A high-reliability ignition system capable of preventing electromagnetic relay misoperation

Abstract

This invention provides a highly reliable ignition system that prevents electromagnetic relay malfunctions. The system includes an ignition control circuit, a pyrotechnic status monitoring circuit, and a current-limiting resistor. The ignition control circuit comprises a control power supply, an input power supply, an ignition bus, a first control module, a second control module, a protection release module, a first ignition module, a second ignition module, and an electromagnetic relay. Utilizing a collaborative control architecture between the first and second control modules, dual-instruction control for protection release eliminates the potential for electromagnetic relay malfunctions caused by single-component failures. Two sets of ignition control circuits form a primary and backup dual-redundancy ignition strategy. The pyrotechnic status monitoring circuit continuously monitors the resistance of the pyrotechnic bridge wire and sends the monitoring information to the controller. Upon ignition failure, a backup ignition command is activated, improving the reliability of the detonation mission.

Description

Technical Field

[0001] This invention belongs to the field of pyrotechnic ignition technology, and specifically relates to a highly reliable ignition system that can prevent electromagnetic relays from malfunctioning. Background Technology

[0002] In the aerospace and naval fields, numerous pyrotechnic initiation devices are used to unlock critical mechanisms such as satellite-rocket separation and instrument-instrument separation. Among these, the ignition system is the core and crucial component. The design of the ignition system must balance reliability and safety, ensuring reliable detonation while preventing accidental triggering. Otherwise, it could lead to financial and material losses, and even endanger personal safety.

[0003] Ignition systems for pyrotechnic devices typically use electromagnetic relays as switches to change the ignition circuit. Whether the electromagnetic relay can perform its preset action depends mainly on whether the ignition command issued by the control chip is valid. However, when the control chip is initially powered on, reset, or when the program malfunctions, or when electromagnetic interference is present, the I / O pins of the control chip may be in an uncertain random state, posing a safety hazard of malfunctioning electromagnetic relays. Summary of the Invention

[0004] In order to overcome the shortcomings of the prior art, the inventors have conducted intensive research and provided a highly reliable ignition system that can prevent electromagnetic relay malfunction, thus solving at least one technical problem in ensuring reliable detonation in the context of electromagnetic relay malfunction.

[0005] This invention discloses a highly reliable ignition system that prevents electromagnetic relay malfunctions. Utilizing the advantages of a collaborative control architecture, it employs dual-command control to eliminate the potential for electromagnetic relay malfunctions caused by single-component failures. It adopts a multi-level ignition control scheme with reusable modules, improving detonation safety while maintaining a simple circuit structure. Employing a primary and backup dual-redundancy ignition strategy, it monitors the resistance of the pyrotechnic bridge wire in real time and sends the monitoring information to the controller via a CAN bus. When ignition failure is detected, a backup ignition command is activated, enhancing the reliability of the detonation mission.

[0006] The technical solution provided by this invention is as follows:

[0007] A highly reliable ignition system that can prevent electromagnetic relay malfunction includes an ignition control circuit, which includes a control power supply, an input power supply, an ignition bus, a first control module, a second control module, a protection release module, a first ignition module, a second ignition module, and an electromagnetic relay (LS1).

[0008] The positive input terminal of the electromagnetic relay (LS1) is connected to the positive terminal of the input power supply. The first normally closed contact 4 and the second normally closed contact 8 are connected. The first moving contact 2 leads out the positive terminal of the load, and the second moving contact 6 leads out the negative terminal of the load. The positive terminal of the load is connected to the positive terminal of the pyrotechnic bridge wire, and the negative terminal of the load is connected to the negative terminal of the pyrotechnic bridge wire.

[0009] The input terminal of the deprotection module is connected to the control power supply, the first control module, and the second control module. The output terminal is connected to the negative input terminal of the electromagnetic relay (LS1) and the negative input terminal of the input power supply. It receives the deprotection signal from the first control module and the second control module, and controls the two moving contacts and two normally open contacts in the electromagnetic relay (LS1) to close accordingly, thereby completing the deprotection of the ignition control circuit.

[0010] The input terminal of the first ignition module is connected to the control power supply and the second control module, and the output terminal is connected to the first normally open contact 5 of the electromagnetic relay (LS1) and the positive terminal of the ignition bus. After receiving the ignition signal output by the second control module, it connects the first normally open contact 5 of the electromagnetic relay and the positive terminal of the ignition bus.

[0011] The input terminal of the second ignition module is connected to the control power supply and the second control module, and the output terminal is connected to the second normally open contact 1 of the electromagnetic relay (LS1) and the negative terminal of the ignition bus. After receiving the ignition signal output by the second control module, the second normally open contact 1 of the electromagnetic relay and the negative terminal of the ignition bus are connected. After both the first ignition module and the second ignition module are turned on, the pyrotechnic device is detonated.

[0012] In conjunction with the first aspect, the first ignition module includes a first NAND gate logic chip U3 and a first solid-state relay U6; one input terminal of the first NAND gate logic chip U3 is connected to the first control pin F_OUT+ of the second control module (second control chip U2), and the other input terminal is connected to the control power supply;

[0013] The output of the first NAND gate logic chip U3 is connected to the negative input of the first solid-state relay U6. The control power supply (e.g., +3.3V) is connected to the positive input of the first solid-state relay U6. The positive terminal of the ignition bus (e.g., +30V) is connected to the positive output of the first solid-state relay U6. The first normally open contact 5 of the electromagnetic relay LS1 is connected to the negative output of the first solid-state relay U6.

[0014] In conjunction with the first aspect, the output terminal of the first NAND gate logic chip U3 is connected to the negative input terminal of the first solid-state relay U6 through a current-limiting resistor R1.

[0015] In conjunction with the first aspect, the second ignition module includes a second NAND gate logic chip U4 and a second solid-state relay U7; one input terminal of the second NAND gate logic chip U4 is connected to the second control pin F_OUT- of the second control module (second control chip U2), and the other input terminal is connected to the control power supply;

[0016] The output of the second NAND gate logic chip U4 is connected to the negative input of the second solid-state relay U7. The control power supply (e.g., +3.3V) is connected to the positive input of the second solid-state relay U7. The negative terminal of the ignition bus (e.g., +30V_GND) is connected to the negative output of the second solid-state relay U7. The second normally open contact 1 of the electromagnetic relay LS1 is connected to the positive output of the second solid-state relay U7.

[0017] In conjunction with the first aspect, the output terminal of the second NAND gate logic chip U4 is connected to the negative input terminal of the second solid-state relay U7 through the current-limiting resistor R2.

[0018] In conjunction with the first aspect, the protection release module includes a third NAND gate logic chip U5 and a third solid-state relay U8; one input terminal of the third NAND gate logic chip U5 is connected to the control pin UNLK_DSP of the first control module (first control chip U1), and the other input terminal is connected to the third control pin UNLK_FPGA of the second control module (second control chip U2);

[0019] The output of the third NAND gate logic chip U5 is connected to the negative input of the third solid-state relay U8. The control power supply (+3.3V) is connected to the positive input of the third solid-state relay U8. The negative input power supply (e.g., +24V_GND) is connected to the negative output of the third solid-state relay U8. The negative input of the electromagnetic relay LS1 is connected to the positive output of the third solid-state relay U8.

[0020] In conjunction with the first aspect, the output terminal of the third NAND gate logic chip U5 is connected to the negative input terminal of the third solid-state relay U8 through the current-limiting resistor R3.

[0021] In conjunction with the first aspect, the ignition system also includes a pyrotechnic status monitoring circuit, which detects the resistance value of the pyrotechnic bridge wire in real time and sends the detection information to the controller to determine whether ignition is successful. Specifically, the pyrotechnic status monitoring circuit includes a standard resistor and a bridge wire detection module. The positive and negative ends of the bridge wire detection module are respectively connected to a changeover switch. When connected to the two ends of the standard resistor, the bridge wire detection module is verified before monitoring. The positive and negative monitoring leads are connected to the two ends of the pyrotechnic bridge wire, and the detection information is sent to the controller. The monitored pyrotechnic bridge wire resistance value reflects the integrity of the pyrotechnic circuit and determines whether ignition is successful.

[0022] In conjunction with the first aspect, the ignition system also includes a current-limiting resistor installed in the pyrotechnic initiation path.

[0023] In conjunction with the first aspect, the ignition system includes two sets of ignition control circuits, forming a main backup ignition control circuit. When the main ignition control circuit fails to ignite, the backup dual-redundant ignition control circuit is activated.

[0024] The highly reliable ignition system provided by the present invention, which can prevent electromagnetic relay malfunction, has the following beneficial effects:

[0025] (1) The present invention provides a highly reliable ignition system that can prevent electromagnetic relay malfunction. It utilizes the collaborative control architecture of the first control module and the second control module (such as DSP+FPGA) to incorporate the control pins of the two control chips into the control timing logic. It adopts dual instruction control to deprotect and provides a double insurance control strategy to completely eliminate the hidden danger of electromagnetic relay malfunction caused by single device failure.

[0026] (2) The present invention provides a highly reliable ignition system that can prevent electromagnetic relays from malfunctioning. It uses a first control module and a second control module to deprotect the system, and then uses the second control module to initiate the ignition. The system has multi-level ignition control and multiplexed modules, which improves the safety of the ignition while having a simple circuit structure.

[0027] (3) The present invention provides a highly reliable ignition system that can prevent electromagnetic relay malfunction. It adopts two sets of ignition control circuits to form a main and backup dual-redundant ignition strategy. It uses a pyrotechnic status monitoring circuit to detect the resistance value of the bridge wire of the pyrotechnic in real time. The detection information is sent to the controller through the CAN bus. When the ignition fails, the backup ignition command is started. The ignition control and status monitoring functions are integrated to improve the reliability of the detonation mission. Attached Figure Description

[0028] Figure 1 This is a schematic diagram of a highly reliable ignition system that can prevent electromagnetic relays from malfunctioning.

[0029] Figure 2 This is a schematic diagram of a single ignition control circuit.

[0030] Figure 3 This is a schematic diagram of the structure of a pyrotechnics status monitoring circuit. Detailed Implementation

[0031] The features and advantages of the present invention will become clearer and more apparent from the following detailed description.

[0032] The term “exemplary” as used herein means “serving as an example, embodiment, or illustration.” Any embodiment illustrated herein as “exemplary” is not necessarily to be construed as superior to or better than other embodiments.

[0033] This invention provides a highly reliable ignition system that can prevent electromagnetic relay malfunctions, such as... Figure 1 As shown, it includes: ignition control circuit, pyrotechnic status monitoring circuit and current limiting resistor.

[0034] like Figure 2As shown, the ignition control circuit includes a control power supply, an input power supply, an ignition bus, a first control chip U1 (first control module), a second control chip U2 (second control module), a first NAND gate logic chip U3, a second NAND gate logic chip U4, a third NAND gate logic chip U5, a first solid-state relay U6, a second solid-state relay U7, a third solid-state relay U8, a first current-limiting resistor R1, a second current-limiting resistor R2, a third current-limiting resistor R3, and an electromagnetic relay LS1.

[0035] In one embodiment, the control power supply is a +3.3V power supply. In actual applications, the control power supply voltage is determined according to the chip selected for the ignition circuit.

[0036] In one embodiment, the positive terminal of the input power supply is +24V and the negative terminal is +24V_GND; the ignition power supply uses power electricity, and the positive terminal of the ignition bus is +30V and the negative terminal is +30V_GND. In actual applications, the values ​​are determined based on the selected electromagnetic relay and technical specifications.

[0037] In one embodiment, the DSP+FPGA collaborative processing system has a first control chip U1 that is a DSP and a second control chip U2 that is an FPGA. In practical applications, the control chip can be selected according to the needs of the controller.

[0038] In one embodiment, the NAND gate logic chips U3, U4, and U5 can be selected from chips that can meet the set logic in actual applications.

[0039] In one embodiment, the solid-state relays U6, U7, and U8 are determined based on the required driving capability in actual applications.

[0040] In one embodiment, the current-limiting resistors R1, R2, and R3 are configured according to the loop voltage and the forward voltage drop at the input terminal in practical applications to ensure that the input current of the solid-state relays U6, U7, and U8 meets the requirements.

[0041] In one embodiment, the electromagnetic relay LS1 is determined based on technical specifications in practical applications.

[0042] The first control chip U1 has a control pin UNLK_DSP, and the second control chip U2 has a first control pin F_OUT+, a second control pin F_OUT-, and a third control pin UNLK_FPGA.

[0043] The first control pin F_OUT+ of the second control chip U2 is connected to one input of the first NAND gate logic chip U3, and the control power supply (+3.3V) is connected to the other input of the first NAND gate logic chip U3; the second control pin F_OUT- of the second control chip U2 is connected to one input of the second NAND gate logic chip U4, and the control power supply (+3.3V) is connected to the other input of the second NAND gate logic chip U4; the control pin UNLK_DSP of the first control chip U1 is connected to one input of the third NAND gate logic chip U5, and the third control pin UNLK_FPGA of the second control chip U2 is connected to the other input of the third NAND gate logic chip U5;

[0044] The output of the first NAND gate logic chip U3 is connected to the negative input of the first solid-state relay U6 through a current-limiting resistor R1. The control power supply (+3.3V) is connected to the positive input of the first solid-state relay U6. The positive terminal of the ignition bus (+30V) is connected to the positive output of the first solid-state relay U6. The first normally open contact 5 of the electromagnetic relay LS1 is connected to the negative output of the first solid-state relay U6. The output of the second NAND gate logic chip U4 is connected to the negative input of the second solid-state relay U7 through a current-limiting resistor R2. The control power supply (+3.3V) is connected to the positive input of the second solid-state relay U7. The ignition bus negative terminal (+30V_GND) is connected to the output negative terminal of the second solid-state relay U7, and the second normally open contact 1 of the electromagnetic relay LS1 is connected to the output positive terminal of the second solid-state relay U7; the output terminal of the third NAND gate logic chip U5 is connected to the input negative terminal of the third solid-state relay U8 through the current limiting resistor R3, the control power supply (+3.3V) is connected to the input positive terminal of the third solid-state relay U8, the input power supply negative terminal (+24V_GND) is connected to the output negative terminal of the third solid-state relay U8, and the input negative terminal of the electromagnetic relay LS1 is connected to the output positive terminal of the third solid-state relay U8;

[0045] The positive input terminal of the electromagnetic relay LS1 is connected to the positive input power supply terminal (+24V). The first normally closed contact 4 of the electromagnetic relay LS1 is connected to the second normally closed contact 8. The first moving contact 2 of the electromagnetic relay LS1 leads out to the positive terminal of the load, and the second moving contact 6 leads out to the negative terminal of the load. The positive terminal of the load is connected to the positive terminal of the pyrotechnic bridge wire through a current-limiting resistor, and the negative terminal of the load is connected to the negative terminal of the pyrotechnic bridge wire.

[0046] In this invention, the ignition control circuit adopts a multi-stage ignition control scheme.

[0047] Before an ignition command is issued, the first normally closed contact 4 and the second normally closed contact 8 of the electromagnetic relay LS1 are used to put the pyrotechnic bridge wire in a short-circuit protection state.

[0048] Only when the control pins UNLK_DSP and UNLK_FPGA are both high, the third NAND gate logic chip U5 outputs a low level, the third solid-state relay U8 is turned on, and the positive and negative terminals of the input power supply (+24V, +24V_GND) are connected to the input terminals of the electromagnetic relay LS1. The first moving contact 2 and the second moving contact 6 of the armature are respectively attracted to the first normally open contact 5 and the second normally open contact 1, thus completing the deprotection.

[0049] Reuse the above protection release logic module to detonate pyrotechnic devices:

[0050] Only when the first control pin F_OUT+ of the second control chip U2 is high, the first NAND gate logic chip U3 outputs a low level, the first solid-state relay U6 is turned on, and the positive terminal (+30V) of the ignition bus is connected to the first normally open contact 5 of the electromagnetic relay LS1;

[0051] Only when the second control pin F_OUT- of the second control chip U2 is high, the second NAND gate logic chip U4 outputs a low level, the second solid-state relay U7 is turned on, and the negative terminal of the ignition bus (+30V_GND) is connected to the second normally open contact 1 of the electromagnetic relay LS1.

[0052] The ignition busbar is connected to the pyrotechnic device to complete the detonation.

[0053] In this invention, such as Figure 3 As shown, the pyrotechnics status monitoring circuit includes a standard resistor R4 and a bridge wire detection module, which is a voltage detection module.

[0054] In one embodiment, the standard resistor R4 has a resistance of 3 ohms. Two changeover switches are connected to the positive and negative terminals of the bridge wire detection module. The module is verified when connected to the standard resistor R4. The positive and negative leads are connected to the two ends of the pyrotechnic bridge wire, and the integrity of the pyrotechnic circuit is determined by the monitored bridge wire resistance value. After the ignition command is issued, the deactivation module, the first ignition module, and the second ignition module operate to complete the pyrotechnic detonation. If the detected resistance value at both ends of the bridge wire is an open circuit or a current-limiting resistor value, the detonation is successful; otherwise, the detonation fails.

[0055] The testing sequence is as follows: first, the standard resistor R4 is tested. After the test result is normal, the pyrotechnic bridge wire is tested. The test information is sent to the controller via the CAN bus. The resistance value of the pyrotechnic bridge wire can be detected online to monitor the integrity of the pyrotechnic circuit in real time.

[0056] The ignition control circuit adopts a main backup design. When the main ignition control circuit fails to ignite, the backup ignition control circuit is activated. The main and backup circuits are dual-redundant parallel structures to avoid ignition failure caused by faults such as contact sticking or failure to engage properly in the electromagnetic relay itself.

[0057] A current-limiting resistor is installed in the pyrotechnic initiation path to ensure that the pyrotechnic initiation current meets the specifications. It also prevents a short circuit or failure of the bridge wire after pyrotechnic initiation, which could cause a short circuit in the system's ignition power and affect subsequent operations. The resistance value is determined based on the resistance of the pyrotechnic in each path, the cable length, and the initiation current range.

[0058] The ignition control circuit proposed in this invention needs to be designed and considered based on the specific driving capability and the effective level of the control pin of the selected control chip in practical applications.

[0059] This invention proposes a highly reliable ignition system that prevents electromagnetic relay malfunctions. This system improves detonation safety, ensuring that pyrotechnic devices will not detonate due to human error, component or circuit issues, or other random factors outside of the predetermined ignition time and location, thus preventing dangerous accidents. Furthermore, through a dual-redundancy ignition strategy (main and backup), the system monitors the bridge wire resistance of the pyrotechnic device online and the integrity of the pyrotechnic device's circuit in real time, improving the reliability of mission execution. The system also features a simple circuit structure and low cost.

[0060] The present invention has been described in detail above with reference to specific embodiments and exemplary examples; however, these descriptions should not be construed as limiting the present invention. Those skilled in the art will understand that various equivalent substitutions, modifications, or improvements can be made to the technical solutions and embodiments of the present invention without departing from the spirit and scope of the invention, and all such modifications and improvements fall within the scope of the present invention. The scope of protection of the present invention is defined by the appended claims.

[0061] The contents not described in detail in this specification are common knowledge to those skilled in the art.

Claims

1. A highly reliable ignition system that prevents electromagnetic relay malfunction, characterized in that, It includes an ignition control circuit, which includes a control power supply, an input power supply, an ignition bus, a first control module, a second control module, a protection release module, a first ignition module, a second ignition module, and an electromagnetic relay; The positive input terminal of the electromagnetic relay is connected to the positive terminal of the input power supply. The first normally closed contact and the second normally closed contact are connected. The first moving contact leads out the positive terminal of the load, and the second moving contact leads out the negative terminal of the load. The positive terminal of the load is connected to the positive terminal of the pyrotechnic bridge wire, and the negative terminal of the load is connected to the negative terminal of the pyrotechnic bridge wire. The input terminal of the deprotection module is connected to the control power supply, the first control module, and the second control module. The output terminal is connected to the negative input terminal of the electromagnetic relay and the negative input terminal of the input power supply. It receives the deprotection signal from the first control module and the second control module, and controls the two moving contacts in the electromagnetic relay to engage with the first normally open contact and the second normally open contact, thereby completing the deprotection of the ignition control circuit. The input terminal of the first ignition module is connected to the control power supply and the second control module, and the output terminal is connected to the first normally open contact of the electromagnetic relay and the positive terminal of the ignition bus. After receiving the ignition signal output by the second control module, it connects the first normally open contact of the electromagnetic relay and the positive terminal of the ignition bus. The input terminal of the second ignition module is connected to the control power supply and the second control module, and the output terminal is connected to the second normally open contact of the electromagnetic relay and the negative terminal of the ignition bus. After receiving the ignition signal output by the second control module, it connects the second normally open contact of the electromagnetic relay and the negative terminal of the ignition bus. After both the first ignition module and the second ignition module are turned on, the pyrotechnic device is detonated.

2. The highly reliable ignition system for preventing electromagnetic relay malfunction according to claim 1, characterized in that, The first ignition module includes a first NAND gate logic chip and a first solid-state relay; one input terminal of the first NAND gate logic chip is connected to the first control pin of the second control module, and the other input terminal is connected to the control power supply; The output of the first NAND gate logic chip is connected to the negative input of the first solid-state relay, the control power supply is connected to the positive input of the first solid-state relay, the positive terminal of the ignition bus is connected to the positive output of the first solid-state relay, and the first normally open contact of the electromagnetic relay is connected to the negative output of the first solid-state relay.

3. The highly reliable ignition system for preventing electromagnetic relay malfunction according to claim 2, characterized in that, The output of the first NAND gate logic chip is connected to the negative input terminal of the first solid-state relay through a current-limiting resistor.

4. The highly reliable ignition system for preventing electromagnetic relay malfunction according to claim 1, characterized in that, The second ignition module includes a second NAND gate logic chip and a second solid-state relay; one input terminal of the second NAND gate logic chip is connected to the second control pin of the second control module, and the other input terminal is connected to the control power supply. The output of the second NAND gate logic chip is connected to the negative input of the second solid-state relay, the control power supply is connected to the positive input of the second solid-state relay, the negative terminal of the ignition bus is connected to the negative output of the second solid-state relay, and the second normally open contact of the electromagnetic relay is connected to the positive output of the second solid-state relay.

5. The highly reliable ignition system for preventing electromagnetic relay malfunction according to claim 4, characterized in that, The output of the second NAND gate logic chip is connected to the negative input terminal of the second solid-state relay through a current-limiting resistor.

6. The highly reliable ignition system for preventing electromagnetic relay malfunction according to claim 1, characterized in that, The protection release module includes a third NAND gate logic chip and a third solid-state relay; one input terminal of the third NAND gate logic chip is connected to the control pin of the first control module, and the other input terminal is connected to the third control pin of the second control module. The output of the third NAND gate logic chip is connected to the negative input of the third solid-state relay, the control power supply is connected to the positive input of the third solid-state relay, the negative input of the power supply is connected to the negative output of the third solid-state relay, and the negative input of the electromagnetic relay is connected to the positive output of the third solid-state relay.

7. The highly reliable ignition system for preventing electromagnetic relay malfunction according to claim 6, characterized in that, The output of the third NAND gate logic chip is connected to the negative input terminal of the third solid-state relay through a current-limiting resistor.

8. The highly reliable ignition system for preventing electromagnetic relay malfunction according to claim 1, characterized in that, The ignition system also includes a pyrotechnic status monitoring circuit, which detects the resistance of the pyrotechnic bridge wire in real time and sends the detection information to the controller to determine whether ignition is successful.

9. The highly reliable ignition system for preventing electromagnetic relay malfunction according to claim 1, characterized in that, The ignition system also includes a current-limiting resistor installed in the pyrotechnic initiation path.

10. The highly reliable ignition system for preventing electromagnetic relay malfunction according to claim 1, characterized in that, The ignition system includes two sets of ignition control circuits, forming a primary and backup dual-redundant ignition control circuit. When the primary ignition control circuit fails to ignite, the backup ignition control circuit is activated.

Images