A power distribution control logic verification method
By constructing a power distribution control logic verification model, the problems of poor software reliability and long development cycle caused by the complexity of control logic in the power distribution system of multi-electric aircraft are solved, and efficient control logic verification and reliability improvement are achieved.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- TIANJING AVIATION ELECTRO-MECHANICAL CO LTD
- Filing Date
- 2022-11-11
- Publication Date
- 2026-06-09
AI Technical Summary
In existing technologies for power distribution systems of multi-electric aircraft, the control logic is complex and numerous, resulting in poor software reliability, long development cycles, difficulty in detecting non-closed logic in the early stages of design, and maintenance difficulties.
A power distribution control logic verification model was established, including a control module, a hardware interlocking module, and a parallel detection module. The rationality and compliance of the control logic were verified by simulating the controller and contactor states of the primary power distribution device.
This enabled efficient verification in the early stages of design, reduced trial-and-error costs and development cycles, and improved the reliability of the aircraft's power distribution network and the accuracy of its control logic.
Smart Images
Figure CN116184870B_ABST
Abstract
Description
Technical Field
[0001] This invention pertains to aviation power distribution systems and relates to a method for verifying power distribution control logic. Background Technology
[0002] The aircraft power supply and distribution system is an important component of modern aircraft. It provides electrical energy to the aircraft's electrical equipment to meet the specified requirements and ensure the normal operation of the equipment. The power supply and distribution system consists of two main parts: the power supply system and the power distribution system, including the generation, control, transformation and distribution of electrical energy.
[0003] The power distribution system rationally allocates power to the secondary busbars and provides power distribution control and protection functions. When one or more generators fail, the control busbars switch to each other according to specific logic conversion requirements to improve the power supply guarantee capability of the on-board load.
[0004] With the development of more-electric aircraft, power distribution systems are becoming increasingly complex, leading to a gradual increase in the control requirements of primary power distribution devices, more numerous control states, and more complex control logic. Currently, the implementation method for the control logic of primary power distribution devices involves creating a truth table of input-output relationships, followed by manual code implementation. Code verification needs to be conducted on physical products, making the verification process relatively late in the overall R&D cycle. As the control logic becomes increasingly complex, this method results in poor software reliability, low efficiency, long development cycles, and difficulty in testing. It is also difficult to detect instances of incomplete logic during state transitions in the early design stages, making modifications and maintenance cumbersome and inconvenient. Summary of the Invention
[0005] The purpose of this invention is to provide a method for verifying power distribution control logic, enabling debugging and verification to be carried out in the early stages of power distribution device design, thereby reducing trial and error costs and R&D cycle, and achieving efficient development.
[0006] The objective of this invention can be achieved through the following technical solutions:
[0007] A method for verifying power distribution control logic includes the following steps:
[0008] A power distribution control logic verification model is established. This model includes a control module, a hardware interlocking module, and a parallel detection module. Specifically, a control module is established based on the control logic, signal input, and output control signals of the controller in the primary power distribution device to simulate the controller of the primary power distribution device. A hardware interlocking module is established based on the contactor and intermediate relay settings and the interconnection and interlocking of lines in the primary power distribution device. Contactors and intermediate relays connect to busbars, power supplies, and controllers to form a power supply and distribution system. A parallel detection module is established, using the contactor status in the primary power distribution device as the module input, dividing the power supply path for each busbar, and outputting the number of power supply paths for each busbar. The parallel detection module model is used to detect whether there is a parallel power supply situation in the busbars.
[0009] Using the aircraft power supply status as input, test cases are established for the following working modes: normal power supply, one power supply failure, two power supply failures, ..., all power supply failures. The above working modes are then arranged in pairs to obtain the test cases for the power distribution control logic verification model.
[0010] Based on the test cases, the power distribution control logic verification model was simulated to obtain the logic control results and the parallel connection of the busbars.
[0011] The hardware interlocking module is connected to the signal input, control module, and parallel detection module. The hardware interlocking module is equipped with contactor GB and its intermediate relay, and busbar connected to contactor BTB and its intermediate relay. It receives control signals from GB and BTB output by the control module to control the corresponding contactors. At the same time, through the interconnection of intermediate relays, it restricts the operation of the cross-linked contactors when GB and BTB operate.
[0012] The contactor status within the hardware interlocking module is provided to the control module and parallel detection module for acquisition via the contactor auxiliary contacts.
[0013] The control module is connected to the hardware interlocking module and is used to collect the contactor status in the hardware interlocking module. The power supply and power network operation status are known through the contactor status. The control module uses a state machine to describe the relationship between the state input, control output and control response.
[0014] The parallel detection module is used to collect the status of GB and BTB contactors output by the hardware interlocking module; to set the direct power supply / conversion power supply path for each busbar; the module counts the effective power supply paths of each busbar. If the number of effective power supply paths of a busbar is equal to 1, it means that the busbar is powered normally; if the number of effective power supply paths of a busbar is greater than 1, it means that the busbar is connected in parallel; if the number of effective power supply paths of a busbar is less than 1, it means that the busbar has lost power.
[0015] Methods for determining a valid power supply circuit include:
[0016] For a busbar's direct power supply path, if the GB (Power Supply Module) of the direct power supply path is connected, then the direct power supply path of the busbar is a valid power supply path.
[0017] Methods for determining a valid power supply circuit also include:
[0018] For a busbar's switching power supply path, if GB and BTB of any switching power supply path are connected, the switching power supply path of that busbar is a valid power supply path.
[0019] Working mode is 2 n The number of power sources is n.
[0020] The beneficial effects of this invention are:
[0021] The power distribution control logic verification of the primary power distribution device of the present invention is carried out by constructing interlocking devices, control logic and parallel detection modules for simulation analysis, thereby realizing the conformity and rationality verification of the power distribution control logic and improving the reliability of the aircraft power distribution network. Attached Figure Description
[0022] Figure 1 This is a cross-linking diagram of the primary power distribution system of a certain type of aircraft.
[0023] Figure 2 This is a power distribution control logic model and detection module architecture diagram. Detailed Implementation
[0024] 1. A method for verifying power distribution control logic, comprising the following steps:
[0025] (1) Establish a control module based on the control logic, signal input and output control signals of the controller in the primary power distribution device;
[0026] (2) Establish a hardware interlocking module based on the contactor and intermediate relay settings and the interconnection and interlocking of lines in the primary power distribution device;
[0027] (3) Establish a parallel detection module model, take the contactor status in the primary power distribution device as the module input, divide the power supply path of each busbar, and take the number of power supply paths of each busbar as the output;
[0028] (4) Test cases were developed, using the aircraft power supply operation status as input, and test cases were established for the following operating modes: normal power supply operation, one power supply failure, two power supply failures, ..., all power supply failures. The above operating modes were then arranged in pairs using a permutation and combination function to obtain the test cases for verifying the model.
[0029] (5) Perform model simulation to obtain the logic control results and the parallel connection of the busbars.
[0030] The power distribution control logic verification model includes signal input, hardware interlocking module, control module, parallel detection module, and result output.
[0031] The hardware interlocking module is connected to the signal input, control module, and parallel detection module. The hardware interlocking module includes a GB (Guard Gate) and its intermediate relays, and a BTB (Block Detector) and its intermediate relays. It receives control signals from the GB and BTB to control the corresponding contactors, and simultaneously, through the interconnection of the intermediate relays, restricts the operation of the contactors linked to the GB and BTB when they operate. The contactor status within the hardware interlocking module is provided to the control module and parallel detection module for acquisition via contactor auxiliary contacts.
[0032] The control module is connected to the hardware interlocking module, collects the contactor status from the hardware interlocking module, and uses the contactor status to understand the operating status of the power supply and power network. The control module uses a state machine to describe the relationship between state inputs, control outputs, and control responses.
[0033] The parallel detection module collects the GB and BTB contactor status output by the hardware interlocking module. It sets the power supply / transfer paths that can power the busbars. The module counts the power supply paths for each busbar. If the number of power supply paths for a busbar is equal to 1, it indicates that the busbar is supplying power normally; if the number of power supply paths for a busbar is greater than 1, it indicates that the busbar is in parallel power supply; if the number of power supply paths for a busbar is less than 1, it indicates that the busbar has lost power.
[0034] The model test includes all operating modes of the power supply. At the same time, a permutation and combination function is used to extract two permutations of the operating modes from all the operating modes as test cases.
[0035] In one embodiment, such as Figure 1 The diagram shown is a cross-connection diagram of the primary power distribution system of a certain type of aircraft. The primary power distribution system is externally connected to the generator feeder lines and the control signals of the generator control unit (GCU). Internally, the primary power distribution system includes the following components: generator breaker (GB), AC busbar (ACBUS), busbar connecting contactor (BUS TIE Breaker (BTB), and controller.
[0036] The primary power distribution unit is interconnected and abstracted to establish a verification model for the power distribution control logic. The power supply operating status is used as a signal input, the control logic of the controller within the primary power distribution unit is abstracted as a control module, and other components in the primary power distribution unit are established as hardware interlocking modules.
[0037] like Figure 2 The diagram illustrates a power distribution control logic model and detection module architecture. It includes signal input, a hardware interlocking module, a control module, a parallel detection module, and a detection output. The hardware interlocking module is connected to the signal input, control module, and parallel detection module. The hardware interlocking module includes a gate control (GB) and its intermediate relays, and a gate circuit breaker (BTB) and its intermediate relays. It receives GB control signals from the gate control unit (GCU) and BTB control signals from the control module to control the corresponding contactors. Simultaneously, through the interconnection of intermediate relays, it restricts the operation of the cross-connecting contactors when GB and BTB operate, preventing AC parallel connection. The contactor status within the hardware interlocking module is provided to the control module and parallel detection module for acquisition via contactor auxiliary contacts.
[0038] The control module is connected to the hardware interlocking module, and collects the contactor status from the hardware interlocking module to understand the operating status of the power supply and power network. Both controller 1 and controller 2 collect the GB status. Controller 1 also collects the BTB1, BTB2, and BTB5 statuses and controls BTB1, BTB2, and BTB5. Controller 2 also collects and controls BTB3 and BTB4. Controller 1 and 2 exchange the BTB status information collected by each other via communication.
[0039] The control module uses a state machine to describe the state inputs, control outputs, and control response relationships. When a power supply failure occurs, the system controls the predetermined BTB contactor to isolate the faulty part of the power grid and establish a power transfer path between the normal power supply and the failed power supply busbar.
[0040] The parallel detection module collects the GB and BTB contactor status output by the hardware interlocking module. The parallel detection module pre-sets a direct power supply / conversion power supply path for each busbar. For example... Figure 1As shown, AC BUS 1 to AC BUS 4 each have four power supply paths. For example, the power supply path for AC BUS 1 can be a direct power supply path from GEN1 to AC BUS 1 (GEN1-GB1-ACBUS 1), a switching power supply path from GEN2 to AC BUS 1 (GEN2-GB2-ACBUS 2-BTB2-BTB1-AC BUS 1), a switching power supply path from GEN3 to AC BUS 1 (GEN3-GB3-AC BUS 3-BTB3-BTB5-BTB1-AC BUS 1), and a switching power supply path from GEN4 to AC BUS 1 (GEN4-GB4-AC BUS 4-BTB4-BTB5-BTB1-AC BUS 1). When all the preset contactors on the power supply path are turned on, a path from the power source to the busbar is formed, and that power supply path is valid. The module counts the effective power supply paths for each busbar. If the number of effective power supply paths for a busbar is equal to 1, it indicates that the busbar is supplying power normally. If the number of effective power supply paths for a busbar is greater than 1, it indicates that the busbar is supplying power in parallel. If the number of effective power supply paths for a busbar is less than 1, it indicates that the busbar has lost power. The operating status of the busbar is output as the number of power supply paths to reflect whether the power distribution control logic conforms to the design.
[0041] Furthermore, to fully verify the correctness of the power distribution control logic, the model test cases not only included all operating modes of the power supply, namely 16 operating modes such as all 4 generators operating normally, 1 generator failing, 2 generators failing, 3 generators failing, and 4 generators failing, but also used a permutation and combination function to extract two permutations of the 16 operating modes, resulting in a total of 240 test cases.
[0042] This invention verifies the consistency between the control logic's operational results and the design by modeling and simulating the control logic of primary power distribution devices. This allows for control logic verification in the early design stages, ensuring the accuracy of the control logic. Furthermore, for non-parallel aircraft AC power networks, based on control logic verification, the invention verifies the existence of parallel operation in the AC network by calculating the busbar power supply path. Applying this invention can shorten the design cycle of primary power distribution devices, reduce trial-and-error and iteration costs, and improve the reliability of aircraft power distribution control.
Claims
1. A method for verifying power distribution control logic, characterized in that, Includes the following steps: Establish a power distribution control logic verification model; the power distribution control logic verification model includes a control module, a hardware interlocking module, and a parallel detection module; specifically, based on the control logic, signal input and output control signals of the controller in the primary power distribution device, a control module is established to simulate the controller of the primary power distribution device; based on the contactor, intermediate relay settings and line interconnection and interlocking status in the primary power distribution device, a hardware interlocking module is established; Contactors and intermediate relays connect to busbars, power supplies, and controllers to form a power supply and distribution system; A parallel detection module is established, taking the contactor status in the primary power distribution device as the module input, dividing the power supply path of each busbar, and taking the number of power supply paths of each busbar as the output; the parallel detection module model is used to detect whether there is a parallel power supply situation in the busbar. Using the aircraft power supply status as input, test cases are established for the following working modes: normal power supply operation, one power supply failure, two power supply failures, multiple power supply failures, and all power supplies failure. The above working modes are then arranged in pairs to obtain test cases for the power distribution control logic verification model; Based on the test cases, the power distribution control logic verification model was simulated to obtain the logic control results and the parallel connection of the busbars.
2. The method according to claim 1, characterized in that, The hardware interlocking module is connected to the signal input, control module, and parallel detection module. The hardware interlocking module is equipped with contactor GB and its intermediate relay, and busbar connected to contactor BTB and its intermediate relay. It receives control signals from GB and BTB output by the control module to control the corresponding contactors. At the same time, through the interconnection of intermediate relays, it restricts the operation of the cross-linked contactors when GB and BTB operate.
3. The method according to claim 2, characterized in that, The contactor status within the hardware interlocking module is provided to the control module and parallel detection module for acquisition via the contactor auxiliary contacts.
4. The method according to claim 2, characterized in that, The control module is connected to the hardware interlocking module and is used to collect the contactor status in the hardware interlocking module. The power supply and power network operation status are known through the contactor status. The control module uses a state machine to describe the relationship between the state input, control output and control response.
5. The method according to claim 2, characterized in that, The number of control modules should be consistent with the number of controllers of the verification object; the interconnection between control modules is used to describe the data interaction between controllers.
6. The method according to claim 2, characterized in that, The control module includes a data processing module, which describes the status, input data processing, and timing.
7. The method according to claim 2, characterized in that, The parallel detection module is used to collect the status of GB and BTB contactors output by the hardware interlocking module; to set the direct power supply / conversion power supply path for each busbar; the module counts the effective power supply paths of each busbar. If the number of effective power supply paths of a busbar is equal to 1, it means that the busbar is powered normally; if the number of effective power supply paths of a busbar is greater than 1, it means that the busbar is connected in parallel; if the number of effective power supply paths of a busbar is less than 1, it means that the busbar has lost power.
8. The method according to claim 2, characterized in that, Methods for determining a valid power supply circuit include: For a busbar's direct power supply path, if the GB (Power Supply Module) of the direct power supply path is connected, then the direct power supply path of the busbar is a valid power supply path.
9. The method according to claim 2, characterized in that, Methods for determining a valid power supply circuit also include: For a busbar's switching power supply path, if GB and BTB of any switching power supply path are connected, the switching power supply path of that busbar is a valid power supply path.
10. The method according to claim 1, characterized in that, Working mode is 2 n The number of power sources is n.