A platform component status management method in an integrated modular avionics system

Abstract

The present invention belongs to the field of integrated avionics technology, specifically to a method for managing the status of platform components within an integrated modular avionics system. This invention proposes a design concept in which a universal processing module serves as a central management component. This universal processing module, acting as the central management component, is responsible for receiving external inputs, calculating system-level status, and distributing this system-level status to switches and remote data interface units within the integrated modular avionics system. This universal processing module calculates the system-level status and distributes this unique system-level status to other components, resolving the issue of asynchronous and disorganized initialization of various platform components.

Description

Technical Field

[0001] The present invention belongs to the technical field of integrated avionics, and in particular relates to a method for managing the status of platform components in an integrated modular avionics system. Background Art

[0002] The commonly used avionics architecture in mainstream aircraft today is the Integrated Modular Avionics System (IMA), which allows multiple, unrelated applications with varying criticality to share the same computing platform without interference. The challenge in IMA design is mapping the real-time, safety, and security constraints at the platform system and subsystem levels to the target architecture of available processors, networks, and software components. Based on this architecture, managing the initialization of the various platform components and ensuring their orderly completion within the overall platform system presents a significant challenge for the field of integrated avionics technology. Summary of the Invention

[0003] In view of this, the present invention proposes a method for managing the status of platform components in an integrated modular avionics system, and proposes a design concept in which a general processing module serves as a central management component. The general processing module serves as the central management component, is responsible for receiving external input and calculating the system-level status, and distributing the system-level status to switches and remote data interface units in the integrated modular avionics system. The general processing module of the present invention calculates the system-level status and distributes this unique system-level status to other components, thereby solving the problem of asynchronous and chaotic initialization of various platform components.

[0004] In order to achieve the above technical objectives, the specific technical solutions adopted by the present invention are:

[0005] A method for managing the status of an integrated modular avionics system is provided. The method is implemented based on a common processing module (CPM), an internal switch (NSM), an external switch (RSU), and a remote data interface unit (RDCU). The CPM and NSM are disposed within a single-side cabinet (ACP) of an integrated modular avionics system (IMA) and are powered by a power management module (PSM). The RSU and RDCU are disposed outside the ACP.

[0006] The system-level state management function resident on the CPM is responsible for reading the configuration files of the modular avionics system and receiving external input information for calculation and processing. It then distributes the overall state of the entire modular avionics system to the internal switch (NSM), external switch (RSU), and remote data interface unit (RDCU) via A664 bus messages for use during the initialization process. The device-level state management function resident on the CPM is also responsible for providing the calculated restricted / unrestricted state information to the modular avionics system-level state management function. The device-level state management function is also responsible for completing the initialization state switching of the CPM.

[0007] The state management function of the NSM and RSU only includes the device level, which is responsible for receiving the modular avionics system-level state distributed by the CPM and storing the restricted / unrestricted fields in the modular avionics system-level state into the non-volatile memory for initialization after restart. At the same time, the device-level state management function of the NSM and RSU is also used to complete the initialization state switching of the NSM and RSU;

[0008] The state management function of the RDCU only includes the device level, which is responsible for receiving the modular avionics system-level state distributed by the CPM and storing the restricted / unrestricted fields in the modular avionics system-level state in the non-volatile memory for initialization after restart. At the same time, the device-level state management function of the RDCU is also used to complete the RDCU initialization state switching.

[0009] Furthermore, the integrated modular avionics system status management method is implemented based on the following methods: a central status management method, a CPM initialization status management method, an NSM and RSU initialization status management method, and an RDCU initialization status management method.

[0010] Furthermore, the central status management method includes the following steps:

[0011] S101: Powering on the PSM, the RSU, and the RDCU simultaneously; inside the ACP, after the PSM is initialized, it starts to supply power to the common processing module CPM and the built-in switch NSM; outside the ACP, the RSU and RDCU are both provided with built-in power supplies to power themselves;

[0012] S102: After the PSM is initialized, power is supplied to the CPM and NSM inside the cabinet. At this time, the RSU and RDCU both perform their own initialization and are in the initialization state.

[0013] S103: Each IMA implements the migration between the initialization state, the safety state and the normal operation state according to the initialization state migration condition.

[0014] Furthermore, the CPM initialization state management method includes the following steps:

[0015] S201: After the CPM is powered on or restarted, it enters the initialization state and enters the temporary safe state after the short PBIT is completed;

[0016] S202: In the temporary safe state, the CPM decides whether to perform a full PBIT based on the calculated temporary unrestricted / restricted state. If the state is unrestricted, the CPM performs a full PBIT and re-enters the temporary safe state after the full PBIT is completed. Otherwise, the CPM directly enters the safe state from the restricted state.

[0017] S203: After the safe state, the restricted / unrestricted state of the CPM is determined and a CPM configuration initialization check is performed. When the configuration check passes, the normal operation state is entered.

[0018] S204: In normal operation, all resources are provided and all resident applications are running.

[0019] Furthermore, the NSM and RSU initialization state management method includes the following steps:

[0020] S301: The NSM and RSU are powered on or restarted to enter the initialization state. A brief PBIT test is started in the initialization state to determine the health status of the NSM and RSU.

[0021] S302: When the short PBIT in the restricted state determines that the NSM or RSU has no faults, or when the full PBIT in the unrestricted state determines that the switch has no faults, the NSM or RSU enters the safe state.

[0022] S303: Perform a configuration check in the safe state. After the configuration check, the NSM and RSU enter the normal operation state.

[0023] Furthermore, the RDCU initialization state management method includes the following steps:

[0024] S401: When the RDCU is powered on for the first time or restarted, it enters the initialization state. If the PBIT test does not detect any fault in the initialization state, it enters the safe state;

[0025] S402: Waiting in the safe state to receive a valid configuration list message from the avionics data network (ADN) of the integrated modular avionics system. If a valid configuration list message is received, directly entering the normal operation state; otherwise, continuing to wait;

[0026] S403: In normal operation, RDCU provides complete data conversion functions to the outside world; if the configuration list check fails in the unrestricted state, it will switch back to the safe state and continue to wait for receiving valid and available configuration list messages.

[0027] Furthermore, one of the ACPs includes two dedicated CPMs for system-level state management. The CPM's system-level state management includes three functions: calculation of dispatch / non-dispatch state (D / N state), calculation of data loading prohibit / allow state (DL P / A state), and system-level state distribution.

[0028] The two dedicated CPMs have a device-level state management function resident therein; and in one ACP, 2-8 CPMs are resident therein to complete the device-level state management according to different architecture designs.

[0029] Furthermore, in one of the ACPs, there are two NSMs to complete the distribution of system-level status, forwarding the system-level status inside the cabinet to the devices outside the cabinet through the A664 bus network; at the same time, the NSM uses the received system-level status during the restart process, executes a short PBIT to complete fast startup in the restricted state, and executes a full PBIT to complete slow startup in the unrestricted state.

[0030] Furthermore, the RSU is configured to store the received system-level state in a non-volatile memory, and use the system-level state in the non-volatile memory for initialization during a restart process.

[0031] Furthermore, the RDCU is used to receive the system-level state transferred out of the cabinet and transfer it to the non-volatile memory. During the device-level state management initialization process, the RDCU device is always quickly started or completely started according to the different system-level states stored in the non-volatile memory.

[0032] By adopting the above technical solution, the present invention can bring the following beneficial effects:

[0033] (1) Use a general processing module as the central management component for system-level state management. It is responsible for receiving external input information and reading system configuration files to calculate and process the system-level state. The calculated system-level state is then transmitted to the external switches RSU, RDCU, and ADN network via the built-in switch NSM. This central management solution concentrates core functions on certain general processing modules. The remaining platform components only need to passively receive the distributed system-level state, ensuring the consistency and uniqueness of the entire system platform state.

[0034] (2) The device-level CPM state management function is designed to not only receive external input and calculate the system-level state, but also complete the initialization of its own device based on the calculated system-level state. Compared with switches and remote data interface units (RDCUs), CPM is most sensitive to system-level state. This is because CPM uses the system-level state immediately after calculating it, while switches and remote data interface units can only be used after restarting due to their architectural design.

[0035] (3) Design a device-level switch state management function to complete the reception and storage of system-level state, quickly start in a restricted state, and provide network transmission functions for other devices in the system;

[0036] (4) Design the device-level RDCU state management function to complete the reception and storage of system-level state, quickly start in a restricted state, and provide data conversion functions for other devices in the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the following briefly introduces the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0038] Figure 1 Schematic diagram of an implementation framework of a comprehensive modular avionics system status management method in a specific embodiment of the present invention;

[0039] Figure 2 This is a timing diagram of the startup of each platform component in an unrestricted state in a specific embodiment of the present invention;

[0040] Figure 3 This is a timing diagram of the startup of each platform component in a restricted state in a specific embodiment of the present invention;

[0041] Figure 4 This is a state transition diagram of the CPM initialization process in a specific embodiment of the present invention;

[0042] Figure 5 This is a state transition diagram of the NSM and RSU initialization process in a specific embodiment of the present invention;

[0043] Figure 6 This is a state transition diagram of the RDCU initialization process in a specific embodiment of the present invention. DETAILED DESCRIPTION

[0044] The embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0045] The following describes the embodiments of the present disclosure through specific examples, and those skilled in the art can easily understand other advantages and effects of the present disclosure from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments. The present disclosure can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present disclosure. It should be noted that, in the absence of conflict, the following embodiments and features in the embodiments can be combined with each other. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present disclosure.

[0046] It should be noted that various aspects of the embodiments within the scope of the appended claims are described below. It should be apparent that the aspects described herein can be embodied in a wide variety of forms, and any specific structure and / or function described herein is merely illustrative. Based on this disclosure, it should be understood by those skilled in the art that an aspect described herein can be implemented independently of any other aspect, and two or more of these aspects can be combined in various ways. For example, any number of aspects described herein can be used to implement an apparatus and / or practice a method. In addition, other structures and / or functionalities other than one or more of the aspects described herein can be used to implement this apparatus and / or practice this method.

[0047] It should also be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present disclosure. The illustrations only show components related to the present disclosure and are not drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component can be changed at will, and the component layout type may also be more complicated.

[0048] Additionally, in the following description, specific details are provided to provide a thorough understanding of the examples. However, one skilled in the art will appreciate that the aspects described can be practiced without these specific details.

[0049] In one embodiment of the present invention, a comprehensive modular avionics system state management method is proposed, such as Figure 1-6 As shown, the integrated modular avionics system status management method is implemented based on the common processing module CPM, the internal switch NSM, the external switch RSU and the remote data interface unit RDCU; the CPM and NSM are arranged inside the single-side cabinet ACP of the integrated modular avionics system IMA and are powered by the power management module PSM; the RSU and RDCU are arranged outside the ACP;

[0050] The system-level state management function residing on the CPM is responsible for reading the modular avionics system configuration files and receiving external input information for calculation and processing. It then distributes the overall state of the entire modular avionics system to the internal switch (NSM), external switch (RSU), and remote data interface unit (RDCU) via A664 bus messages for use during the initialization process. The device-level state management function residing on the CPM is also responsible for providing the calculated restricted / unrestricted state information to the modular avionics system-level state management function. The device-level state management function is also responsible for completing the initialization state transition of the CPM.

[0051] The state management function of NSM and RSU only includes the device level, which is responsible for receiving the modular avionics system-level state distributed by CPM and storing the restricted / unrestricted fields in the modular avionics system-level state into non-volatile memory for initialization after restart. At the same time, the device-level state management function of NSM and RSU is also used to complete the initialization state switching of NSM and RSU;

[0052] The state management function of the RDCU only includes the device level, which is responsible for receiving the modular avionics system-level state distributed by the CPM and storing the restricted / unrestricted fields in the modular avionics system-level state into the non-volatile memory for initialization after restart. At the same time, the device-level state management function of the RDCU is also used to complete the RDCU initialization state switching.

[0053] In this embodiment, the integrated modular avionics system status management method is implemented based on the following methods: a central status management method, a CPM initialization status management method, an NSM and RSU initialization status management method, and an RDCU initialization status management method.

[0054] In this embodiment, the central status management method includes the following steps:

[0055] S101: Power on the PSM, RSU, and RDCU simultaneously. Inside the ACP, after the PSM is initialized, it starts to supply power to the common processing module (CPM) and the internal switch (NSM). Outside the ACP, the RSU and RDCU are both equipped with built-in power supplies to power themselves.

[0056] S102: After the PSM is initialized, power is supplied to the CPM and NSM inside the cabinet. At this time, the RSU and RDCU are both initialized and in the initialization state.

[0057] S103: Each IMA implements the migration between the initialization state, the safety state and the normal operation state according to the initialization state migration condition.

[0058] In this embodiment, the CPM initialization state management method includes the following steps:

[0059] S201: After the CPM is powered on or restarted, it enters the initialization state and enters the temporary safe state after the short PBIT is completed;

[0060] S202: In the temporary safe state, the CPM decides whether to perform a full PBIT based on the calculated temporary unrestricted / restricted state. If the state is unrestricted, the CPM performs a full PBIT and re-enters the temporary safe state after the full PBIT is completed. Otherwise, the CPM directly enters the safe state from the restricted state.

[0061] S203: After the safe state, the restricted / unrestricted state of the CPM is determined and a CPM configuration initialization check is performed. When the configuration check passes, the normal operation state is entered.

[0062] S204: In normal operation, all resources are provided and all resident applications are running.

[0063] In this embodiment, the NSM and RSU initialization state management method includes the following steps:

[0064] S301: The NSM and RSU are powered on or restarted to enter the initialization state. A brief PBIT test is started in the initialization state to determine the health status of the NSM and RSU.

[0065] S302: When the short PBIT in the restricted state determines that the NSM or RSU has no faults, or when the full PBIT in the unrestricted state determines that the switch has no faults, the NSM or RSU enters the safe state.

[0066] S303: Perform a configuration check in the safe state. After the configuration check, the NSM and RSU enter the normal operation state.

[0067] In this embodiment, the RDCU initialization state management method includes the following steps:

[0068] S401: When the RDCU is powered on for the first time or restarted, it enters the initialization state. If the PBIT test does not detect any fault in the initialization state, it enters the safe state;

[0069] S402: Waiting in the safe state to receive a valid configuration list message from the avionics data network (ADN) of the integrated modular avionics system. If a valid configuration list message is received, directly entering the normal operation state; otherwise, continuing to wait;

[0070] S403: In normal operation, RDCU provides complete data conversion functions to the outside world; if the configuration list check fails in the unrestricted state, it will switch back to the safe state and continue to wait for receiving valid and available configuration list messages.

[0071] In this embodiment, an ACP includes two dedicated CPMs for system-level state management. The CPM's system-level state management includes three functions: calculation of dispatch / non-dispatch state (D / N state), calculation of data loading prohibit / allow state (DL P / A state), and system-level state distribution.

[0072] Two dedicated CPMs host device-level state management functions. In an ACP, 2 to 8 CPMs are hosted to perform device-level state management, depending on the architecture design.

[0073] In this embodiment, in an ACP, there are two NSMs to complete the distribution of system-level status, forwarding the system-level status inside the cabinet to devices outside the cabinet through the A664 bus network; at the same time, the NSM uses the received system-level status during the restart process, executing a short PBIT to complete fast startup in the restricted state and a full PBIT to complete slow startup in the unrestricted state.

[0074] In this embodiment, the RSU is configured to store the received system-level state in a non-volatile memory, and use the system-level state in the non-volatile memory for initialization during the restart process.

[0075] In this embodiment, the RDCU is used to receive the system-level status transferred out of the cabinet and transfer it to the non-volatile memory. During the device-level status management initialization process, the RDCU device is always quickly started or completely started according to the different system-level states stored in the non-volatile memory.

[0076] See also Figure 1 As shown, the method of central status management of integrated modular avionics system platform components described in the present invention includes CPM system-level status management, CPM device-level status management, switch device-level status management and remote data interface conversion unit device-level status management functions.

[0077] Step 1. To maintain the correct power-on sequence, PSM, RSU and RDCU need to be powered on at the same time, such as Figure 2 and Figure 3 As shown in the figure, inside a single ACP cabinet, after the PSM completes initialization, it begins to supply power to the Common Processing Module (CPM) and the internal switch (NSM). Outside the ACP cabinet, the external switch (RSU) and remote data conversion unit (RDCU) each have their own internal power supplies. To ensure correct timing for the entire avionics system, power must be supplied simultaneously.

[0078] Step 2. After the PSM module is initialized, power is supplied to the CPM and NSM inside the cabinet. At this time, the external switch and remote data interface conversion unit are performing their own initialization and are in the initialization state.

[0079] Step 3. Each IMA platform component implements the migration of the initialization state, the security state and the normal operation state according to the initialization state migration conditions.

[0080] Among them, the startup sequence diagram of each component executed in the unrestricted state of the IMA platform is as follows Figure 2 As shown in the figure, the startup sequence diagram of each component in the restricted state of the IMA platform is as follows Figure 3 shown. Figure 2 and Figure 3 The difference is that during initialization, the CPM calculates a restricted state and directly enters the safe state from the temporary safe state without performing a full PBIT. However, the switches NSM, RSU, and RDCU are designed to store the calculated restricted / unrestricted state in non-volatile memory for reuse upon reboot. The system-level state calculated by the CPM during this initialization process does not affect the current initialization process of these components.

[0081] The general processing module CPM initialization state management method is as follows Figure 4 The detailed steps are described as follows:

[0082] Step 1. After the CPM is powered on or restarted, it enters the initialization state and enters the temporary safe state after the short PBIT is completed.

[0083] Step 2. In the temporary safe state, the CPM module decides whether to perform a full PBIT based on the calculated temporary unrestricted / restricted state. If the state is unrestricted, the full PBIT is performed and the temporary safe state is re-entered after the full PBIT is completed; otherwise, the restricted state directly enters the safe state.

[0084] Step 3. After entering the safe state, the restricted / unrestricted state of the CPM is determined and the CPM configuration initialization check is performed. When the configuration check passes, the normal operation state is entered.

[0085] Step 4. Under normal operation, all resources are provided and all resident applications are running.

[0086] Switch initialization state management method is as follows Figure 5 The detailed steps are described as follows:

[0087] Step 1. Power on or reboot the switch to the initialization state. In the initialization state, perform a brief PBIT test to determine the health of the switch.

[0088] Step 2. When the short PBIT in the restricted state determines that the switch is not faulty, or when the full PBIT in the unrestricted state determines that the switch is not faulty, the switch enters the safe state.

[0089] Step 3. Perform a configuration check in the safe state. After the configuration check passes, the switch enters the normal operating state.

[0090] Remote Data Interface Unit RDCU initialization state management method is as follows Figure 6 The detailed steps are described as follows:

[0091] Step 1. When the RDCU is powered on for the first time or restarted, it enters the initialization state. If the PBIT test does not detect any fault in the initialization state, it enters the safe state.

[0092] Step 2. Wait in the safe state to receive a valid configuration list message from the avionics data network ADN. If a valid configuration list message is received, directly enter the normal operation state; otherwise, continue to wait.

[0093] Step 3. In normal operation, the RDCU provides complete data conversion functions. However, if the configuration list check fails in the unrestricted state, it will switch back to the safe state and continue to wait for the receipt of valid and available configuration list messages.

[0094] The above description is merely a specific embodiment of the present disclosure, but the scope of protection of the present disclosure is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this disclosure should be included in the scope of protection of the present disclosure. Therefore, the scope of protection of the present disclosure should be based on the scope of protection of the claims.

Claims

1. A method for managing the state of an integrated modular avionics system, characterized in that: The integrated modular avionics system status management method is implemented based on a common processing module (CPM), an internal switch (NSM), an external switch (RSU), and a remote data interface unit (RDCU). The CPM and NSM are arranged inside a single-side cabinet (ACP) of the integrated modular avionics system (IMA) and are powered by a power management module (PSM). The RSU and RDCU are arranged outside the ACP. The system-level state management function resident on the CPM is responsible for reading the configuration files of the modular avionics system and receiving external input information for calculation and processing. It then distributes the overall state of the entire modular avionics system to the internal switch (NSM), external switch (RSU), and remote data interface unit (RDCU) via A664 bus messages for use during the initialization process. The device-level state management function resident on the CPM is also responsible for providing the calculated restricted / unrestricted state information to the modular avionics system-level state management function. The device-level state management function is also responsible for completing the initialization state switching of the CPM. The state management function of the NSM and RSU only includes the device level, which is responsible for receiving the modular avionics system-level state distributed by the CPM and storing the restricted / unrestricted fields in the modular avionics system-level state into the non-volatile memory for initialization after restart. At the same time, the device-level state management function of the NSM and RSU is also used to complete the initialization state switching of the NSM and RSU; The RDCU's state management function only includes the device level, which is responsible for receiving the modular avionics system-level state distributed by the CPM and storing the restricted / unrestricted fields in the modular avionics system-level state in the non-volatile memory for initialization after restart. At the same time, the RDCU's device-level state management function is also used to complete the RDCU initialization state switch; The integrated modular avionics system state management method is implemented based on the following methods: a central state management method, a CPM initialization state management method, an NSM and RSU initialization state management method, and an RDCU initialization state management method; The CPM initialization state management method comprises the following steps: S201: After the CPM is powered on or restarted, it enters the initialization state and enters the temporary safe state after the short PBIT is completed; S202: In the temporary safe state, the CPM decides whether to perform a full PBIT based on the calculated temporary unrestricted / restricted state. If the state is unrestricted, the CPM performs a full PBIT and re-enters the temporary safe state after the full PBIT is completed. Otherwise, the CPM directly enters the safe state from the restricted state. S203: After the safe state, the restricted / unrestricted state of the CPM is determined and a CPM configuration initialization check is performed. When the configuration check passes, the normal operation state is entered; S204: In normal operation, all resources are provided and all resident applications are running.

2. The integrated modular avionics system status management method according to claim 1, characterized in that: The central state management method comprises the following steps: S101: Powering on the PSM, the RSU, and the RDCU simultaneously; inside the ACP, after the PSM is initialized, it starts to supply power to the common processing module CPM and the built-in switch NSM; outside the ACP, the RSU and RDCU are both provided with built-in power supplies to power themselves; S102: After the PSM is initialized, power is supplied to the CPM and NSM inside the cabinet. At this time, the RSU and RDCU both perform their own initialization and are in the initialization state. S103: Each IMA implements the migration between the initialization state, the safety state and the normal operation state according to the initialization state migration condition.

3. The integrated modular avionics system status management method according to claim 1, characterized in that: The NSM and RSU initialization state management method comprises the following steps: S301: The NSM and RSU are powered on or restarted to enter the initialization state. A brief PBIT test is started in the initialization state to determine the health status of the NSM and RSU. S302: When the short PBIT in the restricted state determines that the NSM or RSU is fault-free, or when the full PBIT in the unrestricted state determines that the switch is fault-free, the NSM or RSU enters the safe state; S303: Perform a configuration check in the safe state. After the configuration check, the NSM and RSU enter the normal operation state.

4. The integrated modular avionics system status management method according to claim 1, characterized in that: The RDCU initialization state management method comprises the following steps: S401: When the RDCU is powered on for the first time or restarted, it enters the initialization state. If the PBIT test does not detect any fault in the initialization state, it enters the safe state; S402: Waiting in the safe state to receive a valid configuration list message from the avionics data network (ADN) of the integrated modular avionics system. If a valid configuration list message is received, directly entering the normal operation state; otherwise, continuing to wait; S403: In normal operation, RDCU provides complete data conversion functions to the outside world; if the configuration list check fails in the unrestricted state, it will switch back to the safe state and continue to wait for receiving valid and available configuration list messages.

5. The integrated modular avionics system status management method according to claim 2, characterized in that: In one of the ACPs, two dedicated CPMs are included to perform system-level state management. The CPM's system-level state management includes three functions: calculation of dispatch / non-dispatch states, calculation of data loading prohibition / allowance states, and system-level state distribution. The two dedicated CPMs have a device-level state management function resident therein; and in one ACP, 2-8 CPMs are resident therein to complete the device-level state management according to different architecture designs.

6. The integrated modular avionics system status management method according to claim 1, characterized in that: In one ACP, there are two NSMs to complete the distribution of system-level status, forwarding the system-level status inside the cabinet to devices outside the cabinet through the A664 bus network; at the same time, the NSM uses the received system-level status during the restart process, executing a short PBIT to complete fast startup in the restricted state and a full PBIT to complete slow startup in the unrestricted state.

7. The integrated modular avionics system status management method according to claim 1, characterized in that: The RSU is used to store the received system-level state in a non-volatile memory, and use the system-level state in the non-volatile memory for initialization during a restart process.

8. The integrated modular avionics system status management method according to claim 3, characterized in that: The RDCU is used to receive the system-level status transferred from the cabinet and transfer it to the non-volatile memory. During the device-level status management initialization process, the RDCU device is always quickly started or completely started according to the different system-level states stored in the non-volatile memory.

Images