A power supply configuration architecture for a redundant airborne system

Abstract

The embodiment of the application discloses a power supply configuration architecture of a redundant airborne system, wherein at least four redundant devices are included in the redundant airborne system, a power supply system includes at least two power supply subsystems and professional accumulators, each power supply subsystem has two power supply bus bars, including a main bus bar and an emergency bus bar; the power supply configuration architecture includes: two devices in the power supply configuration architecture are connected with the professional accumulators respectively, one of the two devices is connected with one power supply bus bar in one power supply subsystem, and the other device is connected with one power supply bus bar in the other power supply subsystem; the other two devices are connected with the main bus bar in one power supply subsystem and the emergency bus bar in the other power supply subsystem respectively. The technical scheme provided by the embodiment of the application solves the problem that the existing power supply configuration scheme of the redundant airborne system is difficult to have both the power supply common-mode fault mitigation requirement and the high task reliability level.

Description

Technical Field

[0001] This invention relates to, but is not limited to, the field of distributed system redundancy and fault tolerance technology, and particularly to a power configuration architecture for a redundancy airborne system. Background Technology

[0002] For fly-by-wire flight control systems equipped with quadruple-redundant actuation control electronics, each actuation control electronics connects to two power buses. However, the power source for power buses on the same side of the aircraft is the engine on that side, so common-mode failures may occur in these buses. This could lead to the loss of power to two or more actuation control electronics. Therefore, a power configuration scheme is needed to minimize the impact of common-mode power failures on these quadruple-redundant devices.

[0003] There are two main existing power supply configuration schemes:

[0004] The first power configuration involves connecting two devices to the left main busbar and the right emergency busbar, with one device connected to a dedicated battery; and connecting the other two devices to the right main busbar and the left emergency busbar, with one device connected to a dedicated system battery.

[0005] The second power supply configuration option is for 2 devices (e.g., Figure 2 Devices 1 and 2 are connected to the left main busbar and the left emergency busbar, with one device (device 2) connected to a dedicated battery; the other two devices are connected to the right main busbar and the right emergency busbar, with one device connected to a dedicated battery. For example... Figure 2 The diagram shown is a schematic of the power configuration architecture for the second existing power configuration scheme.

[0006] Neither of the two conventional power configuration schemes mentioned above can mitigate the impact of common-mode power failures on redundant airborne systems without compromising the mission reliability of the redundant airborne systems. Summary of the Invention

[0007] The purpose of this invention is to solve the above-mentioned technical problems. The embodiments of this invention provide a power configuration architecture for a redundant airborne system. This power configuration architecture can not only mitigate the impact of common-mode power failures on the redundant airborne system, but also solve the problem that existing power configuration schemes for redundant airborne systems are difficult to simultaneously meet the requirements for mitigating common-mode power failures and achieving a high level of mission reliability.

[0008] The technical solution of the present invention: The embodiments of the present invention provide a power configuration architecture for a redundant airborne system. The redundant airborne system includes at least four redundant devices, and the power supply system includes at least two power subsystems and a dedicated battery. Each power subsystem has two power busbars, including a main busbar and an emergency busbar. The power configuration architecture includes:

[0009] Two of the devices are connected to a professional battery, and one of the two devices connected to the professional battery is connected to a power busbar in one power subsystem, and the other device is connected to a power busbar in another power subsystem.

[0010] The other two devices are connected to the main busbar in one power subsystem and the emergency busbar in another power subsystem, respectively.

[0011] Optionally, in the power configuration architecture of the redundant airborne system described above, the redundant devices in the redundant airborne system include: device 1, device 2, device 3, and device 4, and the power supply system includes power subsystem A and power subsystem B; the power configuration architecture includes:

[0012] The device 1 is connected to a professional storage battery and also to a power busbar in the power subsystem A;

[0013] The device 2 is connected to a professional storage battery and also to a power busbar in the power subsystem B;

[0014] The device 3 is connected to the emergency busbar in power subsystem A and the main busbar in power subsystem B;

[0015] The device 4 connects the emergency busbar in power subsystem B and the main busbar in power subsystem A.

[0016] Optionally, in the power configuration architecture of the redundant airborne system described above, the redundant devices in the redundant airborne system further include: device 5 and device 6;

[0017] Devices 5 and 6 are respectively connected to professional storage batteries. Devices 5 and 6 are also respectively connected to a power busbar in power subsystem A or power subsystem B. Devices 5 and 6 are connected to different power subsystems, and each busbar connects two devices.

[0018] Optionally, in the power configuration architecture of the redundant airborne system described above, the redundant devices in the redundant airborne system further include: device 7 and device 8;

[0019] The device 7 is connected to the emergency busbar in power subsystem A and the emergency busbar in power subsystem B;

[0020] The device 8 connects the main busbar in power subsystem B and the main busbar in power subsystem A.

[0021] Optionally, in the power configuration architecture of the redundant airborne system described above, the power supply system further includes: a power subsystem D; the redundant equipment further includes: device 5 and device 6; the power configuration of device 5 and device 6 is specifically as follows:

[0022] Device 5 is connected to a busbar in power subsystem A, and device 6 is connected to a busbar in power subsystem B. Each busbar in power subsystems A and B is connected to two devices. Devices 5 and 6 are also connected to a power busbar in power subsystem D, and devices 5 and 6 are connected to different busbars.

[0023] Optionally, in the power configuration architecture of the redundant airborne system described above, the power supply system further includes: a power subsystem D; the redundant equipment further includes: device 5 and device 6; the power configuration of device 5 and device 6 is specifically as follows:

[0024] The device 5 is connected to a professional storage battery C, and the device 5 is also connected to a power bus bar in the power subsystem D.

[0025] The device 6 is connected to the main bus D1 or emergency bus D2 in the power subsystem D, and is also connected to the emergency bus or main bus in another power subsystem A or B.

[0026] Optionally, in the power configuration architecture of the redundant airborne system described above, the power supply system further includes: a power subsystem D; the redundant equipment further includes: device 5 and device 6; the power configuration of device 5 and device 6 is specifically as follows:

[0027] The device 5 is connected to a busbar in power subsystem D and to an emergency busbar in another power subsystem A or B;

[0028] The device 6 is connected to another busbar in power subsystem D, and also to the main busbar in another power subsystem A or B.

[0029] Optionally, in the power configuration architecture of the redundant airborne system described above, the power supply system further includes: power subsystem D; the redundant devices further include: device 5, device 6, device 7 and device 8;

[0030] The device 5 is connected to a professional storage battery C and to a power busbar in the power subsystem D;

[0031] The device 6 is connected to a professional storage battery C and to a power busbar in the power subsystem D, and the devices 5 and 6 are connected to different busbars in the power subsystem D;

[0032] The device 7 is connected to a power busbar in power subsystem D and an emergency busbar in power subsystem A or B;

[0033] Device 8 is connected to an emergency busbar in power subsystem A or B and a power busbar in power subsystem D, and devices 7 and 8 are connected to different busbars in power subsystem D.

[0034] The beneficial effects of this invention are as follows: Embodiments of this invention provide a power configuration architecture for a redundant airborne system. Compared to the existing first power configuration method, the various proposed power configuration architectures reduce the probability of losing all equipment by nine orders of magnitude, comparable to the second power configuration method. Compared to the existing second power configuration method, the various power configuration architectures provided by this invention reduce the probability of losing at least one device by three orders of magnitude, comparable to the first power configuration method. Therefore, adopting the power configuration architecture for a redundant airborne system provided by embodiments of this invention can not only mitigate the impact of common-mode power failures on the redundant airborne system, but also retain the advantages of traditional methods, improving product reliability.

[0035] Furthermore, both existing power configuration schemes require two redundant devices to connect to three power sources, while the power configuration architecture provided by this invention only requires each redundant device to connect to two power sources. This reduces the number of power interfaces and size for the equipment, and simplifies the power selection circuitry; for the aircraft, it reduces the amount of wiring and lightens the weight. Therefore, adopting the power configuration architecture of the redundant airborne system provided by this invention can reduce product manufacturing and maintenance costs and improve economic efficiency. Attached Figure Description

[0036] The accompanying drawings are provided to further understand the technical solutions of the present invention and constitute a part of the specification. They are used together with the embodiments of this application to explain the technical solutions of the present invention and do not constitute a limitation on the technical solutions of the present invention.

[0037] Figure 1 This is a schematic diagram of the configuration architecture for the first existing power supply configuration scheme;

[0038] Figure 2 A schematic diagram of the configuration architecture for the second existing power supply configuration scheme.

[0039] Figure 3 This is a schematic diagram of the power configuration architecture of the redundant airborne system provided in Embodiment 1 of the present invention;

[0040] Figure 4 This is a schematic diagram of the power configuration architecture of the redundant airborne system provided in Embodiment 2 of the present invention;

[0041] Figure 5This is a schematic diagram of the power configuration architecture of the redundant airborne system provided in Embodiment 3 of the present invention;

[0042] Figure 6 This is a schematic diagram of the power configuration architecture of the redundant airborne system provided in Embodiment 4 of the present invention;

[0043] Figure 7 This is a schematic diagram of the power configuration architecture of the redundant airborne system provided in Embodiment 5 of the present invention;

[0044] Figure 8 This is a schematic diagram of the power configuration architecture of the redundant airborne system provided in Embodiment 6 of the present invention;

[0045] Figure 9 This is a schematic diagram of the power configuration architecture of the redundant airborne system provided in Embodiment 7 of the present invention. Detailed Implementation

[0046] To make the objectives, technical solutions, and advantages of the present invention clearer, the embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, unless otherwise specified, the embodiments and features described in this application can be arbitrarily combined with each other.

[0047] As explained in the background section above, there are two important power configuration strategies in existing power supply configuration schemes:

[0048] The first type: Figure 1 The diagram shows a power configuration architecture of the first existing power configuration scheme. In this power configuration scheme, both device 1 and device 4 are connected to the left main busbar 5 and the right emergency busbar 9, and device 4 is also connected to a dedicated battery 7. Both device 2 and device 3 are connected to the right main busbar 8 and the left emergency busbar 7, and device 2 is also connected to a dedicated battery 7.

[0049] The advantage of the first power configuration is that the probability of equipment failure due to power failure is low, typically on the order of 1E-7 / FH. The probability of a redundant airborne system losing half of its equipment redundancy due to power failure is low, resulting in a higher level of mission reliability. The disadvantage of this connection is that if one power busbar generates high voltage due to a common-mode fault, all equipment will fail because it selected the high-voltage power supply, i.e., a common-mode fault will occur.

[0050] The second type: Figure 2The diagram shows a power configuration architecture for the second existing power configuration scheme. In this power configuration scheme, both device 1 and device 2 are connected to the left main busbar 5 and the left emergency busbar 6, and device 2 is also connected to a dedicated battery 7; both device 3 and device 4 are connected to the right main busbar 8 and the right emergency busbar 9, and device 4 is also connected to a dedicated battery 7.

[0051] The advantage of the second power configuration is that even when a common-mode fault causes a high voltage on one side of the power busbar, half of the equipment can still operate normally. The disadvantage is that because the probability of simultaneous failure of both busbars on one side is relatively high, typically on the order of 1E-5 / FH, the redundancy airborne system has a high probability of losing half of its equipment redundancy due to power failure, meaning the mission reliability level is reduced and cannot meet the reliability specifications of a redundancy airborne system.

[0052] However, neither of the two conventional power configuration schemes mentioned above can mitigate the impact of onboard power common-mode failures on redundant airborne systems without sacrificing the mission reliability level of the redundant airborne systems; that is, the two power configuration schemes mentioned above cannot simultaneously meet the requirements for mitigating power common-mode failures and achieving a high level of mission reliability. To address this problem, embodiments of the present invention provide a power configuration architecture for redundant airborne systems. Using the power configuration architecture provided by embodiments of the present invention, the impact of onboard power common-mode failures on redundant airborne systems can be mitigated.

[0053] The present invention provides the following specific embodiments, which can be combined with each other. For the same or similar concepts or processes, they may not be described again in some embodiments.

[0054] The power configuration architecture of the redundant airborne system provided in this embodiment of the invention aims to mitigate the impact of common-mode power failures on the redundant airborne system, thereby replacing methods such as... Figure 1 and 2 Two existing power supply configuration schemes are proposed, and the following effects are achieved:

[0055] 1. To avoid the complete loss of redundant equipment due to a single-side power supply common-mode fault;

[0056] 2. It can meet the high reliability requirements of redundant airborne systems.

[0057] To address the aforementioned requirements for power configuration solutions, this invention provides a power configuration architecture for a redundant airborne system. This redundant airborne system includes at least four redundant devices, and the power supply system includes at least two power subsystems and a dedicated battery. Each power subsystem has two power busbars, including a main busbar and an emergency busbar. The power configuration architecture includes:

[0058] Two of the devices are connected to a professional battery, and one of the two devices connected to the professional battery is connected to a power busbar in one power subsystem, and the other device is connected to a power busbar in another power subsystem.

[0059] The other two devices are connected to the main busbar in one power subsystem and the emergency busbar in another power subsystem, respectively.

[0060] It should be noted that the power supply system in the redundant airborne system provided in this embodiment of the invention includes at least two power subsystems, left and right, which are independent of each other and are considered to be free from common-mode faults. Each power subsystem has two busbars, namely a main busbar and an emergency busbar. Since the two busbars share a common part, common-mode faults may occur. The dedicated battery is independent of the power supply system and is considered to be free from common-mode faults.

[0061] In the redundant airborne system provided in this embodiment of the invention, devices 1, 2, 3 and 4 in the redundant airborne equipment have the same function and are independent of each other. Each device includes two power interfaces and a power selection module. The power selection module selects the one with the higher voltage from the two connected power supplies as the power supply for this device.

[0062] The following describes the specific structure of the power configuration architecture of the redundant airborne system provided by the present invention through some specific embodiments.

[0063] Example 1:

[0064] like Figure 3 The diagram shown is a structural schematic of the power configuration architecture of a redundant airborne system provided in Embodiment 1 of the present invention. In this Embodiment 1, the redundant devices in the redundant airborne system include: device 1, device 2, device 3, and device 4. The power supply system includes power subsystem A, power subsystem B, and a dedicated battery C. The power configuration architecture provided in Embodiment 1 includes:

[0065] Device 1 is connected to a professional storage battery and also to a power busbar in power subsystem A;

[0066] Device 2 is connected to a professional storage battery and also to a power busbar in power subsystem B;

[0067] Device 3 connects the emergency busbar in power subsystem A and the main busbar in power subsystem B;

[0068] Device 4 connects the emergency busbar in power subsystem B and the main busbar in power subsystem A.

[0069] like Figure 3As shown, the specific connection method of the power configuration architecture of the redundant airborne system is as follows: device 1 is connected to the left main bus bar A1 and the dedicated battery C; device 2 is connected to the right main bus bar B1 and the dedicated battery C; device 3 is connected to the right main bus bar B1 and the left emergency bus bar A2; and device 4 is connected to the left main bus bar A1 and the right emergency bus bar B2.

[0070] Example 2:

[0071] like Figure 4 The diagram shown is a structural schematic of the power configuration architecture of the redundant airborne system provided in Embodiment 2 of the present invention. In this Embodiment 2, the redundant devices in the redundant airborne system include: device 1, device 2, device 3, device 4, device 5, and device 6. The power supply system includes power subsystem A, power subsystem B, and a dedicated battery C. The power configuration architecture provided in Embodiment 2, based on the configuration architecture of Embodiment 1, further includes:

[0072] Devices 5 and 6 are respectively connected to professional storage battery C. Devices 5 and 6 are also respectively connected to a power bus bar in power subsystem A or power subsystem B. Devices 5 and 6 are connected to different power subsystems, and each bus bar connects two devices.

[0073] like Figure 4 As shown, the specific connection method of the power configuration architecture of the redundant airborne system provided in Embodiment 2 is as follows: the connection method of devices 1 to 4 is the same as... Figure 3 The connection methods shown are the same; in addition, device 5 is connected to the right emergency busbar B2 and the dedicated battery C; device 6 is connected to the left emergency busbar A2 and the dedicated battery C.

[0074] Example 3:

[0075] like Figure 5 The diagram shown is a schematic representation of the power configuration architecture of a redundant airborne system provided in Embodiment 3 of the present invention. In this Embodiment 3, the redundant devices in the redundant airborne system include: device 1, device 2, device 3, device 4, device 5, device 6, device 7, and device 8. The power supply system includes power subsystem A, power subsystem B, and a dedicated battery C. The power configuration architecture provided in Embodiment 3 is configured based on the configuration architecture of Embodiment 1 or Embodiment 2.

[0076] like Figure 5 As shown, the specific connection method of the power configuration architecture of the redundant airborne system provided in Embodiment 3 is as follows: the connection method of devices 1 to 6 is the same as... Figure 4The connection methods shown are the same; in addition, device 7 is connected to the left emergency busbar A2 in power subsystem A and the right emergency busbar B2 in power subsystem B; device 8 is connected to the right main busbar B1 in power subsystem B and the left main busbar A1 in power subsystem A.

[0077] Example 4:

[0078] like Figure 6 The diagram shown is a structural schematic of the power configuration architecture of a redundant airborne system provided in Embodiment 4 of the present invention. In Embodiment 4, the redundant devices in the redundant airborne system include: device 1, device 2, device 3, device 4, device 5, and device 6. The power supply system includes power subsystem A, power subsystem B, dedicated battery C, and power subsystem D. The power configuration architecture provided in Embodiment 4, based on the configuration architecture of Embodiment 1, further includes:

[0079] Devices 5 and 6 are each connected to a power bus in power subsystem D, and devices 5 and 6 are connected to different busbars; device 5 is also connected to a power bus in power subsystem A, and device 6 is also connected to a power bus in power subsystem B, and each busbar in power subsystems A and B is connected to two devices.

[0080] like Figure 6 As shown, the specific connection method of the power configuration architecture of the redundant airborne system provided in this embodiment 4 is as follows: the connection method of devices 1 to 4 is the same as... Figure 3 The connection methods shown are the same; in addition, device 5 connects to emergency bus D2 in power subsystem and emergency bus A2 in power subsystem A, and device 6 connects to main bus D1 in power subsystem D and main bus B1 in power subsystem B.

[0081] Example 5:

[0082] like Figure 7 The diagram shown is a structural schematic of the power configuration architecture of a redundant airborne system provided in Embodiment 5 of the present invention. In Embodiment 5, the redundant devices in the redundant airborne system include: device 1, device 2, device 3, device 4, device 5, and device 6. The power supply system includes power subsystem A, power subsystem B, dedicated battery C, and power subsystem D. The power configuration architecture provided in Embodiment 5, based on the configuration architecture of Embodiment 1, further includes:

[0083] Device 5 is connected to a professional storage battery C, and device 5 is also connected to a power busbar in the power subsystem D.

[0084] Device 6 connects to the main bus D1 or emergency bus D2 in power subsystem D, and also connects to the emergency bus or main bus in another power subsystem A or B.

[0085] like Figure 7 As shown, the specific connection method of the power configuration architecture of the redundant airborne system provided in this embodiment 5 is as follows: the connection method of devices 1 to 4 is the same as... Figure 3 The connection methods shown are the same; in addition, device 5 is connected to professional storage battery C, and device 5 is also connected to emergency power bus bar D2 in power subsystem D; device 6 is connected to main bus bar D1 in power subsystem D, and also connected to emergency bus bar A2 in power subsystem A.

[0086] Example 6:

[0087] like Figure 8 The diagram shown is a structural schematic of the power configuration architecture of a redundant airborne system provided in Embodiment 6 of the present invention. In Embodiment 6, the redundant devices in the redundant airborne system include: device 1, device 2, device 3, device 4, device 5, and device 6. The power supply system includes power subsystem A, power subsystem B, dedicated battery C, and power subsystem D. The power configuration architecture provided in Embodiment 6, based on the configuration architecture of Embodiment 1, further includes:

[0088] Device 5 is connected to a busbar in power subsystem D and to an emergency busbar in another power subsystem A or B;

[0089] Device 6 connects to another busbar in power subsystem D and to the main busbar in another power subsystem A or B.

[0090] like Figure 8 As shown, the specific connection method of the power configuration architecture of the redundant airborne system provided in Embodiment 6 is as follows: the connection method of devices 1 to 4 is the same as... Figure 3 The connection methods shown are the same; in addition, device 5 connects to emergency bus D2 in power subsystem D and to emergency bus A2 in power subsystem A; device 6 connects to main bus D1 in power subsystem D and to main bus B1 in power subsystem B.

[0091] Example 7:

[0092] like Figure 9 The diagram shown is a structural schematic of the power configuration architecture of a redundant airborne system provided in Embodiment 7 of the present invention. In Embodiment 7, the redundant devices in the redundant airborne system include: device 1, device 2, device 3, device 4, device 5, device 6, device 7, and device 8. The power supply system includes power subsystem A, power subsystem B, dedicated battery C, and power subsystem D. The power configuration architecture provided in Embodiment 7, based on the configuration architecture of Embodiment 1, further includes:

[0093] Device 5 is connected to a professional storage battery C and to a power busbar in the power subsystem D;

[0094] Device 6 is connected to a professional storage battery C and to a power busbar in the power subsystem D; it should be noted that devices 5 and 6 are connected to different busbars in the power subsystem D.

[0095] Device 7 connects a busbar in power subsystem D and an emergency busbar in power subsystem A or B;

[0096] Device 8 connects to an emergency busbar in power subsystem A or B and a busbar in power subsystem D; it should be noted that devices 7 and 8 connect to different busbars in power subsystem D.

[0097] like Figure 9 As shown, the specific connection method of the power configuration architecture of the redundant airborne system provided in Embodiment 7 is as follows: the connection method of devices 1 to 4 is the same as... Figure 3 The connection methods shown are the same.

[0098] In addition, the connection method of devices 5 and 6 is as follows: device 5 is connected to professional battery C and to emergency busbar D2 in power subsystem D, and device 6 is connected to professional battery C and to main busbar D1 in power subsystem D.

[0099] The connection method of devices 7 and 8 is as follows: device 7 is connected to emergency busbar D2 in power subsystem D and emergency busbar B2 in power subsystem B; device 8 is connected to emergency busbar A2 in power subsystem A and main busbar D1 in power subsystem D.

[0100] It should be noted that, as Figures 3 to 9 As shown, in the power configuration architecture of the redundant airborne system provided in this embodiment of the invention, it is necessary to adhere to the principle that each busbar can only connect to 2 devices. If a busbar is connected to 3 devices, the busbar will experience abnormal high voltage. If a busbar experiences abnormal high voltage, it will lead to the loss of 3 devices at once.

[0101] The power configuration architectures for redundant airborne systems provided in the embodiments of this invention reduce the probability of losing all equipment by nine orders of magnitude compared to the existing first power configuration method, and are comparable to the second power configuration method. Compared to the existing second power configuration method, the power configuration architectures provided in this invention reduce the probability of losing at least one device by three orders of magnitude, and are comparable to the first power configuration method. Therefore, adopting the power configuration architectures for redundant airborne systems provided in the embodiments of this invention can not only mitigate the impact of common-mode power failures on redundant airborne systems, but also retain the advantages of traditional methods, improving product reliability.

[0102] Furthermore, both existing power configuration schemes require two redundant devices to connect to three power sources, while the power configuration architecture provided by this invention only requires each redundant device to connect to two power sources. This reduces the number of power interfaces and size for the equipment, and simplifies the power selection circuitry; for the aircraft, it reduces the amount of wiring and lightens the weight. Therefore, adopting the power configuration architecture of the redundant airborne system provided by this invention can reduce product manufacturing and maintenance costs and improve economic efficiency.

[0103] The following implementation example illustrates the implementation of the power configuration architecture for a redundant airborne system provided in this invention, and the effect of this power configuration architecture on mitigating the impact of common-mode power failures on the redundant airborne system.

[0104] The power configuration architecture of this implementation example's redundant airborne system, specifically a quadruple-redundant airborne device, can be used to mitigate the impact of onboard power common-mode failures on quadruple-redundant airborne devices. Its technical solution is: a power configuration architecture for a highly reliable quadruple-redundant airborne device, comprising four functionally and physically independent redundant devices, such as... Figure 3 Equipment 1 to Equipment 4, with two sets of on-board power supply systems, namely power subsystem A and power subsystem B, such as Figure 3 A, B, and a dedicated storage battery, such as Figure 3 In section C, each power subsystem contains two busbars, as shown in the diagram (A1 and A2, B1 and B2). They share a common physical structure, indicating a potential common-mode fault. Device 1 connects the left main busbar A1 to the dedicated battery; Device 2 connects the right main busbar B1 to the dedicated battery; Device 3 connects the right main busbar B1 to the left emergency busbar A2; and Device 4 connects the left main busbar A1 to the right emergency busbar B2.

[0105] The power configuration architecture provided in this implementation example works as follows: each redundant device selects the higher voltage of the two connected power supplies as its power source. Thus, if one power bus fails, the device can instantly use the other power bus or a dedicated battery for power; if one power bus experiences an abnormally high voltage, the device, due to its operating principle, will incorrectly select the abnormal bus, causing it to fail.

[0106] The following describes how the system operates under the following conditions, in descending order of probability:

[0107] Scenario 1: When the dedicated battery fails, the probability of occurrence is approximately 1E-5 / FH. In this case, Device 1 selects the left main busbar, Device 2 selects the right main busbar, and the remaining two devices select their power supply based on the voltage level of the connected power source. All devices will then function normally. In this scenario, the traditional power supply configuration can also achieve the same effect, ensuring all devices operate normally.

[0108] Scenario 2: When one main busbar loses power (e.g., the left main busbar fails, with a probability of approximately 1E-5 / FH), device 1 selects a dedicated battery, device 4 selects the right emergency busbar, and the other two devices select their power supply based on the voltage level of their connected power source. In this case, all devices can operate normally. Traditional power supply configurations can achieve the same effect in this scenario, ensuring all devices function correctly.

[0109] Scenario 3: When two busbars on the same side lose power, such as the left main busbar and the left emergency busbar, the probability of this occurring is approximately 1E-7 / FH. In this case, Device 1 selects a dedicated battery, Device 3 selects the right main busbar, Device 4 selects the right emergency busbar, and Device 2 selects its power supply based on the voltage level of the connected power source. All devices will then function normally. In this scenario, all devices in traditional power configuration 1 will function normally, while Device 1 in traditional power configuration 2 will experience a power outage.

[0110] Scenario 4: When both emergency busbars on opposite sides fail to power (e.g., the left and right emergency busbars fail), the probability of this occurring is approximately 4E-10 / FH. In this case, device 3 selects the right main busbar, device 4 selects the left main busbar, and devices 2 and 3 select their power supply based on the voltage level of the connected power source. All devices will then function normally. In this scenario, the traditional power supply configuration can achieve the same effect, ensuring all devices operate normally.

[0111] Scenario 5: When the power to the two main busbars on opposite sides fails (e.g., the left and right main busbars fail), the probability of this occurring is approximately 4E-10 / FH. In this case, devices 1 and 2 should use dedicated batteries, device 3 should use the left emergency busbar, and device 4 should use the right emergency busbar. All devices will then be able to operate normally. In this scenario, the traditional power supply configuration can also achieve the same effect, ensuring the normal operation of all devices.

[0112] Scenario 6: When one busbar loses power and the dedicated battery fails, such as the left emergency busbar (probability is approximately 4E-10 / FH), device 1 selects the left main busbar, devices 2 and 3 select the right main busbar, and device 4 selects its power supply based on the voltage level of the connected power source. In this case, all devices operate normally. Traditional power supply configurations can achieve the same effect in this scenario, ensuring all devices function correctly.

[0113] Scenario 7: When one busbar loses power and the dedicated battery fails, such as the left main busbar (probability approximately 4E-10 / FH), device 1 fails. Device 2 uses the right main busbar, and device 4 uses the right emergency busbar. Device 3 selects its power supply based on the voltage level of the connected power source. In this situation, all three devices operate normally. Under these conditions, traditional power configurations can ensure the normal operation of all devices.

[0114] Scenario 8: When two busbars on opposite sides lose power, one of which is the main busbar and the other is the emergency busbar (e.g., the left main busbar and the right emergency busbar both lose power, with a probability of approximately 4E-10 / FH), device 1 selects a dedicated battery. Device 4 fails due to the power outage on both power sources. Devices 2 and 3 select their power supply based on the voltage level of their connected power sources, and all three devices operate normally. In traditional power configuration 1, if device 1 loses power, all devices in traditional power configuration 2 can operate normally.

[0115] Scenario 9: When all busbars on one side are overvoltaged (e.g., both busbars on the left side are overvoltaged), the probability of this occurring is approximately 1E-9 / FH. In this case, devices 1, 3, and 4 will fail, but one device will still function normally. In contrast, in conventional power configuration 1, all devices will fail, and in conventional power configuration 2, devices 1 and 2 will fail, but the remaining two devices will function normally.

[0116] Scenario 10: When two busbars on the same side lose power and the flight controller battery fails (e.g., the two busbars on the left), the probability of this occurring is approximately 2E-12 / FH. Device 1 fails, devices 2 and 3 select the right main busbar, and device 4 selects the right emergency busbar; all three devices still function normally. In traditional power configuration 1, all devices function normally, while in traditional power configuration 2, devices 1 and 2 fail, but the remaining two devices function normally.

[0117] Scenario 11: When three busbars lose power (e.g., the two left busbars and the right main busbar), the probability of this occurring is approximately 2E-12 / FH. In this case, devices 1 and 2 use dedicated batteries, device 3 fails, and device 4 uses the right emergency busbar; all three devices can operate normally. In traditional power configuration 1, if device 3 fails, the remaining devices operate normally; in traditional power configuration 2, if device 1 fails, the remaining devices operate normally.

[0118] Scenario 12: When the power to two busbars on opposite sides fails and the dedicated battery malfunctions (e.g., the left main busbar and the right emergency busbar), the probability of this occurring is approximately 1.5E-13 / FH. In this case, devices 2 and 3 will select their power supply based on the voltage level of the connected power source. If devices 1 and 4 fail, both devices will continue to operate normally. In traditional power configuration 1, if devices 1 and 4 fail, the other two devices will continue to operate normally; in traditional power configuration 2, all four devices will continue to operate normally.

[0119] Overview 13: When all four busbars lose power, the probability of this occurring is approximately 1E-14 / FH. Devices 1 and 4 will use dedicated batteries, while devices 2 and 3 will fail. In traditional power configuration 1, devices 2 and 4 will function normally, while devices 1 and 3 will fail; in traditional power configuration 1, devices 2 and 4 will function normally, while devices 1 and 3 will fail.

[0120] Case 14: When both busbars are overvoltaged, the probability of this occurring is approximately 1E-18 / FH. In this case, all devices will fail. Traditional power configurations 1 and 2 yield the same result.

[0121] Considering all the above scenarios, Fault Tree Analysis (FTA) can be used to determine the probabilities of losing at least one device, two devices, or all devices under the three power configuration methods. The probability of losing at least one device using the power configuration architecture provided in this embodiment and the traditional power configuration method 1 is comparable, while the probability obtained using the traditional power configuration method 2 is 1000 times higher than the former two. The probability of losing at least two devices is comparable using all three methods. The probability of losing all devices using the power configuration architecture provided in this embodiment and the traditional power configuration method 2 is comparable, while the probability obtained using the traditional power configuration method 1 is 10E9 times higher than the former two. Therefore, the power configuration architecture provided in this embodiment combines the advantages of traditional methods.

[0122] While the embodiments disclosed in this invention are as described above, they are merely illustrative of the embodiments to facilitate understanding of the invention and are not intended to limit the invention. Any person skilled in the art to which this invention pertains may make any modifications and variations in the form and details of the implementation without departing from the spirit and scope disclosed herein; however, the scope of patent protection for this invention shall still be determined by the scope defined in the appended claims.

Claims

1. A power configuration architecture for a redundant airborne system, characterized in that, The redundant airborne system includes at least four redundant devices, and the power supply system includes a dedicated battery and at least two power subsystems. Each power subsystem has two power busbars, including a main busbar and an emergency busbar. The power configuration architecture includes: Two of the devices are connected to a professional battery, and one of the two devices connected to the professional battery is connected to a power busbar in one power subsystem, and the other device is connected to a power busbar in another power subsystem. The other two devices are connected to the main busbar in one power subsystem and the emergency busbar in another power subsystem, respectively.

2. The power configuration architecture of the redundant airborne system according to claim 1, characterized in that, The redundant airborne system includes redundant devices: device 1, device 2, device 3, and device 4; the power supply system includes power subsystem A and power subsystem B; the power configuration architecture includes: The device 1 is connected to a professional storage battery and also to a power busbar in the power subsystem A; The device 2 is connected to a professional storage battery and also to a power busbar in the power subsystem B; The device 3 is connected to the emergency busbar in power subsystem A and the main busbar in power subsystem B; The device 4 connects the emergency busbar in power subsystem B and the main busbar in power subsystem A.

3. The power configuration architecture of the redundant airborne system according to claim 2, characterized in that, The redundant equipment in the redundant airborne system also includes: equipment 5 and equipment 6; Devices 5 and 6 are respectively connected to professional storage batteries. Devices 5 and 6 are also respectively connected to a power busbar in power subsystem A or power subsystem B. Devices 5 and 6 are connected to different power subsystems, and each power busbar connects two devices.

4. The power configuration architecture of the redundant airborne system according to claim 3, characterized in that, The redundant equipment in the redundant airborne system also includes: equipment 7 and equipment 8; The device 7 is connected to the emergency busbar in power subsystem A and the emergency busbar in power subsystem B; The device 8 connects the main busbar in power subsystem B and the main busbar in power subsystem A.

5. The power configuration architecture of the redundant airborne system according to claim 2, characterized in that, The power supply system further includes: a power subsystem D; the redundant equipment further includes: equipment 5 and equipment 6; the power supply configuration of equipment 5 and equipment 6 is as follows: Device 5 is connected to a power busbar in power subsystem A, and device 6 is connected to a power busbar in power subsystem B. Each power busbar in power subsystems A and B is connected to two devices. Devices 5 and 6 are also connected to a power busbar in power subsystem D, and devices 5 and 6 are connected to different power busbars.

6. The power configuration architecture of the redundant airborne system according to claim 2, characterized in that, The power supply system further includes: a power subsystem D; the redundant equipment further includes: equipment 5 and equipment 6; the power supply configuration of equipment 5 and equipment 6 is as follows: The device 5 is connected to a professional storage battery C, and the device 5 is also connected to a power bus bar in the power subsystem D. The device 6 is connected to the main bus D1 or emergency bus D2 in the power subsystem D, and is also connected to the emergency bus or main bus in another power subsystem A or B.

7. The power configuration architecture of the redundant airborne system according to claim 2, characterized in that, The power supply system further includes: a power subsystem D; the redundant equipment further includes: equipment 5 and equipment 6; the power supply configuration of equipment 5 and equipment 6 is as follows: The device 5 is connected to a power busbar in power subsystem D and to an emergency busbar in another power subsystem A or B; The device 6 is connected to another power bus in power subsystem D, and also to the main bus in another power subsystem A or B.

8. The power configuration architecture of the redundant airborne system according to claim 2, characterized in that, The power supply system also includes: power subsystem D; the redundant equipment also includes: equipment 5, equipment 6, equipment 7 and equipment 8; The device 5 is connected to a professional storage battery C and to a power busbar in the power subsystem D; The device 6 is connected to a professional storage battery C and to a power busbar in the power subsystem D, and the devices 5 and 6 are connected to different power busbars in the power subsystem D; The device 7 is connected to a power busbar in power subsystem D and an emergency busbar in power subsystem A or B; Device 8 is connected to an emergency busbar in power subsystem A or B and a power busbar in power subsystem D, and devices 7 and 8 are connected to different power busbars in power subsystem D.

Images