On-line configuration system and method for landing gear control redundancy

Abstract

The application discloses an online configuration system and method for landing gear control redundancy, wherein a comprehensive control system publishes a redundancy scheme according to system working states and application scene requirements; a redundancy monitoring module analyzes redundancy configuration and scheduling strategy information according to the received redundancy scheme, realizes online redundancy configuration and recombination of a control module, carries out redundancy management on the control module according to the redundancy strategy, monitors the health state of the control module and reports the comprehensive control system, and outputs an effective driving signal to an element driving module; a landing gear control signal is provided for the control module by a landing gear control device; and the control module outputs a driving signal to the element driving module after logical calculation according to the received landing gear control signal. The application realizes online on-demand configuration of control redundancy and dynamic management of redundancy scheduling strategy.

Description

Technical Field

[0001] This invention relates to the field of landing gear control, and in particular to an online configuration system and method for landing gear control redundancy. Background Technology

[0002] Redundancy design is a common safety design approach in landing gear control systems. Typically, the redundancy configuration and scheduling strategies for landing gear control systems or equipment are proposed during the requirements phase, implemented during the development phase, and integrated and verified during the verification phase. Hardware redundancy resource configuration combinations and redundancy scheduling strategy designs generally require multiple rounds of iterative verification to achieve optimal results. Changes to redundancy configurations during iteration are complex and difficult, involving numerous related hardware resources. The subsequent verification of redundancy scheduling strategies is also relatively delayed, leading to long design and verification cycles and high verification costs. Furthermore, the entire redundancy configuration and scheduling strategy functionality is fixed and does not support handling multiple redundancy combinations or dynamic setting and use of multiple redundancy scheduling strategies. Therefore, a simpler method is needed that supports online, on-demand configuration of landing gear control redundancy and a real-time verification system for issuing scheduling strategies. Summary of the Invention

[0003] The technical problem to be solved by the present invention is to provide an online configuration system and method for landing gear control redundancy, which supports online configuration of landing gear control redundancy as needed, in order to address the shortcomings of the existing technology.

[0004] To solve the above-mentioned technical problems, the technical solution adopted by the present invention is: an online configuration system for landing gear control redundancy, comprising:

[0005] The integrated control system is used to formulate a first redundancy scheme and a second redundancy scheme, and to receive the working status information of each control module sent by the redundancy monitoring module. Based on the working status information of each control module, the first redundancy scheme or the second redundancy scheme is sent to the redundancy monitoring module.

[0006] The redundancy monitoring module is used to parse the redundancy scheme sent by the integrated control system, obtain redundancy configuration byte information and redundancy scheduling byte information, and send the redundancy configuration byte information of the redundancy scheme to the first control module, the second control module and the third control module; and, according to the redundancy scheduling byte information, output the first combination of enable signals and the second combination of enable signals.

[0007] The first control module, the second control module, and the third control module are used to compare each byte of the redundancy scheduling byte information bit by bit, automatically put into the retraction or turning function mode, and issue landing gear retraction or turning control signals according to the function operation logic.

[0008] The valve drive module is used to drive the retractable solenoid valve and the turning servo valve to work according to the enable signal and the control signals issued by the first control module, the second control module and the third control module.

[0009] The first redundancy scheme refers to the first control module and the second control module forming a first combination to realize the retraction and extension control function, and the third control module forming a second combination to realize the turning control function.

[0010] The second redundancy scheme refers to the first control module forming the first combination to realize the retraction and extension control function, and the second module and the third module forming the second combination to realize the turning control function.

[0011] This invention addresses the problems of current landing gear control redundancy configuration design and modification being complex and difficult, involving numerous hardware resources, long verification cycles and high verification costs for redundancy scheduling strategies, and not supporting the dynamic setting and use of redundancy scenarios and strategies. It provides a simpler method that supports online on-demand configuration of landing gear control redundancy. While enabling online on-demand configuration and reconfiguration of control redundancy and dynamic management of redundancy scheduling strategies, it improves the ability to rationally allocate redundancy resources and optimize the design and advance adaptation and verification of scheduling strategies. It supports the dynamic setting and use of multiple redundancy scenarios and redundancy scheduling strategies. The method of this invention is simple and feasible, with a short design verification cycle and low verification cost.

[0012] In this invention, when the first control module, the second control module, and the third control module are all operating normally, the integrated control system sends a first redundancy scheme to the redundancy monitoring module.

[0013] In this invention, when the third control module malfunctions, the integrated control system sends a second redundancy scheme to the redundancy monitoring module.

[0014] This invention does not require multiple iterations of verification of hardware redundancy resource configuration combinations and redundancy scheduling strategies. Therefore, redundancy configuration changes are simple and involve few hardware resources.

[0015] In this invention, in order to achieve optimal redundancy configuration, when the third control module malfunctions, the third control module is restarted via hot reset. If the third control module malfunctions after restarting, the third control module is forcibly kept in a reset state.

[0016] In this invention, when the third control module malfunctions, it is restarted via a hot reset. If the third control module malfunctions after three consecutive restarts, it is forcibly kept in a reset state.

[0017] As an inventive concept, the present invention also provides a landing gear control system, including the above-mentioned online configuration system; the first control module, the second control module and the third control module are all connected to the drive module of the landing gear drive element.

[0018] As an inventive concept, the present invention also provides an online configuration method for landing gear control redundancy using the above-described system, the method comprising:

[0019] S1. Set the first redundancy scheme;

[0020] S2. Parse the first redundancy scheme to obtain redundancy configuration byte information and redundancy scheduling byte information;

[0021] S3. After comparing each byte of the redundancy configuration byte information bit by bit, it automatically enters the retraction or turning function mode and issues landing gear retraction or turning control signals according to the function operation logic.

[0022] S4. Calculate the solenoid valve drive signal based on the landing gear retraction or turning control signal, and drive the retraction solenoid valve and the turning servo solenoid valve to work.

[0023] S5. Monitor the working status information of the first control module, the second control module and the third control module. If the working status of the third control module is abnormal, replace the first redundancy scheme with the second redundancy scheme and return to step S2.

[0024] Furthermore, the method of the present invention also includes: when the working state of the third control module is abnormal, the third control module is restarted by hot reset; if the working state of the third control module is abnormal after restarting, the third control module is forcibly kept in reset; if the working state of the third control module is normal after restarting, the turning control function is realized by using the second combination.

[0025] Furthermore, in this invention, the third control module is restarted via hot reset three times.

[0026] Compared with the prior art, the beneficial effects of the present invention are as follows: while realizing online on-demand configuration and reorganization of control redundancy and dynamic management of redundancy scheduling strategies, the present invention improves the ability to rationally allocate redundancy resources and optimize the design and early adaptation and verification of scheduling strategies, supports the dynamic setting and use of multiple redundancy combination scenarios and multiple redundancy scheduling strategies, and has the characteristics of simple and feasible implementation method, short design verification cycle and low verification cost. Attached Figure Description

[0027] Figure 1 This is a block diagram of the overall architecture of an embodiment of the present invention;

[0028] Figure 2This is a block diagram illustrating the logic principle of the first redundancy scheme in an embodiment of the present invention.

[0029] Figure 3 This is a block diagram illustrating the logic principle of the second redundancy scheme in an embodiment of the present invention. Detailed Implementation

[0030] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0031] In this document, the terms "first," "second," and other similar words are not intended to imply any order, quantity, or importance, but are merely used to distinguish different elements. The terms "one," "a," and other similar words are not intended to indicate the existence of only one of the stated things, but rather that the description refers only to one of the stated things, which may have one or more. The terms "comprising," "including," and other similar words are intended to indicate a logical relationship, not a spatial relationship. For example, "A includes B" means that logically B belongs to A, not that spatially B is located inside A. Furthermore, the meanings of the terms "comprising," "including," and other similar words should be considered open-ended, not closed. For example, "A includes B" means that B belongs to A, but B does not necessarily constitute all of A; A may also include other elements such as C, D, and E.

[0032] Example 1

[0033] This embodiment provides an online configuration system for landing gear control redundancy, including a redundancy monitoring module, a control module, a component drive module, an integrated control system, landing gear control equipment, and landing gear drive components. The integrated control system publishes redundancy schemes based on system operating status and application scenario requirements. The redundancy monitoring module, based on the received redundancy schemes, parses information such as redundancy configuration and scheduling strategies, realizes online redundancy configuration and reorganization of the control module, manages the redundancy of the control module according to the redundancy strategy, monitors the health status of the control module and reports it to the integrated control system, and outputs an effective enable drive signal to the component drive module. The landing gear control equipment provides landing gear control signals to the control module. The control module, based on the received landing gear control signals, logically calculates the drive signals and outputs them to the component drive module. The component drive module integrates the drive signals from the redundancy monitoring module and the control module to enable the landing gear drive components to operate. The landing gear drive components actually drive the landing gear actuation mechanism.

[0034] The embodiments of the present invention realize online on-demand configuration of control redundancy and dynamic management of redundancy scheduling strategies, improve the ability to configure and reorganize landing gear control redundancy resources in multiple scenarios, optimize the design of multiple scheduling strategies, and verify them in advance, thus providing a strong guarantee for achieving high safety and high reliability of the landing gear control system.

[0035] like Figure 1 As shown, the system in this embodiment includes one redundancy monitoring module, three control modules, one component drive module, one integrated control system, one landing gear control device, and one landing gear drive component. The interface design between each control module and the redundancy monitoring module and component drive module is identical, and their internal architecture and functional design can be implemented as needed according to actual business requirements.

[0036] The working logic principle of implementing online redundancy configuration and scheduling of two redundancy schemes in a single verification process is as follows: Figure 2 and Figure 3 To more clearly and concisely illustrate this invention, it is agreed that... Figure 2 and Figure 3 The three control modules are physically identical and all implement retraction and steering control functions. The retraction solenoid valve and steering servo valve are selected as the landing gear drive components, and the valve drive module is used as the component drive module. The retraction and steering control functions primarily provide 28V drive signals to the retraction solenoid valve and steering servo valve.

[0037] The redundancy scheme is transmitted via RS422 bus data packets. The data packet consists of five parts: header, signature, redundancy configuration byte, redundancy scheduling byte, and checksum (which can be modified according to the extension). The signature is set to 0x2A, the header to 0x55AA, and the checksum is the lower 8 bits of the sum of the signature, redundancy configuration byte, and redundancy scheduling byte.

[0038] a) Redundancy Scheme 1 (First Redundancy Scheme) Configuration:

[0039] 1) Redundancy configuration byte: 0xD3, corresponding to binary 11010011, that is, control module 1 (corresponding to bit 8, 1 indicates valid, control module 1 is the first control module) and control module 2 (corresponding to bit 7, 1 indicates valid, control module 2 is the second control module) form combination 1 (corresponding to bit 6, 0 indicates combination 1), which constitutes the take-off and extend control redundancy and provides take-off and extend control function (corresponding to bit 5, 0 indicates take-off and extend control); control module 3 (corresponding to bit 4, 1 indicates valid, control module 3 is the third control module) alone forms combination 2 (corresponding to bit 2, 1 indicates combination 2), which provides turning control function (corresponding to bit 1, 1 indicates turning control); bit 3 0 indicates control module invalid, 1 indicates control module valid;

[0040] 2) Redundancy scheduling bytes:

[0041] 0x8C: Corresponds to binary 10001100, meaning that by default, control module 1 provides the control function for the transmission and reception of combination 1 upon power-up (corresponding to bit 8, 0 indicates control module 1 is the master controller, 1 indicates control module 2 is the master controller). Control modules 1 and 2 adopt a hot backup working mechanism (corresponding to bit 7, 0 indicates hot backup, 1 indicates cold backup). When either control module fails, it automatically switches to another normally functioning control module (corresponding to bit 6, 1 indicates automatic switching, 0 indicates no switching); bits 5 and 1 indicate the redundancy scheduling configuration enabled for combination 1 and combination 2 respectively, 1 indicates enabled, 0 indicates disabled; bit 2 is used for the switching indication of combination 2, with the same meaning as bit 6; bit 3 is used for the cold and hot backup indication of combination 2, with the same meaning as bit 7; bit 4 is used for the master / standby control indication of combination 2.

[0042] Similar to the 8th bit, 0 indicates that the control module 3 is the main controller, providing turning control function;

[0043] 0xB3: corresponds to binary 10110011, which means that either control module of combination 1 (5th bit) or combination 2 (1st bit) has malfunctioned and is restarted by hot reset. If it fails to work normally for 3 consecutive times (3rd-4th bits, 7th-8th bits), the control module is isolated, or the reset state is forcibly maintained (2nd and 5th bits, 0 indicates reset).

[0044] Corresponding data packet (hexadecimal): 55AA 2A D3 8C B3 3C

[0045] b) Redundancy Scheme Two (Second Redundancy Scheme) Configuration:

[0046] 1) Redundancy configuration byte: 0xB1, corresponding to binary 10110001, meaning that control module 1 alone constitutes combination 1.

[0047] Provides retraction and extension control functions; control module 2 and control module 3 form combination 2, providing turning control redundancy.

[0048] Provides turning control functionality;

[0049] 2) Redundancy scheduling bytes:

[0050] 0xD8: corresponds to binary 11011000, i.e. combination 2. By default, the turning control function is provided by control module 3 upon power-up. Control module 2 and control module 3 adopt a hot backup working mechanism. When either control module fails, it will automatically switch to the other normally operating control module. By default, control module 1 provides the retraction and extension control function.

[0051] 0xB3: corresponds to binary 10110011, which means that either control module of combination 1 or combination 2 has malfunctioned and is restarted by hot reset. If it fails to work normally after 3 consecutive attempts, the control module is isolated, or the reset state is forcibly maintained.

[0052] In this embodiment of the invention, when restarting via hot reset, the number of restarts is not limited; one or more restarts are acceptable.

[0053] Note: The meaning of each byte in redundancy scheme 2 is the same as that in redundancy scheme 1, and will not be described in detail again.

[0054] Corresponding data packet (hexadecimal): 55AA 2A B1 D8 B3 66.

[0055] The specific working logic is as follows:

[0056] 1) such as Figure 2 As shown, the integrated control system formulates redundancy scheme one (55AA 2A D3 8C B3 3C) and sends the redundancy scheme data packet to the redundancy monitoring module via RS422 bus;

[0057] 2) The redundancy monitoring module receives the RS422 bus signal through the communication interface. After the core processor data packet parsing software function parses the feature code 2A, it is identified as a redundancy scheme. The data packet is then compared and parsed to extract the corresponding redundancy configuration bytes and redundancy scheduling bytes.

[0058] 3) The redundancy monitoring module sends the redundancy configuration byte information to control module 1, control module 2 and control module 3, and at the same time monitors the working status of the three control modules and reports it to the integrated control system through the bus interface in the form of RS422 bus signal.

[0059] 4) After receiving the redundancy configuration byte information sent by the redundancy monitoring module, the configuration circuits of control module 1, control module 2 and control module 3 compare each bit of the byte information bit by bit by the microprocessor and then switch to run the specified take-off or turn function to realize dynamic redundancy configuration.

[0060] 5) After receiving the landing gear retraction or turning control signal provided by the landing gear control equipment, the signal interfaces of control module 1, control module 2 and control module 3 calculate the solenoid valve drive signal according to the business control logic of landing gear retraction or turning and output it to the valve drive module.

[0061] 6) The redundancy monitoring module, based on the parsed redundancy scheduling byte information, outputs drive enable signals for combination 1 and combination 2 through the enable interface after being processed by the core processor. Under normal circumstances, the drive output for the retraction and extension function of control module 1 and the drive output for the turning function of control module 3 are enabled, thereby realizing the dynamic execution of the redundancy scheduling strategy;

[0062] 7) The drive logic interface of the valve drive module receives the drive enable signal output by the redundancy monitoring module and the drive signals output by the three control modules respectively. The drive output circuit generates and outputs the power signals of the solenoid valve and the turning servo valve, respectively driving the solenoid valve and the turning servo valve to work.

[0063] 8) After receiving the control module operating status information sent by the redundancy monitoring module, the integrated control system identifies an abnormal operation of control module 3 and can send the redundancy scheme data packet of redundancy scheme two to the redundancy monitoring module via the RS422 bus as needed. Figure 3 As shown;

[0064] 9) The redundancy monitoring module and each control module execute the same procedure as steps 2)-7). According to the configuration of redundancy scheme 2, the redundancy monitoring module enables the output of the retraction function of control module 1 and enables the output of the turning function of control module 2 to realize the dynamic execution of the redundancy scheduling strategy. At the same time, the control module 3 is restarted by hot reset. If the control module 3 works normally, the turning control redundancy of combination 2 can be realized. Otherwise, the control module 3 will be forced to maintain the reset function, that is, the redundancy fault is isolated, until the system is powered off.

[0065] Example 2

[0066] Embodiment 2 of the present invention provides a landing gear control system corresponding to Embodiment 1 above, which includes the online configuration system of Embodiment 1 above; the first control module, the second control module and the third control module are all connected to the drive module of the landing gear drive element.

[0067] The process of implementing online redundancy configuration in the control system of this embodiment is the same as that in Embodiment 1, and will not be repeated here.

[0068] Example 3

[0069] Embodiment 3 of the present invention provides an online configuration method for landing gear control redundancy, the method comprising:

[0070] S1. Set the first redundancy scheme;

[0071] S2. Parse the first redundancy scheme to obtain redundancy configuration byte information and redundancy scheduling byte information;

[0072] S3. After comparing each byte of the redundancy configuration byte information bit by bit, it automatically enters the retraction or turning function mode and issues landing gear retraction or turning control signals according to the function operation logic.

[0073] S4. Calculate the solenoid valve drive signal based on the landing gear retraction or turning control signal, and drive the retraction solenoid valve or turning servo solenoid valve to work.

[0074] S5. Monitor the working status information of the first control module, the second control module and the third control module. If the working status of the third control module is abnormal, replace the first redundancy scheme with the second redundancy scheme and return to step S2.

[0075] The online configuration method in this embodiment is implemented based on the online configuration system of Embodiment 1.

[0076] In this embodiment, when the third control module is in an abnormal working state, it is restarted by hot reset. If the third control module is in an abnormal working state after restarting, it is forcibly kept in a reset state. If the third control module is in a normal working state after restarting, the turning control function is implemented using the second combination.

[0077] Example 4

[0078] Embodiment 4 of the present invention provides a computer-readable storage medium corresponding to Embodiment 1 above, on which a computer program / instructions are stored. When the computer program / instructions are executed by a processor, they implement the steps of the method of Embodiment 1 above.

[0079] A computer-readable storage medium can be a tangible device that holds and stores instructions for use by an instruction execution device. A computer-readable storage medium can be, for example, but not limited to, an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any combination thereof.

[0080] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code. The solutions in the embodiments of this application can be implemented in various computer languages, such as the object-oriented programming language Java and the interpreted scripting language JavaScript.

[0081] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0082] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0083] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0084] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.

Claims

1. An online configuration system for landing gear control redundancy, characterized in that, include: The integrated control system is used to formulate a first redundancy scheme and a second redundancy scheme, and to receive the working status information of each control module sent by the redundancy monitoring module. Based on the working status information of each control module, the first redundancy scheme or the second redundancy scheme is sent to the redundancy monitoring module. The redundancy monitoring module is used to parse the redundancy scheme sent by the integrated control system, obtain redundancy configuration byte information and redundancy scheduling byte information, and send the redundancy configuration byte information of the redundancy scheme to the first control module, the second control module and the third control module; and, according to the redundancy scheduling byte information, output the first combination of enable signals and the second combination of enable signals. The first control module, the second control module, and the third control module are used to compare each byte of the redundancy scheduling byte information bit by bit, automatically put into the retraction or turning function mode, and issue landing gear retraction or turning control signals according to the function operation logic. The valve drive module is used to drive the retractable solenoid valve and the turning servo valve to work according to the enable signal and the control signals issued by the first control module, the second control module and the third control module. The first redundancy scheme refers to the first control module and the second control module forming a first combination to realize the retraction and extension control function, and the third control module forming a second combination to realize the turning control function. The second redundancy scheme refers to the first control module forming a first combination to realize the retraction and extension control function, and the second module and the third module forming a second combination to realize the turning control function; When the first control module, the second control module, and the third control module are all operating normally, the integrated control system sends the first redundancy scheme to the redundancy monitoring module.

2. The online configuration system for landing gear control redundancy according to claim 1, characterized in that, When the third control module malfunctions, the integrated control system sends a second redundancy scheme to the redundancy monitoring module.

3. The online configuration system for landing gear control redundancy according to claim 2, characterized in that, When the third control module malfunctions, it is restarted via a hot reset. If the third control module malfunctions after restarting, it is forcibly kept in a reset state.

4. The online configuration system for landing gear control redundancy according to claim 3, characterized in that, When the third control module malfunctions, it is restarted via a hot reset. If the third control module malfunctions after three consecutive restarts, it is forcibly kept in a reset state.

5. A landing gear control system, characterized in that, It includes the online configuration system as described in any one of claims 1 to 4; the first control module, the second control module, and the third control module are all connected to the drive module of the landing gear drive element.

6. An online configuration method for landing gear control redundancy using the system described in any one of claims 1 to 5, characterized in that, The method includes: S1. Set the first redundancy scheme; S2. Parse the first redundancy scheme to obtain redundancy configuration byte information and redundancy scheduling byte information; S3. After comparing each byte of the redundancy configuration byte information bit by bit, it automatically enters the retraction or turning function mode and issues landing gear retraction or turning control signals according to the function operation logic. S4. Calculate the solenoid valve drive signal based on the landing gear retraction or turning control signal, and drive the retraction solenoid valve or the turning servo solenoid valve to work. S5. Monitor the working status information of the first control module, the second control module and the third control module. If the working status of the third control module is abnormal, replace the first redundancy scheme with the second redundancy scheme and return to step S2.

7. The method according to claim 6, characterized in that, Also includes: When the third control module malfunctions, it is restarted via a hot reset. If the third control module malfunctions again after restarting, it is forcibly kept in the reset state. If the third control module malfunctions again after restarting, the turning control function is implemented using the second combination.

8. The method according to claim 7, characterized in that, The third control module is restarted via hot reset three times.

9. A computer-readable storage medium, characterized in that, It stores a computer program that, when executed by a processor, implements the steps of the method as described in any one of claims 6 to 8.

Images