A flight control system configured with multiple control channels

Abstract

The present application relates to a flight control system configured with multiple control channels. Each of the multiple control channels comprises a primary computer and a secondary computer, the primary computer receives cockpit sensor signals and interface system signals sent by the secondary computer, calculates control law commands and transmits them to the rudder actuator to drive the rudder movement. In addition, the primary computer is internally integrated with backup control functions for receiving critical backup signals in the event of failure of all secondary computers, while being capable of bus communication with the rudder actuator (REU / PCU) to directly control the actuator to drive the aircraft rudder movement.

Description

Technical Field

[0001] This invention relates to flight control technology for large aircraft, and more specifically to a flight control system equipped with multiple control channels. Background Technology

[0002] Safety plays a crucial role throughout the entire lifecycle of civil aircraft design, research and development, manufacturing, and operation. The flight control system is a critical flight system, and its safety is paramount. In previous aircraft design processes, the following issue has consistently existed: a common-mode failure in the flight control system's computer could lead to the loss of all redundant computers, rendering the aircraft uncontrollable. During the airworthiness certification process, the common-mode issue has always been a major concern, and resolving this problem has been a key focus for the regulatory authorities.

[0003] In existing technologies, flight control system architectures suffer from drawbacks such as complex redundancy / reconfiguration relationships or weak backup capabilities. Furthermore, existing technologies do not employ thoroughly dissimilar or backup designs. In addition, regarding multi-electric design, only some spoiler and horizontal stabilizer actuators utilize power fly-by-wire technology, which is insufficient for minimal control. When the entire hydraulic system fails (a highly improbable event), safe flight and landing cannot be guaranteed. Although existing technologies employ multiple primary / secondary computers with a backup computer (BCM), their fault reconfiguration and other control logic are exceptionally complex, and the number of devices is large. Moreover, the introduction of backup computers brings numerous problems, including increased cockpit sensor redundancy, increased weight, and complex system switching logic.

[0004] In summary, current flight control system architectures suffer from drawbacks such as complex redundancy / reconfiguration relationships or weak backup capabilities. Therefore, there is an urgent need for a system and method to improve upon existing technologies. Summary of the Invention

[0005] This summary is provided to introduce, in a simplified form, some concepts that will be further described in the following detailed description section. This summary is not intended to identify key or essential features of the claimed subject matter, nor is it intended to help determine the scope of the claimed subject matter.

[0006] To address the problems in existing technologies, this invention proposes a flight control system configured with multiple control channels. Each of these control channels includes a main computer, a secondary computer, and actuators. The main computer receives cockpit control signals and sensor signals from the interface system (interface system) sent by the secondary computer, calculates control law commands, and transmits them to the control surface actuators to drive the control surfaces. Furthermore, the main computer integrates a backup control function to receive critical backup signals in the event of a failure of all secondary computers. It can also communicate via bus with the control surface actuators (REU / PCU), enabling direct control of the actuators to drive the aircraft control surfaces without going through the secondary computers.

[0007] Therefore, the flight control system proposed in this invention can avoid the common mode problem of flight control computers, and the main computer in the system has integrated backup control capabilities, which can improve backup capabilities while reducing the number of LRUs.

[0008] Specifically, in one embodiment of the present invention, a flight control system configured with multiple control channels is disclosed, each of the multiple control channels comprising:

[0009] The host computer is configured as follows:

[0010] It receives input signals and performs calculations based on those input signals to execute normal instructions;

[0011] The normal command is sent to the actuator to control the movement of the control surfaces; and

[0012] The secondary computer is configured as follows:

[0013] It receives and processes cockpit control signals from cockpit control equipment and sensor signals from the cross-linking system.

[0014] The processed signal is provided to the host computer as the input signal.

[0015] In the event of partial loss of the sensor signal or the cockpit control signal, or failure of the secondary computer in a portion of the multiple control channels, the main computer is further configured to perform degraded command calculations based on the input signal in order to perform degraded control of the control surface motion.

[0016] In one embodiment of the invention, the flight control system further includes an actuator configured to receive control commands from the main computer or the secondary computer to drive control surface movement, and each of the plurality of control channels is configured to control a corresponding actuator in the actuator via the main computer or the secondary computer in the control channel to meet the minimum acceptable control requirements for safe flight and landing of the aircraft.

[0017] In the above embodiments of the present invention, the plurality of control channels correspond to a plurality of computer racks, each of which is equipped with a main computer and a secondary computer.

[0018] In the above embodiments of the present invention, when all the master computers in the plurality of control channels fail, the secondary computer is further configured to perform calculations of direct instructions based on the input signal and send the direct instructions to the actuating device, the direct instructions satisfying the minimum acceptable control requirements.

[0019] In one embodiment of the invention, in the event that all secondary computers in the plurality of control channels fail, the main computer is further configured to:

[0020] The system can independently receive critical backup signals directly from the cockpit control equipment. These critical backup signals include side stick signals and foot pedal signals.

[0021] The calculation of backup instructions is based on this critical backup signal; and

[0022] The backup command is sent to the actuator to control the movement of the control surface.

[0023] In one embodiment of the invention, all host computers in the plurality of control channels are configured to communicate with each other in pairs and perform signal processing, voting, integration, and instruction calculation. Furthermore, in the event of a failure of a host computer in a portion of the plurality of control channels, the host computers in the remaining control channels are configured to:

[0024] Receive the input signal from the secondary computer in all control channels;

[0025] The calculation of the normal instruction is performed based on the input signal; and

[0026] The normal instructions that were originally sent to the actuator via the malfunctioning master computer are transmitted to the secondary computer, which is in the same control channel as the malfunctioning master computer, and then sent to the actuator via the secondary computer.

[0027] In one embodiment of the invention, the main computer employs an instruction monitoring architecture and includes an operating system and software to provide various envelope protection and control stabilization functions, while the secondary computer employs an instruction monitoring architecture and does not include an operating system and software to provide basic control surface motion control that meets the minimum acceptable control requirements.

[0028] In one embodiment of the invention, the main computer and the secondary computer are configured to communicate via a bus with a remote electronic unit (REU) in the actuation device, the REU employing a dissimilar design.

[0029] In one embodiment of the invention, the master computer obtains the input signal from the secondary computer in all control channels, and the secondary computer provides the input signal to the master computer in all control channels.

[0030] In another embodiment of the present invention, a method executed at the flight control system described in the above embodiments is disclosed, the method comprising:

[0031] The secondary computer receives and processes cockpit control signals from the cockpit control equipment and sensor signals from the cross-linking system.

[0032] The processed signal is provided to the main computer as the input signal via the secondary computer;

[0033] The host computer performs calculations based on the input signal to execute normal instructions; and

[0034] The main computer sends the normal commands to the actuators to control the movement of the control surfaces.

[0035] In the event of partial loss of the sensor signal or the cockpit control signal, or failure of the secondary computer in a portion of the multiple control channels, the main computer calculates a degrade command based on the input signal to perform degraded control on the control surface movement.

[0036] In one embodiment of the invention, the method further includes: in the event that all the master computers in the plurality of control channels fail, performing a calculation of a direct instruction based on the input signal via the secondary computer and sending the direct instruction to the actuating device, the direct instruction satisfying the minimum acceptable control requirements for safe flight and landing of the aircraft.

[0037] In one embodiment of the invention, the method further includes: performing the following operations via the main computer in the event that all secondary computers in the plurality of control channels fail:

[0038] The system can independently receive critical backup signals directly from the cockpit control equipment. These critical backup signals include side stick signals and foot pedal signals.

[0039] The calculation of backup instructions is based on this critical backup signal; and

[0040] The backup command is sent to the actuator to control the movement of the control surface.

[0041] In one embodiment of the invention, all host computers in the plurality of control channels are configured to communicate with each other in pairs and perform signal processing, voting, integration, and instruction calculation, and the method further includes: in the event of a failure of a host computer in a portion of the plurality of control channels, performing the following operations via the host computers in the remaining control channels:

[0042] Receive the input signal from the secondary computer in all control channels;

[0043] The calculation of the normal instruction is performed based on the input signal; and

[0044] The normal instructions that were originally sent to the actuator via the malfunctioning master computer are transmitted to the secondary computer, which is in the same control channel as the malfunctioning master computer, and then sent to the actuator via the secondary computer.

[0045] In yet another embodiment of the present invention, a computer-readable storage medium is disclosed that stores code for performing the methods described in the above embodiments.

[0046] Other aspects, features, and embodiments of the invention will become apparent to those skilled in the art after reading the following description of specific exemplary embodiments of the invention in conjunction with the accompanying drawings. Although features of the invention may be discussed below with reference to certain embodiments and drawings, all embodiments of the invention may include one or more of the advantageous features discussed herein. In other words, while one or more embodiments may be discussed having certain advantageous features, one or more of such features may also be used according to the various embodiments of the invention discussed herein. Similarly, although exemplary embodiments may be discussed below as embodiments of devices, systems, or methods, it should be understood that such exemplary embodiments may be implemented in various devices, systems, and methods. Attached Figure Description

[0047] To gain a more detailed understanding of the features described above in this disclosure, reference can be made to a more specific description of the above-briefly summarized aspects, some of which are illustrated in the accompanying drawings. However, it should be noted that the drawings illustrate only certain typical aspects of this disclosure and should not be considered as limiting its scope, as other equivalent aspects are permissible in this description.

[0048] Figure 1 A schematic block diagram of a flight control system with multiple control channels according to an embodiment of the present invention is shown.

[0049] Figure 2 A schematic diagram of an aircraft control surface configuration according to an embodiment of the present disclosure is shown.

[0050] Figure 3 A schematic block diagram of a flight control system under normal operating conditions according to an embodiment of the present disclosure is shown.

[0051] Figure 4 A schematic block diagram of a flight control system in the event of partial signal loss according to an embodiment of the present invention is shown.

[0052] Figure 5 A schematic block diagram of a flight control system in the event of a single host computer failure, according to an embodiment of the present invention, is shown.

[0053] Figure 6 A schematic block diagram of a flight control system under two main computer failure scenarios according to an embodiment of the present invention is shown.

[0054] Figure 7 A schematic block diagram of a flight control system under all main computer failure conditions according to an embodiment of the present invention is shown.

[0055] Figure 8 A schematic block diagram of a flight control system in the event of a single secondary computer failure, according to an embodiment of the present invention, is shown.

[0056] Figure 9 A schematic block diagram of a flight control system under two secondary computer failure scenarios according to an embodiment of the present invention is shown.

[0057] Figure 10 A schematic block diagram of a flight control system under all secondary computer failure conditions according to an embodiment of the present invention is shown.

[0058] Figure 11 A flowchart of a method performed at a flight control system configured with multiple control channels according to an embodiment of the present invention is shown. Detailed Implementation

[0059] The various embodiments will now be described in more detail with reference to the accompanying drawings, which form part of this invention and illustrate specific exemplary embodiments. However, the embodiments may be implemented in many different forms and should not be construed as limiting the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of these embodiments to those skilled in the art. The embodiments may be implemented as methods, systems, or devices. Therefore, these embodiments may be implemented in hardware, entirely in software, or in a combination of software and hardware aspects. Therefore, the following detailed description is not intended to be limiting.

[0060] The steps in each flowchart can be performed by hardware (e.g., processor, engine, memory, circuitry), software (e.g., operating system, application, driver, machine / processor executable instructions), or a combination thereof. As will be understood by those skilled in the art, the methods involved in each embodiment may include more or fewer steps than shown.

[0061] To address the technical problems in existing technologies, this invention proposes a novel flight control system with backup control capabilities. This system incorporates two types of computers: a main computer and a secondary computer. By integrating the backup computer's functions into the main computer, both the common-mode problem of the flight control computer and the number of LRUs (Low-Run Units) are solved. The flight control system of this invention adopts an architecture that integrates backup functions into the main computer, increasing bus communication between the main computer and the actuators (REU / PCU), reducing the number of LRUs, and improving control capabilities in backup mode. This flight control system can achieve minimum acceptable control of the aircraft in each control mode, thereby ensuring safe flight and landing.

[0062] The various aspects of the present invention will now be described in detail. As those skilled in the art will understand, while the following aspects illustrate a flight control system including three control channels, this number of control channels is merely exemplary and not limiting, and other suitable numbers of control channels may be included in other embodiments of the invention. This can be set by those skilled in the art based on the actual aircraft control surface configuration, so that any one of the configured number of control channels can control the actuators of the corresponding part (via the main computer or secondary computer in that control channel) to ensure safe flight and landing of the aircraft.

[0063] Figure 1 A schematic block diagram of a flight control system with multiple control channels according to an embodiment of the present invention is shown.

[0064] like Figure 1 As shown, the flight control system of the present invention can receive cockpit control signals from cockpit control equipment and input signals from sensors in other interconnected systems, calculate control commands based on the input signals, and send the calculated control commands to the actuators to control the corresponding actuators in the flight control actuators to control the movement of the aircraft's control surfaces.

[0065] like Figure 1 As shown, in one embodiment of the present invention, the flight control system may include flight control electronics and flight control actuation devices, and the flight control electronics may be configured with (including) multiple control channels. Figure 1The three control channels shown are merely exemplary and not limiting, and these control channels can correspond one-to-one with multiple computer bays, each of which can house a primary computer (P) and a secondary computer (S). In one embodiment of the invention, by way of example and not limitation, the computer bay may employ an electronic backplane (e.g., Figure 1 As shown, the electronic backplane 1-3) or any other suitable form. In one embodiment of the invention, in Figure 1 In this example, and not a limitation, the three control channels included in the flight control system correspond to computer bracket 1, computer bracket 2, and computer bracket 3, respectively. Computer bracket 1 is equipped with a main computer P1 and a secondary computer S1, computer bracket 2 is equipped with a main computer P2 and a secondary computer S2, and computer bracket 3 is equipped with a main computer P3 and a secondary computer S3.

[0066] In one embodiment of the invention, the secondary computer is configured to receive and process cockpit control signals from cockpit control devices and sensor signals from the interconnection system, and provide the processed signals as input signals to the main computer. In this embodiment, the input signals received by the flight control system via the secondary computer may include cockpit control signals from the cockpit control devices and sensor signals from interface systems interconnected with the flight control system. These signals (after signal processing) constitute the input signals received by the main computer. The cockpit control devices mainly include sidesticks (or sticks), pedals, trim control panels, and handles, which provide basic control commands for three-axis control. The interconnection system mainly includes avionics systems, energy systems (power systems, hydraulic energy systems), landing gear systems, and braking systems. These systems provide corresponding sensor signals to the flight control computer to support the flight control system in achieving three-axis control of the aircraft.

[0067] In one embodiment of the present invention, the secondary computer is designed to be relatively simple, employing an instruction monitoring architecture internally, and containing no operating system or software. It is used only to implement basic control of aircraft movements in the event that the main computer fails (as described below). Figure 7 (As described), handling qualities are relatively permissible to be reduced, but still meet the requirements for safe flight and landing.

[0068] In one embodiment of the invention, the main computer can be configured to receive input signals from a secondary computer and, based on the input signals, perform calculations of normal commands and send the normal commands to the actuators to control the movement of the control surfaces. In this embodiment, all the main computers in the multiple control channels configured in the flight control system can be configured to communicate with each other in pairs and perform signal processing, voting, integration, and command calculation. Furthermore, the main computers can employ a command monitoring architecture and include an operating system and software to provide various envelope protection and control augmentation functions to achieve a high level of flight handling quality.

[0069] Specifically, the main computer in this invention may be internally configured with normal instructions and degradation instructions. The main computer can receive all signals from all secondary computers and execute complete instruction calculation functions, including normal instruction calculation when the system is functioning normally (as shown in the reference). Figure 3 (as described), and the calculation of degradation instructions after partial signal loss (as referenced). Figure 4 (As described). In addition, the main computer integrates a backup computer function. When all secondary computers fail, the main computer independently receives (a small number) of critical backup signals, including certain cockpit control signals, such as side stick signals and rudder pedal signals, to perform backup command calculations for the flight control system (as described in the reference). Figure 10 (As described) to ensure flight safety.

[0070] like Figure 1 As shown, in one embodiment of the present invention, the actuation device may include various control surface actuators. This actuation device can be configured to receive control commands from the flight control system (flight control computer), drive the corresponding actuators according to the received control commands, and thereby control the movement of the control surfaces. The REU (Remote Electronic Unit) in the actuation device can simultaneously receive two commands: commands from the main computer and commands from the secondary computer, and prioritizes executing commands from the main computer. When the main computer command is invalid or missing, it can switch to the secondary computer command. The REU in the present invention can employ a dissimilar design (e.g., two types of REUs), and both internally employ a dissimilar command / monitor architecture design. The development of complex electronic hardware and software is guaranteed to be at level A, to mitigate the common-mode effects of the actuation device and ensure high integrity of the output signal. In one embodiment of the present invention, the main computer and secondary computer in the flight control system can be configured to communicate with the REU in the actuation device via a bus.

[0071] In one embodiment of the invention, each of the multiple control channels in the flight control system can be configured to control the corresponding actuator in the actuator via a master computer or a secondary computer in that control channel (or a secondary computer in the same control channel as the master computer if the master computer in that control channel fails) and to meet the minimum acceptable control requirements for safe flight and landing of the aircraft. Figure 2 A schematic diagram of an aircraft control surface configuration according to an embodiment of the present disclosure is shown.

[0072] like Figure 2 As shown, and not as a limitation, a typical single-aisle large aircraft control surface configuration (configured with 1 pair of ailerons, 1 pair of elevators, 1 rudder, 1 horizontal stabilizer, 5 pairs of spoilers, and 3 sets of hydraulic systems) can be used to allocate energy and computer control for the 3 control channels in the flight control system, such as... Figure 2 As shown. This embodiment can serve as a supplement to the understanding of this scheme. Other channel configurations with different numbers of control surfaces can also be used, or an aircraft with two hydraulic systems (one hydraulic power source replaced by a power source) can be used. This embodiment can be adapted as needed. The corresponding control channels are connected to the corresponding actuators. Each control channel (specifically, the main computer or secondary computer within it) can control approximately 1 / 3 of the actuators. P1 and S1 control the same actuators, communicate with REU via a bus, and correspond to an independent hydraulic system on the aircraft. P2 and S2, P3 and S3 are similar. Thus, any one of the three main computers and three secondary computers can control 1 / 3 of the actuators, meeting the minimum acceptable control requirements and ensuring safe flight and landing of the aircraft.

[0073] Figure 3 A schematic block diagram of a flight control system under normal operating conditions according to an embodiment of the present disclosure is shown.

[0074] like Figure 3 As shown, and not as a limitation, the flight control system is mainly divided into three control channels, corresponding to three computer bays. Each bay houses one main computer P1, P2, or P3, and one secondary computer S1, S2, or S3.

[0075] Each control channel receives information from approximately one-third of the cockpit operating equipment and sensors in the interconnected system (such as atmospheric / inertial navigation sensors). Secondary computers S1, S2, or S3 perform signal processing such as analog-to-digital conversion. This information is then forwarded to the three main computers, and the secondary computers themselves can also perform direct instruction calculations (in the event that all main computers fail).

[0076] In one embodiment of the invention, P1, P2, and P3 can operate in a master / master / master configuration (the secondary computer can vote when using instructions from the master computer). P1, P2, and P3 can also operate in a master / standby / standby configuration (one computer is the master at any given time, rotating according to calendar days or flight sorties). P1, P2, and P3, or S1, S3, and S3, each control approximately 1 / 3 of the actuators (REU + PCU). When P1, P2, and P3 operate in a master / master / master configuration, P1 and S1 control the same actuators (S1 controls the corresponding actuator when P1 fails), communicate with the REU via a bus, and correspond to an independent hydraulic system on the aircraft. P2 and S2, and P3 and S3 are similar. P1, P2, and P3 are identical in design and interchangeable, as are S1, S2, and S3.

[0077] In one embodiment of the invention, the main computer can receive cockpit control signals and cross-linking system interface sensor signals sent from all secondary computers to perform higher-level three-axis control, envelope protection, and display alarm-related functions. When the system is working normally, P1, P2, and P3 can receive the required cockpit control signals and cross-linking system sensor (such as atmospheric inertial navigation) signals through S1, S2, and S3, calculate normal control commands based on the received input signals, and send the normal commands to the corresponding REU and PCU in the actuators to drive the actuators associated with the control channel, thereby controlling the movement of the control surfaces.

[0078] In one embodiment of the invention, in the event of partial loss of sensor signals or cockpit control signals, the main computer may be further configured to perform a degrade command calculation based on the input signal in order to perform degraded control on the control surface motion. Figure 4 A schematic block diagram of a flight control system in the event of partial signal loss according to an embodiment of the present invention is shown.

[0079] like Figure 4 As shown, when interface sensor signals 2 and 3 (such as atmospheric / inertial navigation sensor information) (or cockpit control signals) Figure 4 When a portion of the flight control system (not shown) is lost to the point that it is insufficient to support the normal instruction calculation of the host computer, the flight control system degrades, the host computer calculates the degrade instructions, and executes the degrade control.

[0080] In one embodiment of the present invention, if the master computer in a portion of multiple control channels in the flight control system fails, the master computers in the remaining control channels may be configured to: receive input signals from secondary computers in all control channels; perform calculations of the normal instructions based on the input signals; and transfer the normal instructions originally sent to the actuation device via the failed master computer to the secondary computer in the same control channel as the failed master computer and send the normal instructions to the actuation device via the secondary computer.

[0081] Specifically, Figure 5 A schematic block diagram of a flight control system in the event of a single main computer failure according to an embodiment of the present invention is shown. Figure 5 As shown, when a host computer fails (taking P1 as an example), the actuators receive normal commands from S1, P2, and P3 respectively. The normal commands issued by S1 come from P2 and P3 and control the actuators associated with the first channel. Figure 6 A schematic block diagram of the flight control system under two main computer failure scenarios according to an embodiment of the present invention is shown. Figure 6 As shown, when two host computers fail (taking P1 and P2 as examples), the actuators receive normal commands from S1, S2, and P3 respectively. The normal commands from S1 and S2 originate from P3 and control the actuators associated with channels 1 and 2 respectively.

[0082] In one embodiment of the invention, if all the master computers in multiple control channels of the flight control system fail, the secondary computer may be further configured to perform calculations of direct commands based on input signals and send the direct commands to the actuators, the direct commands satisfying the minimum acceptable control requirements.

[0083] Specifically, Figure 7 A schematic block diagram of the flight control system under all main computer failure scenarios according to this embodiment of the invention is shown. Figure 7 As shown, when the three main computers fail, the actuators receive direct commands from S1, S2, and S3 respectively. S1, S2, and S3 cannot receive commands from the main computers, but they can independently perform direct command calculations and control the actuators associated with channels 1, 2, and 3 respectively.

[0084] In one embodiment of the present invention, if a secondary computer in a subset of multiple control channels fails, the sensor redundancy received by the main computer decreases. If the input signal still supports the normal instruction calculation of the main computer, the main computer can be configured to execute the normal instruction calculation. If the input signal is insufficient to support the normal instruction calculation of the main computer, but only supports the degraded instruction calculation, the main computer can be further configured to perform degraded instruction calculation based on the input signal to perform degraded control of the control surface motion. As those skilled in the art will understand, the determination of whether the input signal can support the normal instruction calculation of the main computer can be based on specific conditions and is not limited to any particular condition.

[0085] Specifically, Figure 8 A schematic block diagram of the flight control system in the event of a single secondary computer failure according to an embodiment of the present invention is shown. Figure 8 As shown, when one computer fails (taking S1 as an example), the actuator receives normal commands from P1, P2, and P3 respectively. The failure of S1 will reduce the sensor redundancy received by the main computer, but it can still support the main computer to calculate normal commands. Figure 9 A schematic block diagram of the flight control system under two secondary computer failure scenarios according to an embodiment of the present invention is shown. Figure 9 As shown, when two secondary computers fail (taking S1 and S2 as examples), the actuator receives degradation commands from P1, P2, and P3 respectively. The failure of S1 and S2 will reduce the sensor redundancy received by the main computer, making it insufficient to support the normal command calculation of the main computer, but it can still support the calculation of the degradation command of the main computer.

[0086] In one embodiment of the invention, if all secondary computers in multiple control channels of the flight control system (i.e., secondary computers in all control channels) fail, the main computer may be further configured to: independently receive a critical backup signal directly from the cockpit control equipment, the critical backup signal including side stick signals and pedal signals from the cockpit control equipment; calculate a backup command based on the critical backup signal; and send the backup command to the actuator to control the movement of the control surfaces. Figure 10 A schematic block diagram of the flight control system under all secondary computer failure scenarios according to an embodiment of the present invention is shown. Figure 10 As shown, when three computers fail, the actuator receives backup commands from P1, P2, and P3 respectively. The failure of S1, S2, and S3 will result in the loss of input signals. Since the main computer can independently receive critical backup signals (side lever, foot pedal signals, etc.), it can support the calculation of backup commands.

[0087] As those skilled in the art will understand, the connection between the main computer and the secondary computer under the above-described operating conditions can represent that the main computer obtains input signals from the secondary computer in all control channels, and the secondary computer provides the input signals to the main computer in all control channels.

[0088] Figure 11 This illustrates a flight control system (e.g., one configured with multiple control channels) according to an embodiment of the present invention. Figure 1 The flowchart shows the method 1100 executed at the flight control system shown.

[0089] like Figure 11 As shown, method 1100 begins at step 1102, whereby a secondary computer receives and processes cockpit control signals from cockpit control equipment and sensor signals from the crosslinking system.

[0090] Next, method 1100 continues to step 1104, whereby the processed signal is provided to the main computer as the input signal via the secondary computer.

[0091] Then, method 1100 continues to step 1106, whereby the main computer performs calculations of normal commands based on the input signal. In one embodiment of the invention, in the event of partial loss of the sensor signal or cockpit control signal, or failure of a secondary computer in a portion of the plurality of control channels, the method may further include performing calculations of degraded commands based on the input signal via the main computer to perform degraded control of the control surface movement. In another embodiment of the invention, in the event of failure of all main computers in the plurality of control channels, the method may further include performing calculations of direct commands based on the input signal via the secondary computer and sending the direct commands to the actuator. In yet another embodiment of the invention, in the event of failure of all secondary computers in the plurality of control channels, the method may further include performing the following operations via the main computer: independently receiving a critical backup signal directly from the cockpit control equipment, the critical backup signal including a side stick signal and a pedal signal; performing calculations of backup commands based on the critical backup signal; and sending the backup commands to the actuator to control the control surface movement. In another embodiment of the invention, in the event that the master computer in a portion of the plurality of control channels fails, the method further includes performing the following operations via the master computer in the remaining control channels: receiving the input signal from the secondary computer in all control channels; performing the calculation of the normal instruction based on the input signal; and transmitting the normal instruction originally sent to the actuating device via the failed master computer to the secondary computer in the same control channel as the failed master computer and sending the normal instruction to the actuating device via the secondary computer.

[0092] Finally, method 1100 continues to step 1108, whereby the main computer sends the normal command to the actuator to control the movement of the control surface.

[0093] After step 1108, method 1100 ends.

[0094] In summary, the flight control system proposed in this invention adopts an architecture that integrates backup functionality into the main computer, increasing bus communication between the main computer and the actuators (REU / PCU), reducing the number of LRUs while also improving control capabilities in backup mode. This flight control system can achieve minimum acceptable control of the aircraft in each control mode, ensuring safe flight and landing.

[0095] The embodiments of the present invention have been described above with reference to block diagrams and / or operational descriptions of methods, systems, and computer program products according to embodiments of the present invention. The functions / actions indicated in the blocks may appear in a different order than shown in any flowchart. For example, depending on the functions / actions involved, two blocks shown consecutively may actually be executed substantially simultaneously, or these blocks may sometimes be executed in reverse order.

[0096] The above description is merely a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A flight control system configured with multiple control channels, each of the multiple control channels comprising: The host computer is configured as follows: Receive input signals and perform calculations of normal instructions based on the input signals; Send the normal command to the actuator to control the movement of the control surface; and The secondary computer is configured as follows: It receives and processes cockpit control signals from cockpit control equipment and sensor signals from the cross-linking system. The processed signal is provided to the host computer as the input signal. In the event of partial loss of the sensor signals or the cockpit control signals, or failure of the secondary computer in a portion of the multiple control channels, the main computer is further configured to calculate degrade commands based on the input signals in order to perform degraded control on the control surface motion, and In the event that the host computer in a portion of the multiple control channels fails, the host computers in the remaining control channels are configured as follows: The input signals are received from the secondary computers in all control channels; Calculations of the normal instructions are performed based on the input signal; and The normal instructions that were originally sent to the actuating device via the failed master computer are transmitted to the secondary computer, which is in the same control channel as the failed master computer in the plurality of control channels, and the normal instructions are sent to the actuating device via the secondary computer.

2. The flight control system of claim 1, wherein the flight control system further includes the actuator configured to receive control commands from the main computer or the secondary computer to drive the control surfaces to move, and Each of the plurality of control channels is configured to control a corresponding actuator in the actuator via a master computer or a secondary computer in the control channel and to meet the minimum acceptable control requirements for safe flight and landing of the aircraft.

3. The flight control system as described in claim 2, wherein the plurality of control channels correspond to a plurality of computer bays, and each of the plurality of computer bays is equipped with a main computer and a secondary computer.

4. The flight control system of claim 2, wherein, in the event that all the master computers in the plurality of control channels fail, the secondary computer is further configured to perform calculations of direct commands based on the input signals and send the direct commands to the actuators, the direct commands satisfying the minimum acceptable control requirements.

5. The flight control system of claim 1, wherein, in the event that all secondary computers in the plurality of control channels fail, the main computer is further configured to: The system can independently receive critical backup signals directly from the cockpit control equipment. These critical backup signals include side stick signals and foot pedal signals. The calculation of backup instructions is performed based on the aforementioned key backup signals; and The backup command is sent to the actuator to control the movement of the control surface.

6. The flight control system of claim 1, wherein all the host computers in the plurality of control channels are configured to communicate with each other in pairs and perform signal processing, voting, integration and command calculation.

7. The flight control system of claim 2, wherein the main computer adopts a command monitoring architecture and includes an operating system and software to provide various envelope protection and control stabilization functions, and the secondary computer adopts a command monitoring architecture and does not include an operating system and software to provide basic control surface motion control that meets the minimum acceptable control requirements.

8. The flight control system of claim 1, wherein the main computer and the secondary computer are configured to communicate via a bus with a remote electronic unit (REU) in the actuation device, the REU employing a dissimilar design.

9. The flight control system of claim 1, wherein the main computer obtains the input signal from the secondary computer in all control channels, and the secondary computer provides the input signal to the main computer in all control channels.

10. A method performed at a flight control system of claim 1, the flight control system having a plurality of control channels, each of the plurality of control channels including a main computer and a secondary computer, the method comprising: The secondary computer receives and processes cockpit control signals from the cockpit control equipment and sensor signals from the cross-linking system. The processed signal is provided to the main computer as the input signal via the secondary computer; The host computer performs calculations of normal instructions based on the input signals; and The main computer sends the normal commands to the actuators to control the movement of the control surfaces. In the event of partial loss of the sensor signals or the cockpit control signals, or failure of the secondary computer in a portion of the multiple control channels, the main computer calculates degrade commands based on the input signals to perform degraded control on the control surface motion. In the event of a failure of the host computer in a subset of the multiple control channels, the following operations are performed via the host computer in the remaining control channels: The input signals are received from the secondary computers in all control channels; Calculations of the normal instructions are performed based on the input signal; and The normal instructions that were originally sent to the actuating device via the failed master computer are transmitted to the secondary computer, which is in the same control channel as the failed master computer in the plurality of control channels, and the normal instructions are sent to the actuating device via the secondary computer.

Images