and realizes redundant control of critical electrical loads through multiple methods such as remote bus communication, chip control of discrete quantity output, and manual control of discrete quantity output, thereby improving the reliability of the aircraft power distribution network.

Description

Technical Field

[0001] The present invention relates to an aviation power distribution system, belonging to the field of power distribution systems and load control, and specifically to a key electrical load control system and a redundant control strategy. Background Art

[0002] The power distribution system of more-electric aircraft is an important development direction of modern aircraft. It unifies various energy forms in traditional aircraft into electrical energy, and comprehensively controls and manages the electrical load distribution device and electrical load equipment through the integrated management device, realizing the comprehensive integration of the power distribution system in terms of control, function, energy and physics. Fault tolerance, reconstruction and recovery, and power distribution management technology are important means to improve the reliability and automation of the all-electric system.

[0003] As more and more aircraft use more electric aircraft power distribution systems, more and more critical load equipment on aircraft are also undergoing electrification upgrades. Since most of the aircraft's critical load equipment affects flight safety, it is critical to have redundant control over it.

[0004] CN112363534A A kind of unmanned aerial vehicle flight control redundancy control method for preemptive operating system

[0005] The present invention belongs to the technical field of unmanned aerial vehicle flight control system, and discloses a unmanned aerial vehicle flight control redundancy control method for preemptive operating system. First, it is necessary to prepare hardware and software. The hardware part includes dual CPUs, two IO ports for handshake, serial communication for data interaction between dual CPUs, dual storage, and underlying data transceiver module, where the main CPU is defined as CPUA and the backup is defined as CPUB. The software part includes a series of complete flight control programs such as priority-based preemptive embedded systems, such as μC / OS-II, domestic Tianmai system, integrated development environment, loading tools, unmanned helicopter flight control program, control law solution module, navigation and guidance module, instruction and status transceiver module, automatic driving, emergency return, etc.

[0006] CN112858771A, CN112858771B A kind of unmanned aerial vehicle emergency control system

[0007] The present invention discloses an emergency control system for unmanned aerial vehicles, which includes an unmanned aerial vehicle power system, a power module, and an unmanned aerial vehicle status monitoring module. The unmanned aerial vehicle power system includes a motor and a propeller. The unmanned aerial vehicle status monitoring module is used to monitor the operating status of the aircraft in real time. A system control unit is used to adjust the operating posture and flight requirements of the unmanned aerial vehicle. A parachute module. A power control unit is connected between the unmanned aerial vehicle power system and the power module, and the power control unit is used to cut off the power signal of the unmanned aerial vehicle power system when the unmanned aerial vehicle is in an emergency state. And a power self-locking unit, which is used to monitor the power control unit to achieve power self-locking of the unmanned aerial vehicle power system. The present invention realizes the control shutdown and self-locking of the power system through software logic and hardware circuits, avoids the parachute from being entangled in the propeller, and ensures the success rate of the parachute opening of the parachute system.

[0008] CN205103647U An electrical module and an intelligent integrated control device based on the electrical module

[0009] The utility model discloses an electrical module and an intelligent integrated control device based on the electrical module, including an electrical execution component and a monitoring and control processing component, wherein the electrical execution component is connected to the monitoring and control processing component through a line, and the monitoring and control processing component outputs a control signal to the electrical execution component. The utility model discloses an electrical module and an intelligent integrated control device based on the electrical module, wherein the electrical modules realize mutual information exchange through a communication network. The utility model discloses an intelligent integrated control system based on the electrical module, which is used for intelligent integrated monitoring of process equipment such as water pumps, fans, air conditioners, and lighting lamps.

[0010] There are three patents related to the present invention. The first one is the redundant design of the flight control system, focusing on the control strategy of the interaction and switching of the dual CPU control chip; the second one is the emergency control system of the UAV, focusing on the control shutdown and self-locking of the power system through software logic and hardware circuits to ensure the success rate of the parachute system. The third one is the design of the intelligent integrated control device, focusing on the introduction of which modules the device is composed of. The contents of the three patents are very different from the present invention, and the protection aspects are also different. Summary of the invention

[0011] The object of the present invention is to provide a critical electrical load control system and a redundant control strategy to improve the reliability of an electrical load power distribution system of an aircraft.

[0012] Technical Solution

[0013] The purpose of the present invention can be achieved by the following technical solutions:

[0014] A key electrical load control system consists of an integrated management device and an electrical load distribution device.

[0015] It is characterized in that the integrated management device includes a main control module, a bus communication module, a discrete quantity output module and a manual switch. The main control module is connected to the bus communication module to realize the sending and receiving of communication data. The main control module is connected to the chip-controlled discrete quantity output module in the discrete quantity output module to output emergency enable signals and emergency control signals. The manual switch is connected to the manual control discrete quantity output module in the discrete quantity output module to output manual enable signals and manual control signals. The main control module is not connected to the manual switch to ensure that control instructions can be issued through the manual switch even when the main control module is damaged.

[0016] The invention is characterized in that the electrical load power distribution device comprises a main control module, a CPLD control module, a bus communication module, a discrete quantity acquisition module and an electrical load control module. The main control module is connected to the bus communication module for realizing the sending and receiving of communication data. The main control module is connected to the CPLD control module for outputting control commands parsed from the bus data. The discrete quantity acquisition module is connected to the CPLD control module for identifying and outputting emergency control commands or manual control commands. The CPLD control module is connected to the electrical load control module for outputting the final control signal to each key electrical load after the logic strategy is judged.

[0017] It is characterized in that the processors in the main control modules of the integrated management device and the electrical load distribution device include but are not limited to the use of DSP, ARM, and single-chip microcomputer chips.

[0018] The invention is characterized in that the bus communication modules of the integrated management device and the electrical load distribution device both have a main and standby dual bus, both have sending and receiving functions, and both have the function of judging whether the other party's sending function is good by analyzing whether the information sent by the other party meets the communication standard. The bus form of the bus communication module includes but is not limited to RS422 communication bus, RS485 communication bus, RS232 communication bus, CAN communication bus, AFDX communication bus, and 1394 communication bus. The main and standby buses of the bus communication module can be the same bus form or different bus forms.

[0019] It is characterized in that the chip-controlled discrete output module and the manually controlled discrete output module of the discrete output module of the integrated management device are equipped with anti-shock circuits and filtering circuits to prevent external input fluctuations from damaging the chip-controlled discrete output module and the manually controlled discrete output module, affecting the control of key electrical loads at the back end, and increasing the effectiveness of the chip-controlled discrete output module and the manually controlled discrete output module.

[0020] The characteristic of the invention is that there is no electrical connection between the main control module and the electrical load control module, and control instructions can and can only be issued to the electrical load control module through the CPLD control module. This can avoid abnormal effects on the electrical load control module when an abnormality occurs in the main control module, thereby improving the reliability of the key electrical load control system.

[0021] The feature of the invention is that the CPLD control module of the electrical load distribution device has the function of receiving an emergency enable signal, and the emergency control signal command will be executed only when the emergency enable signal is valid.

[0022] The characteristic is that the CPLD control module of the electrical load distribution device has a manual enable signal receiving function, and the manual control signal command will be executed only when the manual enable signal is valid.

[0023] A critical electrical load redundancy control strategy, characterized in that the control strategy is as follows:

[0024] 1) When the main communication module of the integrated management device can receive communication information that complies with the communication standards sent by the electrical load distribution device, and the main communication module of the electrical load distribution device can receive communication information that complies with the communication standards from the integrated management device, the integrated management device and the electrical load distribution device use the main communication bus to control the key electrical loads.

[0025] 2) When the main communication module of the integrated management device cannot receive the communication information sent by the electrical load distribution device, or the received communication information does not meet the communication standards, the main communication module of the integrated management device will no longer send communication information, and the integrated management device and the electrical load distribution device will use the backup communication bus to control the key electrical loads.

[0026] 3) When the main communication module of the electrical load distribution device cannot receive the communication information sent by the integrated management device, or the received communication information does not meet the communication standards, the main communication module of the electrical load distribution device no longer sends communication information, and the integrated management device and the electrical load distribution device use the backup communication bus to control the key electrical loads.

[0027] 4) If it can be determined that the main communication modules of the integrated management device and the load distribution device have returned to normal, the integrated management device and the electrical load distribution device will return to using the main communication bus to control the key electrical loads.

[0028] 5) When both the primary and standby communication modules of the integrated management device cannot receive the communication information sent by the electrical load distribution device, or the received communication information does not meet the communication standards, the primary and standby communication modules of the integrated management device will no longer send communication information, and the integrated management device and the electrical load distribution device will use emergency override mode to control the critical electrical loads.

[0029] 6) When the main and standby communication modules of the electrical load distribution device cannot receive the communication information sent by the integrated management device, or the received communication information does not meet the communication standards, the main and standby communication modules of the electrical load distribution device no longer send communication information, then the integrated management device and the electrical load distribution device use emergency override mode to control the critical electrical loads.

[0030] 7) When the integrated management device determines that the main control chip of the electrical load distribution device cannot work normally, or it is necessary to override the bus communication method to control the critical load, the main and standby communication modules of the integrated management device will no longer send communication information, and the integrated management device and the electrical load distribution device will use the emergency override method to control the critical electrical load.

[0031] 8) If it can be determined that the backup communication modules of the integrated management device and the load distribution device have returned to normal, and the main control chip of the electrical load distribution device can work normally, and there is no need to override the bus communication method to control the critical loads, the integrated management device and the electrical load distribution device will return to using the backup communication bus method to control the critical electrical loads.

[0032] 9) When it can be determined that the main control chip of the integrated management device cannot work normally, or in any emergency situation, the integrated management device and the electrical load distribution device use manual override to control the critical electrical loads.

[0033] 10) When it can be determined that the main control chip of the integrated management device can work normally, or is not in an emergency situation, the integrated management device and the electrical load distribution device will revert to the emergency override mode to control the critical electrical loads.

[0034] Furthermore, the electrical load control includes four modes: 1) main communication bus mode, 2) backup communication bus mode, 3) emergency override mode, and 4) manual override mode.

[0035] Furthermore, among the four control modes of the electrical load control, the manual override mode has the highest priority, followed by the emergency override mode, then the main bus communication mode, and finally the standby bus communication mode.

[0036] Furthermore, the main communication bus mode is specifically:

[0037] The main control module of the integrated management device communicates with the electrical load distribution device through the main bus in the bus communication module and issues control instructions. After receiving and parsing the communication information through the main bus in the bus communication module, the main control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module.

[0038] Furthermore, the backup communication bus mode is specifically as follows:

[0039] The main control module of the integrated management device communicates with the electrical load distribution device through the backup bus in the bus communication module and issues control instructions. After receiving and parsing the communication information through the backup bus in the bus communication module, the main control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module.

[0040] Furthermore, the emergency override mode is specifically as follows:

[0041] The main control module of the integrated management device outputs the emergency enable signal and emergency control signal of the key electrical load to the electrical load distribution device through the discrete quantity output module. The CPLD control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module after identifying the emergency enable signal and emergency control signal collected by the discrete quantity acquisition module;

[0042] Furthermore, the manual override method is specifically as follows:

[0043] The discrete output module in the integrated management device is controlled by the manual switch to output the manual enable signal and manual control signal of the key electrical load to the electrical load distribution device; the CPLD control module of the electrical load distribution device identifies the manual enable signal and the manual control signal, and then outputs the control signal of the key electrical load to each key electrical load through the electrical load control module.

[0044] Technical Effects

[0045] The invention discloses an aircraft electrical load power distribution system and a key electrical load redundant control strategy, which are applied in the aviation field, and realize redundant control of key electrical loads through multiple control modes such as remote bus communication, chip control output discrete quantity and manual control output discrete quantity, and by formulating reasonable control logic.

[0046] The electrical load power distribution system in the present invention requires fewer basic functional modules and has simple internal interaction relationships, which can improve the stability of the system.

[0047] The control strategy in the present invention can switch between several control methods. If one of the control methods fails, it can automatically switch to other effective control methods, and automatically switch back after the failed control method is restored, so that resources can be fully utilized. At the same time, according to emergency situations, it can also directly switch to manual control mode to improve the timeliness of control commands. Redundant control of key electrical loads can also improve the reliability of the aircraft power distribution network.

[0048] The electrical load power distribution system and control strategy of the present invention can also be extended to the aerospace and automotive fields, and is suitable for designing redundant control strategies for critical loads. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 It is the principle block diagram of the key electrical load control system

[0050] Figure 2 This is a flow chart of the redundant control strategy for aircraft key electrical loads.

[0051] Among them: IMC: integrated management device, RPDU: electrical load distribution device, MB-T: main bus transmission, MB-R: main bus reception, BB-T: backup bus transmission, BB-R: backup bus reception DETAILED DESCRIPTION

[0052] The present invention is further described below in conjunction with embodiments. The following are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0053] The present invention is described in detail below with reference to the accompanying drawings and specific embodiments.

[0054] like Figure 1 As shown, a key electrical load control system consists of an integrated management device and an electrical load distribution device.

[0055] It is characterized in that the integrated management device at least includes a main control module, a bus communication module, a discrete quantity output module and a manual switch. The main control module is connected to the bus communication module to realize the sending and receiving of communication data. The main control module is connected to the chip-controlled discrete quantity output module in the discrete quantity output module to output emergency enable signals and emergency control signals. The manual switch is connected to the manual control discrete quantity output module in the discrete quantity output module to output manual enable signals and manual control signals. The main control module is not connected to the manual switch to ensure that control instructions can be issued through the manual switch even when the main control module is damaged.

[0056] It is characterized in that the electrical load power distribution device at least includes a main control module, a CPLD control module, a bus communication module and a discrete quantity acquisition module, and an electrical load control module. Among them, the main control module is connected to the bus communication module to realize the sending and receiving of communication data. The main control module is connected to the CPLD control module to output the control command parsed from the bus data. The discrete quantity acquisition module is connected to the CPLD control module to identify and output emergency control commands or manual control commands. The CPLD control module is connected to the electrical load control module to output the final control signal to each key electrical load after the logic strategy judgment.

[0057] It is characterized in that the processors in the main control modules of the integrated management device and the electrical load distribution device include but are not limited to the use of DSP, ARM, and single-chip microcomputer chips.

[0058] The invention is characterized in that the bus communication modules of the integrated management device and the electrical load distribution device both have a main and standby dual bus, both have sending and receiving functions, and both have the function of judging whether the other party's sending function is good by analyzing whether the information sent by the other party meets the communication standard. The bus form of the bus communication module includes but is not limited to RS422 communication bus, RS485 communication bus, RS232 communication bus, CAN communication bus, AFDX communication bus, and 1394 communication bus. The main and standby buses of the bus communication module can be the same bus form or different bus forms.

[0059] It is characterized in that the chip-controlled discrete output module and the manually controlled discrete output module of the discrete output module of the integrated management device are equipped with anti-shock circuits and filtering circuits to prevent external input fluctuations from damaging the chip-controlled discrete output module and the manually controlled discrete output module, affecting the control of key electrical loads at the back end, and increasing the effectiveness of the chip-controlled discrete output module and the manually controlled discrete output module.

[0060] The characteristic is that there is no electrical connection between the main control module and the electrical load control module, and control instructions can only be issued to the electrical load control module through the CPLD control module. This can avoid abnormal effects on the electrical load control module when an abnormality occurs in the main control module, thereby improving the reliability of the key electrical load control system.

[0061] The feature of the invention is that the CPLD control module of the electrical load distribution device has the function of receiving an emergency enable signal, and the emergency control signal command will be executed only when the emergency enable signal is valid.

[0062] The feature of the invention is that the CPLD control module of the electrical load distribution device has a manual enable signal receiving function, and the manual control signal command will be executed only when the emergency enable signal is valid.

[0063] like Figure 2 As shown, a critical electrical load redundancy control strategy is characterized in that the control strategy is as follows:

[0064] 1) When the main communication module of the integrated management device can receive communication information that complies with the communication standards sent by the electrical load distribution device, and the main communication module of the electrical load distribution device can receive communication information that complies with the communication standards from the integrated management device, the integrated management device and the electrical load distribution device use the main communication bus to control the key electrical loads.

[0065] 2) When the main communication module of the integrated management device cannot receive the communication information sent by the electrical load distribution device, or the received communication information does not meet the communication standards, the main communication module of the integrated management device will no longer send communication information, and the integrated management device and the electrical load distribution device will use the backup communication bus to control the key electrical loads.

[0066] 3) When the main communication module of the electrical load distribution device cannot receive the communication information sent by the integrated management device, or the received communication information does not meet the communication standards, the main communication module of the electrical load distribution device no longer sends communication information, and the integrated management device and the electrical load distribution device use the backup communication bus to control the key electrical loads.

[0067] 4) If it can be determined that the main communication modules of the integrated management device and the load distribution device have returned to normal, the integrated management device and the electrical load distribution device will return to using the main communication bus to control the key electrical loads.

[0068] 5) When both the primary and standby communication modules of the integrated management device cannot receive the communication information sent by the electrical load distribution device, or the received communication information does not meet the communication standards, the primary and standby communication modules of the integrated management device will no longer send communication information, and the integrated management device and the electrical load distribution device will use emergency override mode to control the critical electrical loads.

[0069] 6) When the main and standby communication modules of the electrical load distribution device cannot receive the communication information sent by the integrated management device, or the received communication information does not meet the communication standards, the main and standby communication modules of the electrical load distribution device no longer send communication information, then the integrated management device and the electrical load distribution device use emergency override mode to control the critical electrical loads.

[0070] 7) When the integrated management device determines that the main control chip of the electrical load distribution device cannot work normally, or it is necessary to override the bus communication method to control the critical load, the main and standby communication modules of the integrated management device will no longer send communication information, and the integrated management device and the electrical load distribution device will use the emergency override method to control the critical electrical load.

[0071] 8) If it can be determined that the backup communication modules of the integrated management device and the load distribution device have returned to normal, and the main control chip of the electrical load distribution device can work normally, and there is no need to override the bus communication method to control the critical loads, the integrated management device and the electrical load distribution device will return to using the backup communication bus method to control the critical electrical loads.

[0072] 9) When it can be determined that the main control chip of the integrated management device cannot work normally, or in any emergency situation, the integrated management device and the electrical load distribution device use manual override to control the critical electrical loads.

[0073] 10) When it can be determined that the main control chip of the integrated management device can work normally, or is not in an emergency situation, the integrated management device and the electrical load distribution device will revert to the emergency override mode to control the critical electrical loads.

[0074] Furthermore, the electrical load control includes four modes: 1) main communication bus mode, 2) backup communication bus mode, 3) emergency override mode, and 4) manual override mode.

[0075] Furthermore, among the four control modes of the electrical load control, the manual override mode has the highest priority, followed by the emergency override mode, then the main bus communication mode, and finally the standby bus communication mode.

[0076] Furthermore, the main communication bus mode is specifically:

[0077] The main control module of the integrated management device communicates with the electrical load distribution device through the main bus in the bus communication module and issues control instructions. After receiving and parsing the communication information through the main bus in the bus communication module, the main control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module.

[0078] Furthermore, the backup communication bus mode is specifically as follows:

[0079] The main control module of the integrated management device communicates with the electrical load distribution device through the backup bus in the bus communication module and issues control instructions. After receiving and parsing the communication information through the backup bus in the bus communication module, the main control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module.

[0080] Furthermore, the emergency override mode is specifically as follows:

[0081] The main control module of the integrated management device outputs the emergency enable signal and emergency control signal of the key electrical load to the electrical load distribution device through the discrete quantity output module. The CPLD control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module after identifying the emergency enable signal and emergency control signal collected by the discrete quantity acquisition module;

[0082] Furthermore, the manual override method is specifically as follows:

[0083] The discrete quantity output module in the integrated management device is controlled by a manual switch to output the manual enable signal and the manual control signal of the key electrical load to the electrical load distribution device; the CPLD control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module after identifying the manual enable signal and the manual control signal;

[0084] In the above control strategy, the integrated management device and the electrical load distribution device determine whether the working status of the main control chip is normal, including but not limited to using self-test, hard-wired handshake signals between devices, and adding main control chip status information to the communication data of the communication bus.

[0085] In order to avoid misjudgment of bus faults, the integrated management device and the electrical load distribution device can use the bus data packets including but not limited to continuous multi-packet data judgment, continuous multiple judgments within 5s-10s, and continuous multiple initialization of the bus module function in the software and then re-receiving the data for judgment;

[0086] After a communication bus failure, both the integrated management device and the electrical load distribution device can determine whether the bus has been restored through bus self-checking, and can send bus status information to each other through hard-wired signals.

[0087] It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical terms and scientific terms) used herein have the same meaning as the general understanding of those skilled in the art in the field to which the present invention belongs. It should also be understood that terms such as those defined in general dictionaries should be understood to have a meaning consistent with the meaning in the context of the prior art, and will not be interpreted with an idealized or overly formal meaning unless defined as here. The specific implementation methods described above further explain the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific implementation method of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A critical electrical load redundancy control strategy, characterized in that: The control strategy is as follows: 1) When the main communication module of the integrated management device can receive the communication information that meets the communication standards sent by the electrical load distribution device, and the main communication module of the electrical load distribution device can receive the communication information that meets the communication standards of the integrated management device, the integrated management device and the electrical load distribution device use the main communication bus to control the key electrical load; 2) When the main communication module of the integrated management device cannot receive the communication information sent by the electrical load distribution device, or the received communication information does not meet the communication standard, the main communication module of the integrated management device will no longer send communication information, and the integrated management device and the electrical load distribution device will use the backup communication bus mode to control the key electrical load; 3) When the main communication module of the electrical load distribution device cannot receive the communication information sent by the integrated management device, or the received communication information does not meet the communication standard, the main communication module of the electrical load distribution device no longer sends communication information, and the integrated management device and the electrical load distribution device use the backup communication bus to control the key electrical load; 4) If it can be determined that the main communication modules of the integrated management device and the load distribution device have returned to normal, the integrated management device and the electrical load distribution device will return to using the main communication bus to control the key electrical loads; 5) When both the main and standby communication modules of the integrated management device cannot receive the communication information sent by the electrical load distribution device, or the received communication information does not meet the communication standard, the main and standby communication modules of the integrated management device will no longer send communication information, and the integrated management device and the electrical load distribution device use emergency override mode to control the critical electrical load; 6) When both the main and standby communication modules of the electrical load distribution device cannot receive the communication information sent by the integrated management device, or the received communication information does not meet the communication standard, the main and standby communication modules of the electrical load distribution device no longer send communication information, and the integrated management device and the electrical load distribution device use the emergency override mode to control the critical electrical load; 7) When the integrated management device determines that the main control chip of the electrical load distribution device cannot work properly, or it is necessary to override the bus communication mode to control the critical load, the main and standby communication modules of the integrated management device will no longer send communication information, and the integrated management device and the electrical load distribution device use the emergency override mode to control the critical electrical load; 8) If it can be determined that the backup communication modules of the integrated management device and the load distribution device have returned to normal, and the main control chip of the electrical load distribution device can work normally, and there is no need to override the bus communication mode to control the key load, the integrated management device and the electrical load distribution device will return to using the backup communication bus mode to control the key electrical load; 9) When it can be determined that the main control chip of the integrated management device cannot work normally, or in any emergency situation, the integrated management device and the electrical load distribution device use manual override mode to control the key electrical loads; 10) When it can be determined that the main control chip of the integrated management device can work normally, or is not in an emergency situation, the integrated management device and the electrical load distribution device return to the emergency override mode to control the critical electrical load; The control of the electrical load includes four modes: 1) main communication bus mode, 2) backup communication bus mode, 3) emergency override mode, and 4) manual override mode.

2. The control strategy according to claim 1, characterized in that: Among the four control modes of the electrical load control, the manual override mode has the highest priority, followed by the emergency override mode, then the main bus communication mode, and finally the standby bus communication mode.

3. The control strategy according to claim 2, characterized in that: The main communication bus mode is specifically: The main control module of the integrated management device communicates with the electrical load distribution device through the main bus in the bus communication module and issues control instructions; after receiving and parsing the communication information through the main bus in the bus communication module, the main control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module; The communication bus backup method is specifically as follows: The main control module of the integrated management device communicates with the electrical load distribution device through the backup bus in the bus communication module and issues control instructions; after receiving and parsing the communication information through the backup bus in the bus communication module, the main control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module; The emergency override mode is specifically as follows: The main control module of the integrated management device outputs the emergency enable signal and the emergency control signal of the key electrical load to the electrical load distribution device through the discrete quantity output module; the CPLD control module of the electrical load distribution device outputs the control signal of the key electrical load to each key electrical load through the electrical load control module after identifying the emergency enable signal and the emergency control signal collected by the discrete quantity acquisition module; The manual override method is specifically as follows: The discrete output module in the integrated management device is controlled by the manual switch to output the manual enable signal and manual control signal of the key electrical load to the electrical load distribution device; the CPLD control module of the electrical load distribution device identifies the manual enable signal and the manual control signal, and then outputs the control signal of the key electrical load to each key electrical load through the electrical load control module.

4. A critical electrical load redundant control system using the control strategy according to any one of claims 1 to 3, characterized in that: It consists of an integrated management device and an electrical load distribution device; the integrated management device includes a main control module, a bus communication module, a discrete quantity output module and a manual switch; The main control module is connected to the bus communication module to realize the sending and receiving of communication data; the main control module is connected to the chip control discrete output module in the discrete output module to output the emergency enable signal and the emergency control signal; the manual switch is connected to the manual control discrete output module in the discrete output module to output the manual enable signal and the manual control signal; the main control module is not connected to the manual switch to ensure that the control command can be issued through the manual switch when the main control module is damaged; the electrical load distribution device includes a main control module, a CPLD control module, a bus communication module and a discrete acquisition module, and an electrical load control module; wherein the main control module is connected to the bus communication module to realize the sending and receiving of communication data; the main control module is connected to the CPLD control module to output the control command parsed from the bus data; The discrete quantity acquisition module is connected to the CPLD control module for identifying and outputting emergency control commands or manual control commands; the CPLD control module is connected to the electrical load control module for outputting the final control signal to each key electrical load after the logic strategy judgment.

5. The critical electrical load redundant control system according to claim 4, characterized in that: The processors in the main control modules of the integrated management device and the electrical load distribution device include but are not limited to DSP, ARM, and single-chip microcomputer chips.

6. The critical electrical load redundant control system according to claim 5, characterized in that: The bus communication modules of the integrated management device and the electrical load distribution device both have a main and standby dual bus, both have sending and receiving functions, and both have the function of judging whether the other party's sending function is good by analyzing whether the information sent by the other party meets the communication standard; the bus forms of the bus communication module include but are not limited to RS422 communication bus, RS485 communication bus, RS232 communication bus, CAN communication bus, AFDX communication bus, 1394 communication bus; The primary and standby buses of the bus communication module can be of the same bus form or of different bus forms.

7. The critical electrical load redundant control system according to claim 6, characterized in that: The chip-controlled discrete output module and the manually-controlled discrete output module of the discrete output module of the integrated management device are equipped with anti-shock circuits and filtering circuits to prevent external input fluctuations from damaging the chip-controlled discrete output module and the manually-controlled discrete output module, affecting the control of key electrical loads at the back end, and increasing the effectiveness of the chip-controlled discrete output module and the manually-controlled discrete output module.

8. The critical electrical load redundant control system according to claim 7, characterized in that: There is no electrical connection between the main control module and the electrical load control module. The control instructions can only be issued to the electrical load control module through the CPLD control module. This can avoid abnormal effects on the electrical load control module when an abnormality occurs in the main control module, thereby improving the reliability of the key electrical load control system.

9. The critical electrical load redundant control system according to claim 8, characterized in that: The CPLD control module of the electrical load distribution device has the function of receiving the emergency enable signal. The emergency control signal command will be executed only when the emergency enable signal is valid.

10. The critical electrical load redundant control system according to claim 9, characterized in that: The CPLD control module of the electrical load distribution device has a manual enable signal receiving function. The manual control signal command will be executed only when the manual enable signal is valid.

Images