A launch vehicle safety control system and safety control method

Abstract

The present invention discloses a launch vehicle security control system and security control method, which belongs to the field of rocket launch technology. The first and second sub-stages of the rocket are independently provided with corresponding flight controllers, security control combinations, engine controllers, safety self-destruction devices, security control command receivers, pulse coherent transponders, inertial measurement combinations, safety batteries, satellite navigation antennas and external measurement antennas. The present invention can realize the independent security control requirements of the first and second sub-stages of the rocket, and is compatible with the requirements of autonomous security control and passive security control, effectively solving the shortcomings of existing security control solutions.

Description

Technical Field

[0001] The present invention relates to the field of rocket launching technology, and in particular to a launch vehicle safety control system and a safety control method. Background Art

[0002] The safety self-destruction system is an important part of the rocket control system. It is used to blow up the rocket when a serious failure occurs in the launch vehicle, posing a threat to the safety of life and property. The existing launch vehicle safety control solution is generally a ground wireless self-destruction solution, and an on-rocket autonomous safety control solution will be used during sea launch. The safety self-destruction system is generally composed of a fault information source, a measuring device, a controller, a safety device, an actuator, a battery, and a cable network.

[0003] In the wireless self-destruction scheme, the general fault information source is the safety control command receiver, and the measurement device is the onboard flight controller and pulse coherent transponder. The ground measures and receives the rocket's trajectory and attitude information in real time, and compares it with the preset safety pipeline and attitude deviation thresholds. When the threshold is exceeded, a self-destruction signal is sent to the onboard safety control command receiver via wireless signals to execute self-destruction.

[0004] Under the autonomous safety control scheme, the general fault information source is the attitude angle deviation calculated in real time by the flight controller and the real-time position measured by the safety control and guidance module and the bound safety control pipeline information. The measuring devices are the inertial measurement combination, safety control and guidance module, flight control and guidance module, etc. When the arrow detects that the attitude angle exceeds the limit or flies out of the safety pipeline, it will automatically send a self-destruction signal to execute self-destruction.

[0005] The existing security and control solutions are unable to meet the separate security and control requirements for the first and second stages of the rocket. At the same time, when meeting the different security and control requirements for sea launches and land launches, the launch vehicle requires two different sets of solutions, which increases the design and manufacturing costs of the launch vehicle.

[0006] In view of this, it is necessary to provide a new technical solution to solve the above problems. Summary of the invention

[0007] In order to solve the above-mentioned technical problems, the present application provides a launch vehicle security control system and security control method, which can realize independent security control of the first and second sub-stages of the rocket, and is compatible with autonomous security control and passive security control requirements, effectively solving the shortcomings of existing security control solutions.

[0008] A launch vehicle safety control system, comprising: a flight controller, a safety control assembly, an engine controller, a safety self-destruction device, a safety control command receiver, a pulse coherent transponder, an inertial measurement assembly, a safety battery, and a satellite navigation antenna and an external measurement antenna;

[0009] The flight controller includes a first-level flight controller and a second-level flight controller which are independently arranged; the second-level flight controller is used for the main control calculation of the launch process of the carrier rocket; the first-level flight controller is used for the main control calculation of the recovery process of the carrier rocket;

[0010] The safety control combination is used for safety control calculation of the launch vehicle, including a first-level safety control combination and a second-level safety control combination which are independently set;

[0011] The engine controller is used to measure and control the rocket engine; the engine controller includes a first-level engine controller and a second-level engine controller which are independently arranged;

[0012] The safety self-destruction device is used to execute the self-destruction of the launch vehicle, including a first-level safety self-destruction device and a second-level safety self-destruction device that are independently arranged;

[0013] The security control instruction receiver is communicatively connected with the security control antenna, and is used to receive the security control instruction through the security control antenna, and can transmit the processed security control instruction to the security control combination; the security control instruction receiver includes an independently set first-level security control instruction receiver and a second-level security control instruction receiver;

[0014] The pulse coherent transponder is communicatively connected with the external measurement antenna, and can be used for real-time measurement of the trajectory of the aircraft on the ground, and provide trajectory data for subsequent analysis; the pulse coherent transponder includes a primary pulse coherent transponder and a secondary pulse coherent transponder which are independently arranged;

[0015] The inertial measurement unit is used for navigation during the flight of the launch vehicle, and includes an independently arranged first-stage inertial measurement unit and a second-stage inertial measurement unit;

[0016] The safety battery includes a first-level safety battery and a second-level safety battery which are independently arranged; the first-level safety battery is used to supply power to each module of the launch vehicle safety control system arranged on the first stage of the launch vehicle; the second-level safety battery is used to supply power to each module of the launch vehicle safety control system arranged on the second stage of the launch vehicle;

[0017] The secondary flight controller, the secondary engine controller, the secondary safety self-destruct device, the secondary safety control command receiver and the secondary inertial measurement unit are all communicatively connected to the secondary safety control unit;

[0018] The first-level flight controller, the first-level engine controller, the first-level safety self-destruct device, the first-level safety control command receiver and the first-level inertial measurement unit are all communicatively connected to the first-level safety control unit;

[0019] The primary security control combination is communicatively connected with the secondary security control combination.

[0020] Preferably, the security control combination includes a safety control module, a security control and guidance module, a security control timing module, a security control acquisition module and a security control power distribution module;

[0021] The safety control module is used for external communication interface and control solution and decision-making;

[0022] The security control satellite navigation module is used for collecting security control satellite navigation information in two-division;

[0023] The security control timing module is used to issue security control timing and execute security control self-destruction;

[0024] The security control acquisition module is used to collect the timing status of the arrow;

[0025] The security control power distribution module is used to supply power to the security control combination.

[0026] Preferably, the safety self-destruct device is an ignition device driven by electricity.

[0027] Preferably, the launch vehicle safety and control system is capable of performing passive self-destruction and / or active self-destruction.

[0028] According to another aspect of the present application, a launch vehicle safety control method is also provided, which uses the launch vehicle safety control system to perform active self-destruction of the launch vehicle, comprising the following steps:

[0029] S1. During the launch preparation phase, the system is powered on and powered on, the system operating status is self-checked, the security and control parameters and ballistic parameters are bound, and the working mode and working status are interpreted and confirmed;

[0030] S2. During the ignition and takeoff phase, the safety and control combination collects engine failure information. If an engine ignition failure occurs, the safety and control combination alarms and initiates a shutdown request to the flight controller and the ground test and launch control through the control system bus, but the onboard flight controller or the ground decision-making does not perform an emergency shutdown operation; after a normal takeoff, the safety and control combination continues to collect the motion status, timing status and engine working status of the launch vehicle, and does not perform safety control;

[0031] S3. During the initial flight phase, the launch vehicle is identified for abnormal flight attitude, falling flight, reverse flight, abnormal vertical flight, lateral flight out of the safety pipe, and abnormal engine operation, and whether to perform safety control is determined based on the identification results;

[0032] S4. During the basic flight phase, the launch vehicle is identified for abnormal flight attitude, lateral flight out of the safety pipe, falling into the protected area, falling into the unprotected area, and abnormal engine operation, and whether to perform safety control is determined based on the identification results;

[0033] S5. After the first and second stages of the rocket body are separated, the first and second stages of the launch vehicle are respectively identified for abnormal flight attitude, lateral flight out of the safety pipe, falling into the protected area, falling into the unprotected area, and abnormal engine operation, and whether to perform safety control is determined based on the identification results.

[0034] Preferably, the ignition and takeoff phase is from the ignition of the carrier rocket to 20 seconds after takeoff; the ignition and takeoff phase is from 20 seconds after takeoff to 60 seconds after takeoff; the basic flight phase is from 60 seconds after takeoff to when the safety and control stop conditions are met; wherein the safety and control stop conditions are active end termination or a speed of not less than 5000m / s and an altitude of not less than 10km.

[0035] Preferably, step S3 comprises:

[0036] The secondary safety control combination collects ignition and takeoff status, enters the initial stage after 20 seconds, and allows safety control;

[0037] The secondary security control combination collects and calculates the current attitude and position through the inertial group and security control satellite guidance information, and compares it with the ballistic binding value;

[0038] The secondary safety control combination and the flight control combination collect the same inertial group data and calculate with the same algorithm. If a single engine failure occurs at this stage, the two will reconstruct the trajectory with the same algorithm. At the same time, the flight control combination will transmit the reconstruction value of the next cycle to the secondary safety control combination in real time through bus communication. If the secondary safety control combination does not receive the reconstruction value of the current cycle, it will be based on its own reconstruction calculation result until it receives the reconstruction value of the next cycle. In the subsequent safety control process, the judgment standard is based on the reconstructed trajectory.

[0039] When executing self-destruction, according to the predetermined judgment conditions, the security control alarm command and the implementation of the security control self-destruction signal are issued in sequence, and the second-level security control combination transmits the self-destruction command signal to the first-level security control combination through bus communication.

[0040] Preferably, step S4 comprises:

[0041] Identify faults including abnormal flight attitude, lateral flight out of the safety pipe, falling into the protected area, falling into the unprotected area, and abnormal engine operation;

[0042] The secondary safety control combination collects the status of primary and secondary separation, engine shutdown, cowling separation and engine ignition, and allows safety control near non-ignition and separation periods;

[0043] The first-level safety control combination collects the first and second-level separation, engine shutdown, and engine ignition status, and allows safety control near the non-ignition and separation periods;

[0044] The secondary safety control combination and the secondary flight controller collect the same inertial group data and calculate with the same algorithm. If a single engine failure occurs at this stage, the two will reconstruct the trajectory with the same algorithm. At the same time, the flight control combination will transmit the reconstruction value of the next cycle to the secondary safety control combination in real time through bus communication. If the secondary safety control combination does not receive the reconstruction value of the current cycle, it will be based on its own reconstruction calculation result until it receives the reconstruction value of the next cycle.

[0045] Among them, in the subsequent security control process, the judgment standard is based on the reconstructed trajectory.

[0046] Preferably, step S5 comprises:

[0047] The first-stage safety control combination switches to an autonomous working state by collecting the first- and second-stage separation signals or receiving the separation command information issued by the second-stage safety control combination before separation; the first and second stages of the rocket respectively identify faults including abnormal flight attitude, lateral flight out of the safety pipe, falling into the protected area, falling into the unprotected area, and abnormal engine operation;

[0048] The secondary safety control combination and the secondary flight controller collect the same inertial group data and calculate with the same algorithm. If a single engine failure occurs at this stage, the two will reconstruct the trajectory with the same algorithm. At the same time, the flight control combination will transmit the reconstruction value of the next cycle to the secondary safety control combination through the bus in real time. If the secondary safety control combination does not receive the reconstruction value of the current cycle, it will be based on its own reconstruction calculation result until it receives the reconstruction value of the next cycle.

[0049] The first-level safety and control combination and the first-level flight controller collect the same inertial group data and calculate with the same algorithm. If a single engine failure occurs at this stage, both will reconstruct the trajectory using the same algorithm. At the same time, the first-level flight controller will transmit the reconstruction value of the next cycle to the first-level safety and control combination via the bus in real time. If the first-level safety and control combination has not received the reconstruction value of the current cycle, its own reconstruction calculation result will prevail until the reconstruction value of the next cycle is received.

[0050] Compared with the prior art, this application has at least the following beneficial effects:

[0051] 1. The present invention adopts a security control system design that integrates active and passive security control, and is compatible with active, passive and active and passive combined security control solutions, reducing design and manufacturing costs. A set of systems can adapt to both sea-launched and land-launched launch scenarios, and meet multiple needs of ground-based security control, space-based security control, and autonomous security control.

[0052] 2. The first and second sub-stages of the rocket of the present invention adopt independent and complete security and control solutions, with independent power supply, independent information channels, independent fault diagnosis and reconstruction solutions, and independent acquisition of all flight status, motion status, and power system working status. All of them adopt direct collection methods, without the need for collection through the control system, and can meet the needs of rocket sub-stage recovery.

[0053] 3. The safety and control combination of the present invention can independently perform flight fault diagnosis, adopt a truly autonomous safety and control method, bind trajectory information, obtain complete flight status, collect engine working status from the engine controller from the bus and make autonomous judgments, collect flight status from the inertial group and safety and control satellite navigation, and collect safety and control status from engine ignition, rocket separation and shutdown signals.

[0054] 4. In the present invention, after the trajectory is reconstructed due to engine failure, the flight control system transmits new trajectory information in real time, and no erroneous safety control will be performed. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] Hereinafter, some specific embodiments of the present invention will be described in detail in an exemplary and non-limiting manner with reference to the accompanying drawings. The same reference numerals in the accompanying drawings indicate the same or similar components or parts. It should be understood by those skilled in the art that these drawings are not necessarily drawn to scale. In the accompanying drawings:

[0056] Figure 1 It is a system connection diagram of the launch vehicle safety control system of the present invention;

[0057] Figure 2 The figure is a schematic diagram of the overall process of the launch vehicle safety control method of the present invention.

[0058] The above drawings include the following reference numerals:

[0059] 1. Secondary flight controller; 2. Secondary safety control combination; 3. Secondary engine controller; 4. Secondary safety self-destruct device; 5. Secondary safety battery; 6. Secondary pulse coherent transponder; 7. Secondary inertial measurement combination; 8. Secondary safety control command receiver; 9. First-level flight controller; 10. First-level engine controller; 11. First-level safety self-destruct device; 12. First-level safety battery; 13. First-level safety control combination; 14. First-level pulse coherent transponder; 15. First-level inertial measurement combination; 16. First-level safety control command receiver. DETAILED DESCRIPTION

[0060] In order to make the purpose, technical solution and advantages of the present application clearer, the technical solution of the present application will be clearly and completely described below in combination with the specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0061] like Figure 1As shown, a launch vehicle safety and control system is characterized in that it includes: a flight controller, a safety and control combination, an engine controller, a safety self-destruct device, a safety and control command receiver, a pulse coherent transponder, an inertial measurement combination, a safety battery, and a satellite navigation antenna and an external measurement antenna.

[0062] The flight controller includes a first-level flight controller 9 and a second-level flight controller 1 which are independently arranged; the second-level flight controller 1 is used for the main control calculation of the launch process of the carrier rocket; and the first-level flight controller 9 is used for the main control calculation of the recovery process of the carrier rocket.

[0063] The security control combination is used for security control calculations of launch vehicles. The main control computer of the security control system includes a safety control module, a security control satellite navigation module, a security control timing module, a security control acquisition module and a security control power distribution module.

[0064] Specifically, the safety control module is a CPU board, which is used for external communication interface and control solution and decision-making. The security control satellite navigation module is used for two-division security control satellite navigation information collection. The security control timing module is used for security control timing output and execution of security control self-destruction. The security control acquisition module is used to collect the timing output status on the arrow. The timing to be collected includes ignition signal, shutdown signal, separation signal, etc., so as to independently judge the current flight stage on the arrow. The security control power distribution module is used to supply power to the security control combination and other related security control equipment. In this scheme, the security control combination includes an independently set first-level security control combination 13 and a second-level security control combination 2. The first-level security control combination 13 and the second-level security control combination 2 adopt the same configuration.

[0065] The engine controller is used to measure and control the rocket engine; the engine controller includes an independently arranged first-stage engine controller 10 and a second-stage engine controller 3.

[0066] The safety self-destruct device is an electrically driven ignition pyrotechnic device, which executes the self-destruction of the carrier rocket by cutting, detonating, etc., and includes an independently arranged first-level safety self-destruct device 11 and a second-level safety self-destruct device 4.

[0067] The security control command receiver is communicatively connected to the security control antenna, and is used to receive security control commands issued by the ground security control station or satellite-based signals through the security control antenna, receive and process the wireless security control commands, and transmit the security control commands to the security control combination; the security control command receiver includes an independently set first-level security control command receiver 16 and a second-level security control command receiver 8.

[0068] The pulse coherent transponder is communicatively connected to the external measurement antenna, and is used to measure the speed, angle and distance of the aircraft on the ground. By working in coordination with the ground coherent and non-coherent radars through the external measurement antenna, the effective range is increased, real-time measurement of the aircraft trajectory is completed, and high-precision distance and speed information is provided, which is used to provide ballistic data for subsequent analysis. The pulse coherent transponder includes an independently set first-level pulse coherent transponder 14 and a second-level pulse coherent transponder 6.

[0069] The inertial measurement unit is generally a laser inertial measurement unit or a fiber optic inertial measurement unit, which is the core equipment for navigation during rocket flight. It includes an independently set first-level inertial measurement unit 15 and a second-level inertial measurement unit 7.

[0070] The safety battery includes a primary safety battery 12 and a secondary safety battery 5 which are independently arranged.

[0071] The secondary flight controller 1 , the secondary engine controller 3 , the secondary safety self-destruct device 4 , the secondary safety control instruction receiver 8 and the secondary inertial measurement unit 7 are all connected in communication with the secondary safety control unit 2 .

[0072] The first-level flight controller 9 , the first-level engine controller 10 , the first-level safety self-destruct device 11 , the first-level safety control instruction receiver 16 and the first-level inertial measurement unit 15 are all connected to the first-level safety control unit 13 in communication.

[0073] The primary security control assembly 13 and the secondary security control assembly 2 are connected in communication.

[0074] It should be noted that the launch vehicle safety and control system of this scheme is a system architecture under the maximum system envelope, that is, the passive self-destruction mode and the active self-destruction mode are in parallel, and self-destruction can be achieved if either one is effective. It can meet the requirements of both active and passive self-destruction modes. In actual application, the system products can be optimized and selected according to the needs of space-based and ground-based self-destruction and the specific circumstances of sea-launch and land-launch.

[0075] If the passive self-destruction method is selected, that is, the command is issued by the ground, there is no need for inertial measurement combination RS422 communication, nor is there a need for security control satellite guidance module and satellite guidance antenna.

[0076] If active self-destruction is chosen, that is, relying purely on autonomous decision-making on the rocket, there is no need for a security command receiver, security antenna, pulse coherent transponder and external measurement antenna.

[0077] This launch vehicle safety and control system only requires the same set of software, which can be configured according to the requirements of active self-destruction mode and passive self-destruction mode, and the corresponding functional modules can be shielded and selected.

[0078] In addition, it should be noted that the launch vehicle safety and control system is applicable to solid launch vehicles, liquid launch vehicles and solid-liquid hybrid launch vehicles, and is particularly suitable for liquid launch vehicles used for recovery.

[0079] like Figure 2 As shown, as another aspect of the present invention, a launch vehicle safety control method is also provided, which uses the launch vehicle safety control system to perform active self-destruction of the launch vehicle, including the following schemes:

[0080] The secondary security control assembly 2 collects the working status, timing status, fault diagnosis status, etc. from the primary security control assembly 13 through the RS422 bus, and the control instructions are also transmitted from the bus. That is, before the first and second stages are separated, the secondary security control assembly 2 is the main control of the security control system, and the primary security control assembly 13 is an auxiliary device. After the first and second stages are separated, the primary security control assembly 13 switches to an autonomous working state. The specific launch vehicle security control method is different in the launch vehicle launch preparation stage, ignition and takeoff stage, basic flight stage, and after the first and second stages of the rocket body are separated.

[0081] Among them, the ignition and takeoff phase is from the ignition of the carrier rocket to 20 seconds after takeoff; the ignition and takeoff phase is from 20 seconds after takeoff to 60 seconds after takeoff; the basic flight phase is from 60 seconds after takeoff to the satisfaction of the safety and control stop conditions; among them, the safety and control stop conditions are active end termination or a speed of not less than 5000m / s and an altitude of not less than 10km.

[0082] Launch preparation phase:

[0083] The system is powered on and powered on, the system's working status is self-checked, the security control parameters and ballistic parameters are bound, and the working mode and working status are interpreted and confirmed. In contrast, the traditional security control solution does not require ballistic parameters at this stage.

[0084] Ignition and takeoff phase:

[0085] The safety control combination collects engine failure information. If an engine ignition failure occurs, the safety control alarm will be issued and a shutdown request will be initiated to the flight controller and the ground test and launch control through the control system bus. Finally, the flight controller on the rocket or the ground will decide not to open the restraint release device to perform an emergency shutdown operation. After normal takeoff, the movement status, timing status and engine working status will continue to be collected. During this stage, if there is a fault, the safety control will not be executed.

[0086] In contrast, traditional security control solutions only monitor the motion status at this stage and cannot assist in decision-making for ignition fault diagnosis.

[0087] Initial flight phase:

[0088] Identify faults such as abnormal flight attitude, falling flight, reverse flight, abnormal vertical flight, sideways flight out of the safety pipe, abnormal engine operation, etc.

[0089] The second-level safety control combination 2 collects the ignition and take-off status, enters the initial stage after 20 seconds, and allows safety control.

[0090] The secondary security and control combination 2 collects and calculates the current attitude and position through the inertial group and security and control satellite information, and compares them with the ballistic binding values.

[0091] The secondary safety control combination 2 and the flight control combination collect the same inertial group data and calculate with the same algorithm. If a single engine failure occurs at this stage (such as severe thrust reduction or abnormal shutdown, etc.), the two use the same algorithm to reconstruct the trajectory. At the same time, the flight control combination transmits the reconstruction value of the next cycle to the secondary safety control combination 2 through the bus in real time. If the secondary safety control combination 2 does not receive the reconstruction value of the current cycle, it will be based on its own reconstruction calculation result until it receives the reconstruction value of the next cycle. In the subsequent safety control process, the judgment standard is based on the reconstructed trajectory.

[0092] When executing self-destruction, according to the predetermined judgment conditions, the security control alarm command and the security control self-destruction are issued in sequence. The second-level security control combination 2 transmits the self-destruction command signal to the first-level security control combination 13 through the RS422 bus.

[0093] Correspondingly, traditional security control solutions cannot meet the needs of fault diagnosis and trajectory reconstruction at this stage.

[0094] Basic flight phase:

[0095] Identify faults such as abnormal flight attitude, lateral flight out of the safety pipe, falling into a protected area, falling into an unprotected area, and abnormal engine operation.

[0096] The secondary safety control combination 2 collects the status of primary and secondary separation, engine shutdown, cowling separation and engine ignition, and allows safety control near non-ignition and separation periods.

[0097] The first-level safety control combination 13 collects the first and second level separation, engine shutdown, and engine ignition status, and allows safety control near the non-ignition and separation periods.

[0098] The secondary safety control combination 2 and the secondary flight controller 1 collect the same inertial group data and calculate with the same algorithm. If a single engine failure occurs at this stage (such as severe thrust drop or abnormal shutdown, etc.), the two use the same algorithm to reconstruct the trajectory. At the same time, the flight control combination transmits the reconstruction value of the next cycle to the secondary safety control combination 2 through the bus in real time. If the secondary safety control combination 2 does not receive the reconstruction value of the current cycle, it will be based on its own reconstruction calculation result until it receives the reconstruction value of the next cycle. In the subsequent safety control process, the judgment standard is based on the reconstructed trajectory.

[0099] After the first and second stages of the rocket body separate:

[0100] The first-level safety and control combination 13 switches to an autonomous working state by collecting the first- and second-level separation signals or receiving the separation command information issued by the second-level safety and control combination 2 before separation; the first-stage rocket and the second-stage rocket respectively identify faults including abnormal flight attitude, lateral flight out of the safety pipe, falling into a protected area, falling into an unprotected area, and abnormal engine operation.

[0101] The secondary safety control combination 2 and the secondary flight controller 1 collect the same inertial group data and calculate with the same algorithm. If a single engine failure occurs at this stage, the two will reconstruct the trajectory with the same algorithm. At the same time, the flight control combination transmits the reconstruction value of the next cycle to the secondary safety control combination 2 through the bus in real time. If the secondary safety control combination 2 does not receive the reconstruction value of the current cycle, it will be based on its own reconstruction calculation result until it receives the reconstruction value of the next cycle. In the subsequent safety control process, the judgment standard is based on the reconstructed trajectory.

[0102] The first-level security control combination 13 and the first-level flight controller 9 collect the same inertial group data and calculate with the same algorithm. If a single engine failure occurs at this stage, the two use the same algorithm to reconstruct the trajectory. At the same time, the first-level flight controller 9 transmits the reconstruction value of the next cycle to the first-level security control combination 13 through the bus in real time. If the first-level security control combination 13 does not receive the reconstruction value of the current cycle, it will be based on its own reconstruction calculation result until it receives the reconstruction value of the next cycle. In the subsequent security control process, the judgment standard is based on the reconstructed trajectory.

[0103] Correspondingly, the traditional safety and control system is unable to perform separate safety and control on the recovered first stage and the second stage that continues to fly at this stage, nor can it adapt to the needs of fault diagnosis and trajectory reconstruction.

[0104] It should be noted that the passive method is basically the same as the traditional solution, except that a special security control combination is used to implement the self-destruction sequence, which will not be introduced in detail here.

[0105] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present application. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should be understood that when the terms "comprise" and / or "include" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.

[0106] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein.

[0107] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A launch vehicle safety control system, characterized in that: include: Flight controller, safety control unit, engine controller, safety self-destruct device, safety control command receiver, pulse coherent transponder, inertial measurement unit, safety battery, satellite navigation antenna and external measurement antenna; The flight controller comprises a first-level flight controller (9) and a second-level flight controller (1) which are independently arranged; the second-level flight controller (1) is used for main control calculations during the launch process of the carrier rocket; and the first-level flight controller (9) is used for main control calculations during the recovery process of the carrier rocket; The safety control assembly is used for safety control calculation of a launch vehicle, and includes a first-level safety control assembly (13) and a second-level safety control assembly (2) which are independently arranged; The engine controller is used to measure and control the rocket engine; the engine controller comprises a first-stage engine controller (10) and a second-stage engine controller (3) which are independently arranged; The safety self-destruction device is used to execute the self-destruction of the carrier rocket, and comprises a first-level safety self-destruction device (11) and a second-level safety self-destruction device (4) which are independently arranged; The security control instruction receiver is communicatively connected to the security control antenna, and is used to receive security control instructions through the security control antenna, and can transmit the processed security control instructions to the security control assembly; the security control instruction receiver includes an independently arranged first-level security control instruction receiver (16) and a second-level security control instruction receiver (8); The pulse coherent transponder is communicatively connected to the external measurement antenna and can be used for real-time ground measurement of the aircraft trajectory to provide trajectory data for subsequent analysis; the pulse coherent transponder includes an independently arranged primary pulse coherent transponder (14) and a secondary pulse coherent transponder (6); The inertial measurement unit is used for navigation during the flight of a launch vehicle, and includes an independently arranged first-stage inertial measurement unit (15) and a second-stage inertial measurement unit (7); The safety battery comprises a first-level safety battery (12) and a second-level safety battery (5) which are independently arranged; the first-level safety battery (12) is used to supply power to each module of a carrier rocket safety control system arranged on a first stage of a carrier rocket; the second-level safety battery (5) is used to supply power to each module of a carrier rocket safety control system arranged on a second stage of a carrier rocket; The secondary flight controller (1), the secondary engine controller (3), the secondary safety self-destruct device (4), the secondary safety control command receiver (8) and the secondary inertial measurement unit (7) are all communicatively connected to the secondary safety control unit (2); The first-level flight controller (9), the first-level engine controller (10), the first-level safety self-destruct device (11), the first-level safety control instruction receiver (16) and the first-level inertial measurement unit (15) are all in communication connection with the first-level safety control unit (13); The primary security control assembly (13) is communicatively connected with the secondary security control assembly (2); Using the launch vehicle safety control system to carry out active self-destruction of the launch vehicle includes the following steps: S1. During the launch preparation phase, the system is powered on and powered on, the system operating status is self-checked, the security and control parameters and ballistic parameters are bound, and the working mode and working status are interpreted and confirmed; S2. During the ignition and takeoff phase, the safety and control combination collects engine failure information. If an engine ignition failure occurs, the safety and control combination alarms and initiates a shutdown request to the flight controller and the ground test and launch control through the control system bus, but the onboard flight controller or the ground decision-making does not perform an emergency shutdown operation; after a normal takeoff, the safety and control combination continues to collect the motion status, timing status and engine working status of the launch vehicle, and does not perform safety control; S3. During the initial flight phase, the launch vehicle is identified for abnormal flight attitude, falling flight, reverse flight, abnormal vertical flight, lateral flight out of the safety pipe, and abnormal engine operation, and whether to perform safety control is determined based on the identification results; S4. During the basic flight phase, the launch vehicle is identified for abnormal flight attitude, lateral flight out of the safety pipe, falling into the protected area, falling into the unprotected area, and abnormal engine operation, and whether to perform safety control is determined based on the identification results; S5. After the first and second stages of the rocket body are separated, the first and second stages of the launch vehicle are respectively identified for abnormal flight attitude, lateral flight out of the safety pipe, falling into the protected area, falling into the unprotected area, and abnormal engine operation, and whether to perform safety control is determined based on the identification results; The ignition and takeoff phase is from the ignition of the carrier rocket to 20 seconds after takeoff; the initial flight phase is from 20 seconds after takeoff to 60 seconds after takeoff; the basic flight phase is from 60 seconds after takeoff to the point where the safety and control stop conditions are met; the safety and control stop conditions are active end termination or a speed of not less than 5000m / s and an altitude of not less than 10km; Wherein, the step S3 comprises: The secondary safety control combination (2) collects the ignition and takeoff status, enters the initial stage after 20 seconds, and allows safety control; The secondary security control combination (2) collects and calculates the current attitude and position through the inertial measurement combination and security control satellite guidance information, and compares them with the ballistic binding value; The secondary safety control assembly (2) and the flight control assembly collect the same inertial group data and perform calculations using the same algorithm. If a single engine failure occurs during this stage, the two assemblys reconstruct the trajectory using the same algorithm. At the same time, the flight control assembly transmits the reconstruction value of the next cycle to the secondary safety control assembly (2) in real time via bus communication. If the secondary safety control assembly (2) does not receive the reconstruction value of the current cycle, it will use its own reconstruction calculation result as the standard until it receives the reconstruction value of the next cycle. In the subsequent safety control process, the judgment standard is based on the reconstructed trajectory. When executing self-destruction, according to the predetermined judgment conditions, a security control warning instruction and a security control self-destruction signal are issued in sequence, and the second-level security control combination (2) transmits the self-destruction instruction signal to the first-level security control combination (13) through bus communication.

2. The launch vehicle safety control system according to claim 1, characterized in that: The security control assembly includes a safety control module, a security control and guidance module, a security control timing module, a security control acquisition module and a security control power distribution module; The safety control module is used for external communication interface and control solution and decision-making; The security control satellite navigation module is used for collecting security control satellite navigation information in two-division; The security control timing module is used to issue security control timing and execute security control self-destruction; The security control acquisition module is used to collect the timing status of the arrow; The security control power distribution module is used to supply power to the security control combination.

3. The launch vehicle safety control system according to claim 1, characterized in that: The safety self-destruction device is a pyrotechnic device which is electrically driven to ignite.

4. A launch vehicle safety control method, characterized in that: Using the launch vehicle safety control system according to any one of claims 1 to 3 to carry out active self-destruction of the launch vehicle comprises the following steps: S1. During the launch preparation phase, the system is powered on and powered on, the system operating status is self-checked, the security and control parameters and ballistic parameters are bound, and the working mode and working status are interpreted and confirmed; S2. During the ignition and takeoff phase, the safety and control combination collects engine failure information. If an engine ignition failure occurs, the safety and control combination alarms and initiates a shutdown request to the flight controller and the ground test and launch control through the control system bus, but the onboard flight controller or the ground decision-making does not perform an emergency shutdown operation; after a normal takeoff, the safety and control combination continues to collect the motion status, timing status and engine working status of the launch vehicle, and does not perform safety control; S3. During the initial flight phase, the launch vehicle is identified for abnormal flight attitude, falling flight, reverse flight, abnormal vertical flight, lateral flight out of the safety pipe, and abnormal engine operation, and whether to perform safety control is determined based on the identification results; S4. During the basic flight phase, the launch vehicle is identified for abnormal flight attitude, lateral flight out of the safety pipe, falling into the protected area, falling into the unprotected area, and abnormal engine operation, and whether to perform safety control is determined based on the identification results; S5. After the first and second stages of the rocket body are separated, the first and second stages of the launch vehicle are respectively identified for abnormal flight attitude, lateral flight out of the safety pipe, falling into the protected area, falling into the unprotected area, and abnormal engine operation, and whether to perform safety control is determined based on the identification results; The ignition and takeoff phase is from the ignition of the carrier rocket to 20 seconds after takeoff; the initial flight phase is from 20 seconds after takeoff to 60 seconds after takeoff; the basic flight phase is from 60 seconds after takeoff to the point where the safety and control stop conditions are met; the safety and control stop conditions are active end termination or a speed of not less than 5000m / s and an altitude of not less than 10km; The step S3 comprises: The secondary safety control combination (2) collects the ignition and takeoff status, enters the initial stage after 20 seconds, and allows safety control; The secondary security control combination (2) collects and calculates the current attitude and position through the inertial measurement combination and security control satellite guidance information, and compares them with the ballistic binding value; The secondary safety control assembly (2) and the flight control assembly collect the same inertial group data and perform calculations using the same algorithm. If a single engine failure occurs during this stage, the two assemblys reconstruct the trajectory using the same algorithm. At the same time, the flight control assembly transmits the reconstruction value of the next cycle to the secondary safety control assembly (2) in real time via bus communication. If the secondary safety control assembly (2) does not receive the reconstruction value of the current cycle, it will use its own reconstruction calculation result as the standard until it receives the reconstruction value of the next cycle. In the subsequent safety control process, the judgment standard is based on the reconstructed trajectory. When executing self-destruction, according to the predetermined judgment conditions, a security control warning instruction and a security control self-destruction signal are issued in sequence, and the second-level security control combination (2) transmits the self-destruction instruction signal to the first-level security control combination (13) through bus communication.

5. The launch vehicle safety control method according to claim 4, characterized in that: The step S4 comprises: Identify faults including abnormal flight attitude, lateral flight out of the safety pipe, falling into the protected area, falling into the unprotected area, and abnormal engine operation; The secondary safety control combination (2) collects the status of primary and secondary separation, engine shutdown, cowling separation and engine ignition, and allows safety control near the non-ignition and separation periods; The first-level safety control combination (13) collects the first and second-level separation, engine shutdown, and engine ignition status, and allows safety control near the non-ignition and separation periods; The secondary safety control assembly (2) and the secondary flight controller (1) collect the same inertial group data and perform calculations using the same algorithm. If a single engine failure occurs during this stage, the two will perform trajectory reconstruction using the same algorithm. At the same time, the flight control assembly will transmit the reconstruction value of the next cycle to the secondary safety control assembly (2) in real time via bus communication. If the secondary safety control assembly (2) does not receive the reconstruction value of the current cycle, it will use its own reconstruction calculation result as the standard until it receives the reconstruction value of the next cycle. Among them, in the subsequent security control process, the judgment standard is based on the reconstructed trajectory.

6. The launch vehicle safety control method according to claim 5, characterized in that: The step S5 comprises: The first-stage safety control assembly (13) switches to an autonomous working state by collecting the first- and second-stage separation signals or receiving the separation command information issued by the second-stage safety control assembly (2) before separation; the first-stage rocket and the second-stage rocket respectively identify faults including abnormal flight attitude, lateral flight out of the safety pipe, falling into a protected area, falling into an unprotected area, and abnormal engine operation; The secondary safety control assembly (2) and the secondary flight controller (1) collect the same inertial group data and perform calculations using the same algorithm. If a single engine failure occurs during this stage, the two will perform trajectory reconstruction using the same algorithm. At the same time, the flight control assembly will transmit the reconstruction value of the next cycle to the secondary safety control assembly (2) via the bus in real time. If the secondary safety control assembly (2) does not receive the reconstruction value of the current cycle, it will use its own reconstruction calculation result as the standard until it receives the reconstruction value of the next cycle. The first-level safety control assembly (13) and the first-level flight controller (9) collect the same inertial group data and perform calculations using the same algorithm. If a single engine failure occurs during this stage, the two will reconstruct the trajectory using the same algorithm. At the same time, the first-level flight controller (9) will transmit the reconstruction value of the next cycle to the first-level safety control assembly (13) via the bus in real time. If the first-level safety control assembly (13) does not receive the reconstruction value of the current cycle, its own reconstruction calculation result will prevail until the reconstruction value of the next cycle is received.

Images