Avionics system, display reconstruction method and aircraft

Abstract

The invention discloses an avionics system, a display reconstruction method and an aircraft, and relates to the technical field of avionics, the avionics system comprises two avionics computing devices and two display devices, the two avionics computing devices are in communication connection, and each display device is connected with each avionics computing device through a digital video line and a signal transmission line; the two pieces of avionics computing equipment form a dual-redundancy avionics computing subsystem for providing avionics computing backup; the two avionics computing devices and the two display devices form a cross redundancy display control subsystem, when any avionics computing device and / or any display device have faults, display reconstruction is carried out through other devices, display control backup is provided, and the faults comprise LRU failure and / or HA failure. According to the invention, decoupling of display control and avionics calculation is realized, the configuration display flexibility of the avionics system is improved, and the avionics system can provide high-reliability display control backup.

Description

Technical Field

[0001] The present application relates to the field of avionics technology, and in particular to an avionics system, a display reconstruction method, and an aircraft. Background Art

[0002] The core of an avionics system (abbreviated as avionics) generally consists of a display control system and an avionics computing system. The display control system primarily provides human-machine interaction, while the avionics computing system primarily provides a common computing platform. Currently, there are two common avionics system architectures: a separate architecture and an integrated architecture. In both architectures, the physical hardware (DHA) and the integrated display unit (IDU) computer are integrated. This results in the DHA display size being fixed to the IDU's size, preventing flexible resizing. Summary of the Invention

[0003] The main purpose of this application is to provide an avionics system, a display reconstruction method and an aircraft, aiming to solve the technical problem in related technologies that the hardware display size of the avionics system is limited and cannot be flexibly adjusted.

[0004] To achieve the above-mentioned object, the present application proposes an avionics system, comprising two avionics computing devices and two display devices, wherein the two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device via a digital video line and a signal transmission line; Among them, two avionics computing devices constitute a dual-redundancy avionics computing subsystem to provide avionics computing backup; Two avionics computing devices and two display devices constitute a cross-redundant display control subsystem. When any avionics computing device and / or any display device fails, display reconstruction is performed through other devices to provide display control backup; among them, other devices are other avionics computing devices and display devices among the two avionics computing devices and two display devices except the failed device, and the failure includes the failure of the field replaceable unit LRU and / or the failure of the resident application HA.

[0005] In one embodiment, each display device includes: The display unit is connected to the two avionics computing devices respectively through digital video cables, and is used for displaying according to the received video signals.

[0006] In one embodiment, each display device further includes: A communication unit is connected to the two avionics computing devices respectively through a signal transmission line, and the communication unit is used to output user operation instructions according to user operation information; The self-test unit is connected to two avionics computing devices through signal transmission lines. The self-test unit is used to detect equipment failures and output self-test information.

[0007] In one embodiment, each display device further includes: The frozen screen detection unit is connected to the two avionics computing devices and the display unit through digital video cables. The frozen screen detection unit is used to perform frozen screen detection based on the received video signal and output the video signal that has passed the detection to the display unit.

[0008] In one embodiment, each avionics computing device includes: Avionics calculation module, used to perform avionics calculations based on received external information and output graphic processing signals; The graphics processing module is connected to the avionics computing module and is connected to two display devices through digital video lines. The graphics processing module is used to generate graphics and render images based on graphics processing signals, and output two video signals, which are transmitted to the two display devices through digital video lines respectively. The avionics computing module is connected to the two display devices respectively through signal transmission lines. The avionics computing module is also used to receive user operation instructions and self-test information output by the display devices through the signal transmission lines.

[0009] In one embodiment, each avionics computing device further includes: The display management module is connected to the avionics computing module and the graphics processing module respectively, and is also connected to each display device through a digital video line and a signal transmission line. The display management modules in the two avionics computing devices are communicated with each other. The display management module is used to monitor the failure conditions of each display device and each avionics computing device to provide avionics computing backup and display control backup.

[0010] In addition, to achieve the above-mentioned purpose, the present application also proposes a display reconstruction method applicable to the above-mentioned avionics system, the display reconstruction method comprising: Obtain fault monitoring information from two avionics computing devices and two display devices; determining the faulty device and other devices according to the fault monitoring information, where the faulty device is any avionics computing device and / or any display device, and the other devices are the other avionics computing devices and display devices among the two avionics computing devices and the two display devices except the faulty device; Based on the fault condition of the faulty device and the preset display reconstruction logic, other devices are used to perform display reconstruction to provide display control backup; wherein the fault condition includes the failure of the field replaceable unit (LRU) and / or the failure of the resident application (HA).

[0011] In one embodiment, based on the fault condition of the faulty device and preset display reconstruction logic, display reconstruction is performed using other devices, including: When the fault condition of the faulty device is a single LRU failure, dual-screen display reconstruction or single-screen display reconstruction is performed using other devices according to the single LRU failure display reconstruction mechanism. A single LRU failure refers to an LRU failure in any avionics computing device or any display device. When the fault condition of the faulty device is a double LRU failure, according to the double LRU failure display reconstruction mechanism, other devices are used to perform single-screen display reconstruction or display fault alarm. Double LRU failure refers to the LRU failure of any avionics computing device and any display device, or the LRU failure of two display devices. When the fault condition of the faulty device is a single HA failure, dual-screen display reconstruction is performed using other devices according to the single HA failure display reconstruction mechanism. Single HA failure refers to the HA failure of any avionics computing device. When the fault condition of the faulty device is dual HA failure, according to the dual HA failure display reconstruction mechanism, other devices are used to perform dual-screen display reconstruction and / or display fault alarm, where dual HA failure means that both avionics computing devices have HA failure.

[0012] In one embodiment, the two avionics computing devices include a master computing device and a slave computing device; When a single LRU fails, other devices are used for dual-screen or single-screen display reconstruction based on the single LRU failure display reconstruction mechanism, including: If the LRU of the master computing device fails, the slave computing device will be switched to perform dual-screen display reconstruction on the two display devices; If an LRU failure occurs in the slave computing device, the master computing device will continue to perform normal display control on the two display devices. If an LRU failure occurs on any display device, the main computing device will reconstruct the single-screen display of the other display device.

[0013] In one embodiment, when the fault condition of the faulty device is a dual LRU failure, according to the dual LRU failure display reconstruction mechanism, other devices are used to perform single-screen display reconstruction or display fault alarm, including: If an LRU failure occurs on the master computing device and any display device, the slave computing device will be switched to perform single-screen display reconstruction on the other display device; If an LRU failure occurs on the slave computing device and any display device, the master computing device will reconstruct the single-screen display of the other display device; If both display devices have LRU failures, the main computing device will issue a display failure alarm.

[0014] In one embodiment, each avionics computing device includes a graphics processing module, the graphics processing module includes a primary flight display (PFD) unit and a multi-function display (MFD) unit, and both the PFD unit and the MFD unit are connected to each display device via a digital video line and a signal transmission line; the two avionics computing devices include a master computing device and a slave computing device; When the faulty device fails due to a single HA failure, dual-screen display reconstruction is performed using other devices according to the single HA failure display reconstruction mechanism, including: If the PFD unit or MFD unit in the master computing device fails in HA, the PFD unit and MFD unit in the slave computing device are switched to perform dual-screen display reconstruction on the two display devices; If the PFD unit or the MFD unit in the slave computing device fails in HA, the PFD unit and the MFD unit in the master computing device continue to perform normal display control on the two display devices.

[0015] In one embodiment, when the fault condition of the faulty device is a dual HA failure, dual-screen display reconstruction and / or display fault alarm are performed using other devices according to the dual HA failure display reconstruction mechanism, including: If the PFD unit in the master computing device and the MFD unit in the slave computing device have HA failures, the structure of the PFD unit in the slave computing device is sent to the master computing device to form a new PFD unit in the master computing device, so that the new PFD unit and MFD unit in the master computing device perform dual-screen display reconstruction on the two display devices; If the MFD unit in the master computing device and the PFD unit in the slave computing device have HA failures, the structure of the MFD unit in the slave computing device is sent to the master computing device to form a new MFD unit in the master computing device, so that the PFD unit in the master computing device and the new MFD unit can reconstruct the dual-screen display of the two display devices; If the PFD units in both the master and slave computing devices experience HA failure, the MFD unit in the master computing device will continue to control the MFD display of both display devices, and the master computing device will issue a PFD display failure alarm. If HA failure occurs in both the MFD units in the master computing device and the slave computing device, the PFD unit in the master computing device will continue to control the PFD display of the two display devices, and the master computing device will issue an MFD display failure alarm.

[0016] In addition, to achieve the above objectives, the present application also proposes an aircraft, comprising the avionics system as described above.

[0017] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium. A computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the display reconstruction method as described above are implemented.

[0018] In addition, to achieve the above-mentioned purpose, the present application also proposes a computer program product, which includes a computer program. When the computer program is executed by a processor, the steps of the display reconstruction method as described above are implemented.

[0019] One or more technical solutions proposed in this application have at least the following technical effects: An avionics system is proposed, comprising two avionics computing devices and two display devices. The two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device via a digital video line and a signal transmission line. The two avionics computing devices constitute a dual-redundant avionics computing subsystem, and the two avionics computing devices and the two display devices constitute a cross-redundant display control subsystem, forming an avionics system with a distributed architecture. The dual-redundant avionics computing subsystem can provide avionics computing backup by the other avionics computing device when any avionics computing device fails, thereby ensuring the normal operation of the avionics system. The cross-redundant display control subsystem can perform display reconstruction through the remaining other devices when any avionics computing device and / or any display device fails. Provide display control backup to ensure the normal configuration display of the avionics system; the avionics system realizes the decoupling of display control and avionics computing, can be applied to display devices of any size, and has flexible equipment installation and wiring, which can meet more personalized display needs and improve the flexibility of avionics system configuration display; on this basis, in the cross-redundant display control subsystem, any avionics computing device and / or any display device may have a failure of the field replaceable unit LRU and / or a failure of the resident application HA. Taking into account a variety of failure conditions, it can adapt to different application environments to perform corresponding display reconstruction, so that the avionics system can provide high-reliability display control backup to ensure the normal configuration display of the avionics system, thereby avoiding affecting user operations. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0021] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the following briefly introduces the drawings required for use in the embodiments or related technical descriptions. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0022] Figure 1A schematic diagram of the system architecture of an embodiment of the avionics system of the present application; Figure 2 This is a structural diagram of a display device in an embodiment of the avionics system of the present application; Figure 3 A schematic diagram of the system architecture of another embodiment of the avionics system of the present application; Figure 4 This is a structural diagram of an avionics computing device in another embodiment of the avionics system of the present application; Figure 5 This is a flow chart showing an embodiment of a reconstruction method of the present application; Figure 6 This is a schematic diagram of display reconstruction logic corresponding to a single LRU failure in another embodiment of the display reconstruction method of the present application; Figure 7 This is a schematic diagram of display reconstruction logic corresponding to double LRU failure in another embodiment of the display reconstruction method of the present application; Figure 8 This is a logical diagram of display reconstruction corresponding to a single HA failure in another embodiment of the display reconstruction method of the present application; Figure 9 This is a logical diagram of display reconstruction corresponding to dual HA failure in another embodiment of the display reconstruction method of the present application.

[0023] The realization of the objectives, functional features and advantages of this application will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0024] The following will be combined with the accompanying drawings in the embodiments of this application to clearly and completely describe the technical solutions in the embodiments of this application. Obviously, the embodiments described are only part of the embodiments of this application, not all of the embodiments. Based on the embodiments of this application, all other embodiments obtained by ordinary technicians in this field without making any creative efforts are within the scope of protection of this application.

[0025] It should be noted that if the embodiments of this application involve directional indications (such as up, down, left, right, front, back, etc.), such directional indications are only used to explain the relative positional relationship, movement, etc. between the components in a certain specific posture. If the specific posture changes, the directional indication will also change accordingly. In addition, if the embodiments of this application involve descriptions of "first", "second", etc., such descriptions of "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of technical features indicated. Therefore, the features specified as "first" or "second" can explicitly or implicitly include at least one of such features. In addition, if "and / or" or "and / or" appears in the full text, its meaning includes three parallel solutions. Taking "A and / or B" as an example, it includes solution A, solution B, or solutions that meet both A and B. In addition, the technical solutions between the various embodiments can be combined with each other, but they must be based on the fact that ordinary technicians in this field can implement them. When the combination of technical solutions is mutually contradictory or cannot be implemented, it should be deemed that such a combination of technical solutions does not exist and is not within the scope of protection required by this application.

[0026] With advancements in eVTOL (Electric Vertical Takeoff and Landing) technology and growing demand for air transportation, eVTOL aircraft continue to develop. Due to their advantages of low carbon emissions, low noise, high levels of automation, low operating costs, and high safety, eVTOLs are suitable for a variety of scenarios, including urban transportation, emergency rescue missions, rapid cargo transportation, and end-to-end delivery.

[0027] The avionics system (or avionics system) is the brain of the eVTOL. The display control system and avionics computing system are its core. The display control system primarily provides human-machine interaction, while the avionics computing system primarily provides a common computing platform. Currently, there are two common architectures for display control systems and avionics computing systems: One is a split architecture, consisting of two devices: the IDU (Integrated Display Unit) and the IMA (Integrated Modular Avionics) computer / computing platform. The display control system software resides in the IDU and IMA respectively, while the physical hardware, the DHA (Display Head Assembly), is integrated with the IDU. This split architecture is commonly used on large aircraft and offers advantages such as high system integration, strong and scalable computing power, and high safety redundancy. However, its disadvantages include numerous system devices, high SWaP (Size, Weight, and Power), and high cost. The DHA's display size is fixed to the size of the IDU and cannot be flexibly resized.

[0028] The other is an all-in-one architecture, featuring a smart integrated display unit (Smart IDU) computer with computing, graphics processing, and display capabilities. This single device houses all the display control system software, with the physical hardware, the DHA, and the Smart IDU integrated. This all-in-one architecture, commonly used on general aviation aircraft, offers advantages of high integration. However, its disadvantages include high equipment complexity, difficulty in maintenance, limited upgrades, significant weight and space constraints, a single point of failure in both the DHA and IDU (i.e., if the IDU fails, the DHA becomes obsolete even if it's functioning properly), and a fixed display size for the DHA, which cannot be flexibly resized.

[0029] In addition, in the above two architectures, the avionics computing system part mostly adopts a single-core design. Due to the low computing power of the single-core processor and the limited system computing power, it is usually only possible to meet the computing power requirements of the resident application by adding more modules, resulting in increased equipment weight and cost.

[0030] Furthermore, in the aforementioned avionics system architecture, when it comes to display control, if a device failure occurs, the entire system is generally shut down, rendering the DHA unable to display. Alternatively, a single fault response is implemented, adding a physical hardware DHA integrated with the IDU and then invoking the backup DHA for display. However, if the fault occurs on the IDU side, the entire system still needs to be shut down, rendering both the DHA and the backup DHA unable to display. Therefore, when faced with various device failure scenarios, the avionics system response measures in related technologies are limited, failing to guarantee the normal operation of the display function and the integrity of the displayed results, thus impacting user operations.

[0031] To address the above-mentioned issues, the present application provides an avionics system, a display reconstruction method, and an aircraft. The present application and the following embodiments are described below with reference to the accompanying drawings.

[0032] The present application proposes an avionics system, which is applied to an aircraft.

[0033] In one embodiment of the avionics system of the present application, refer to Figure 1 , Figure 1 This is a schematic diagram of the system architecture of an avionics system. The avionics system may include two avionics computing devices and two display devices. The two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device via a digital video line and a signal transmission line.

[0034] The two avionics computing devices constitute a dual-redundant avionics computing subsystem, providing avionics computing backup. The two avionics computing devices and two display devices constitute a cross-redundant display control subsystem. When any avionics computing device and / or any display device fails, display reconstruction is performed through the other devices to provide display control backup. The other devices are the other avionics computing devices and display devices in the two avionics computing devices and the two display devices, excluding the failed device. Failures may include failure of a line replaceable unit (LRU) and / or a hosted application (HA). The cross-redundant display control subsystem may also optionally execute the display reconstruction method of the embodiment of the present application.

[0035] It should be noted that in a dual-redundant avionics computing subsystem, the two avionics computing devices can serve as backups for each other, or one can be designated as the master and the other as the slave, achieving master-slave backup. In practical applications, the master computing device can default to performing avionics system operations and control, and simultaneously output two video signals. The slave computing device only serves as a hot backup. In the event of a master failure, the slave computing device is activated to take over the master's operations, ensuring normal display control of the display device. Therefore, in a dual-redundant avionics computing subsystem, if either avionics computing device fails, the other avionics computing device provides avionics computing backup, ensuring the normal operation of the avionics system.

[0036] It can be understood that the dual-redundant avionics computing subsystem can provide avionics computing backup by the other avionics computing device when any avionics computing device fails to ensure the normal operation of the avionics system. Therefore, in the event of a single avionics computing device failure, the avionics system can still maintain normal display on both display devices, especially when the two display devices display different contents respectively, the normal display function of the system can also be guaranteed.

[0037] It should also be noted that in the cross-redundant display control subsystem, the two avionics computing devices can back up each other, and the two display devices can also back up each other, to achieve cross-redundant backup of the video source end and the display end. The avionics computing device and / or the display device has a fault, which may be an LRU failure of the avionics computing device and / or the display device, and / or an HA failure of the avionics computing device. Among them, LRU failure refers to a major failure of the LRU (field replaceable unit) that cannot support the resident application to complete the expected function. The LRU (field replaceable unit) may include an IDU (Integrated Display Unit), an RDIU (Remote Data Interface Unit), a GPM (General Processing Module), etc. HA failure refers to a fault situation in a high-reliability system where the HA (resident application) is unable to provide aircraft-level functions continuously and without interruption as expected, resulting in service interruption or performance degradation. The HA (resident application) can include the FMS (Flight Management System), CAS (Crew Alerting System), OMS (Onboard Maintenance System), PFD (Primary Flight Display) control module, MFD (Multifunction Display) control module, etc.

[0038] It is understandable that when the cross-redundant display control subsystem performs display reconstruction, it can use conventional display reconstruction methods to directly switch between the set multiple display modes to convert the display of primary flight information, navigation information, and crew warning information, etc., to ensure the continuity and consistency of the display of primary flight information and main engine information for pilots; it can also control the display device to perform display reconstruction for different numbers or sizes of display devices after changing the display content, display layout, display direction and other related display configuration parameters; it can also use preset display reconstruction logic to implement different display reconstruction controls. In actual application, it can be selected according to needs and is not specifically limited here. Exemplarily, when the cross-redundant display control subsystem performs display reconstruction, it can execute the display reconstruction method of the embodiment of the present application, which can be specifically executed by the avionics computing device or an external control device that is communicatively connected to the avionics computing device.

[0039] For example, the avionics computing device can be an ACU (Avionics Computing Unit) avionics computer / computing platform, and the display device can be a DHA (Display Head Assembly) display / monitor, which provides only display functions, is smaller, and is easier to install. The two display devices can display the same content, for example, both displaying avionics system operating data for different users; or they can display different content, for example, with one display device serving as the PFD and the other as the MFD, achieving a combined PFD+MFD display. The specific choice depends on actual needs and is not specifically limited here.

[0040] In this embodiment, the digital video line may be a digital visual interface (DVI) cable or an optical fiber; the signal transmission line may be a communication line with various interface standards, such as RS232, RS422, RS485, and other communication cables.

[0041] For example, the DHA display is equipped with a digital video interface and a digital signal interface. This interface and a video signal cable, such as a DVI cable, can be connected to the ACU avionics computer to receive video signals. The DHA display can also be connected to the ACU via a digital signal interface and a signal transmission cable, such as an RS422 communication cable, to transmit user operation commands (such as touchscreen commands and key commands) and self-test information (such as DHA LRU failures and DHA device malfunctions). The RS422 communication cable is preferably used as the signal transmission cable, as it has a longer transmission distance, a higher transmission rate, and supports point-to-multipoint bidirectional communication.

[0042] It is understandable that in this avionics system, the DHA display is no longer integrated with the IDU computer. Instead, a separate DHA display and ACU avionics computer are used, which can be connected via a DVI cable or optical fiber, thus achieving the decoupling of display control and avionics calculation. This avionics system physically decouples the DHA display from the ACU avionics computer, and functionally decouples the terminal display function from the graphics generation function. When it is necessary to adapt to DHA display screens of different sizes and shapes, only the display software portion of the ACU avionics computer can be configured and upgraded to match the replaced DHA display screen, without having to replace the entire ACU avionics computer. This can meet more personalized display needs, including flexible adjustment of display size, display shape, display content, display direction, etc., thereby improving the system display flexibility. Moreover, this avionics system does not suffer from the single point failure defects of avionics systems in related technologies.

[0043] In a feasible implementation, the digital video line is a DVI cable, and each avionics computing device and each display device is integrated with an equalizer chip.

[0044] In another feasible embodiment, the digital video line is an optical fiber, each avionics computing device may include an electro-optical conversion module, each display device may include an optical-electrical conversion module, and the electro-optical conversion modules are connected to each other via optical fibers.

[0045] It's important to note that the transmission distance of traditional DVI on an aircraft is typically 7 meters. However, in this avionics system, the connection distance between the DHA display and the ACU avionics computer is approximately 10 meters. Therefore, some conventional DVI connection methods cannot be directly applied to this avionics system, otherwise signal attenuation will occur. To address this, an electro-optical conversion module can be designed in the transmitting avionics computer, and an optical-electrical conversion module can be designed in the receiving display device. In practical applications, the electro-optical conversion module can be placed in the ACU avionics computer, and the optical-electrical conversion module can be placed in the DHA display.

[0046] As you can understand, fiber optics connect the ACU avionics computer and the DHA display, facilitating long-distance cabling and preventing EMI (electromagnetic interference). Furthermore, cable installation and routing are simple and convenient. The avionics system can be installed using simple quick-release mounting methods, such as self-locking bracket nuts / screws, eliminating the need for a dedicated chassis or equipment rack, providing flexible installation.

[0047] The avionics system proposed in this embodiment forms a distributed avionics system architecture consisting of a new avionics computing subsystem and a display control subsystem. The dual-redundant avionics computing subsystem allows for avionics computing backup by the other avionics computing device in the event of a failure in any avionics computing device, ensuring the normal operation of the avionics system. The cross-redundant display control subsystem allows for display reconstruction using the remaining devices in the event of a failure in any avionics computing device and / or any display device, providing display control backup to ensure the proper configuration and display of the avionics system. This distributed avionics system decouples display control from avionics computing, adapts to display devices of any size, and offers flexible device installation and wiring, meeting more personalized display requirements and enhancing the flexibility of avionics system configuration and display. Furthermore, in the cross-redundant display control subsystem, failures in any avionics computing device and / or any display device can include line replaceable unit (LRU) failure and / or resident application (HA) failure. This allows for a variety of failure scenarios and allows for display reconstruction to adapt to different application environments, enabling the avionics system to provide highly reliable display control backup, ensuring the proper configuration and display of the avionics system, thereby preventing user operations from being impacted.

[0048] In one possible implementation, Figure 2 The figure shows a schematic diagram of the structure of the display device in this embodiment. Each display device may include a display unit. The display unit is connected to two avionics computing devices via digital video lines, and is used to display the received video signal.

[0049] It should be noted that the display unit can be a hardware display component, such as a 1080P (resolution of 1920×1080 pixels) display screen, a 1440P (resolution of 1920×1440 pixels) display screen, and other display screens of different sizes; display screens with screen ratios of 16:9, 4:3, and other different ratios; display screens of different shapes such as rectangular screens, oval screens, and so on, and no specific limitations are made here.

[0050] In another possible embodiment, Figure 2 As shown, each display device may further include a communication unit and a self-test unit. The communication unit is connected to the two avionics computing devices via signal transmission lines and is used to output user operation instructions based on user operation information. The self-test unit is connected to the two avionics computing devices via signal transmission lines and is used to detect device failures and output self-test information.

[0051] It should be noted that the communication unit can directly implement touch input using the touch screen of the display unit, and / or implement mixed input using physical keys and buttons. The self-test unit can implement a BIT (Built-In Test) function to automatically test the hardware and software functions and performance of the display device, generate self-test information, and feed it back to the avionics computing device so that the avionics computing device can respond to the fault or issue an alarm when a fault is discovered. For example, the self-test unit can implement self-testing and fault reporting through power-on self-test (PBIT), periodic self-test (CIBT), and maintenance self-test (IBIT). The self-test information obtained can, for example, indicate an LRU failure in the DHA.

[0052] In another possible embodiment, Figure 2 As shown, each display device may also include a frozen screen detection unit. The frozen screen detection unit is connected to the two avionics computing devices and the display unit via digital video cables. The frozen screen detection unit is configured to perform frozen screen detection based on received video signals and output a video signal indicating a successful detection to the display unit.

[0053] It can be understood that the frozen screen detection unit can perform frozen screen detection based on the received video signal. For example, it can be achieved by performing similarity judgment on the display screen analyzed based on the video signal. If the similarity is less than a preset value, it is deemed to have passed the detection, otherwise the detection fails; and then the video signal that has passed the detection is output to the display unit for real-time display, which can effectively prevent the graphics card of the avionics computing device from sending erroneous display images such as stuck and frozen screen, thereby avoiding affecting user operations.

[0054] In the avionics system provided in this embodiment, a single display device can have the function of accessing two independent video sources, which can achieve high-reliability display; it can also implement self-detection function and self-detection feedback to ensure normal user operation and fault monitoring of multiple devices; it can also detect the integrity of the displayed image to ensure the completeness of the displayed content.

[0055] In another embodiment of the avionics system of the present application, refer to Figure 3 and Figure 4 , Figure 3 This is a schematic diagram of the system architecture of the avionics system. Figure 4This is a schematic diagram of the structure of avionics computing devices in an avionics system. Each avionics computing device may include an avionics computing module and a graphics processing module. The avionics computing module performs avionics computing based on received external information and outputs graphics processing signals. The graphics processing module is connected to the avionics computing module and is connected to two display devices via digital video cables. The graphics processing module generates graphics and renders images based on the graphics processing signals, outputting two video signals that are transmitted to the two display devices via digital video cables. The avionics computing module is connected to the two display devices via signal transmission cables and receives user operation instructions and self-test information from the display devices via the signal transmission cables.

[0056] An example, such as Figure 3 As shown, both avionics computing devices utilize ACUs, designated ACU_L on the left and ACU_R on the right. Both display devices utilize DHAs, designated DHA_L on the left and DHA_R on the right. ACU_L connects to DHA_L and DHA_R via an RS422 communication cable and a DVI cable, respectively. ACU_R also connects to DHA_L and DHA_R via an RS422 communication cable and a DVI cable, respectively. ACU_L and ACU_R are connected via a communication bus. ACU_L and ACU_R each contain an avionics computing module and a graphics processing module for avionics computing and display control.

[0057] It can be understood that the avionics computing device of this embodiment integrates avionics computing functions and graphics generation functions. Compared with the related art method of integrating the IDU computing unit and the avionics computing unit into an integrated design, this embodiment can effectively reduce the weight of the equipment, the weight of the cables and reduce the hardware cost.

[0058] Another exemplary example is Figure 4 As shown, a master computing device and a slave computing device can be set in the two avionics computing devices, which are connected to each other through a communication bus. Other cross-linking devices can be connected between the two, and they can also be connected to an external cross-linking system through an external bus, so that the avionics computing module in the avionics computing device can receive external information sent by the external cross-linking device / cross-linking system, thereby performing avionics calculations.

[0059] It's important to note that both the master and slave computing devices can host all applications, receive external input, and perform data processing and cross-verification. The difference is that under normal operation, the master computing device sends commands and data, including video signals to the display device for display and user commands and self-test information from the display device. The slave computing device acts as a hot backup and does not actively send information externally.

[0060] In actual applications, there may be a certain time difference between the power-on of two avionics computing devices. After both avionics computing devices complete the power-on self-test, they can perform handshake and health comparison through the communication bus. If the health is consistent, the master and slave of this power-on can be switched based on the master-slave relationship recorded at the previous power-on. For example, if ACU_L was the master computing device at the previous power-on, ACU_R will be selected as the master computing device after this power-on. If it is the first power-on or the records on both sides are inconsistent, the master and slave can be determined based on the date of the day, or set according to actual needs. No specific restrictions are given here.

[0061] For example, whether the avionics computing device needs to be switched between master and slave can be determined by health scoring. A health scoring table is set for each of the multiple avionics computing devices. When the health of a certain avionics computing device is lower than a preset threshold, it is determined that the avionics computing device needs to be switched between master and slave. Alternatively, the avionics computing device itself performs cyclic fault detection. When certain critical faults are detected, it is determined that the avionics computing device needs to be switched between master and slave.

[0062] Among them, the avionics computing module uses a multi-core computing processor, and the graphics processing module uses an independent graphics card.

[0063] Understandably, a single avionics computing device employs a multi-core processor, which offers higher computing power than the GPM used in related technologies. This improves the computing capabilities of the avionics computing device and enables more avionics computing functions. A single avionics computing device employs a discrete graphics card, capable of independently outputting two video sources, achieving cross-redundant backup between the video source and display, i.e., cross-redundant display control backup between two avionics computing devices and two display devices.

[0064] In one possible implementation, Figure 3 and Figure 4 As shown, each avionics computing device may also include a display management module. The display management module is connected to the avionics computing module and the graphics processing module, and is also connected to each display device via a digital video cable and a signal transmission cable. The display management modules in the two avionics computing devices are communicatively connected to each other. The display management module is used to monitor the failure status of each display device and each avionics computing device to provide avionics computing backup and display control backup.

[0065] It should be noted that the display management (DM) module can also be used to determine that the avionics computing device in which it is located is the main computing device, so that the avionics computing module in the main computing device can output two video signals to two display devices. At this time, the other avionics computing device is automatically determined as a slave computing device and serves as a hot backup and does not actively output video signals.

[0066] During implementation, the DM module can monitor the health of four devices—two avionics computing devices and two display devices—in real time, perform corresponding display management and control, and monitor display software failures on the avionics computing devices. For example, if the primary computing device fails, it can automatically switch to the secondary computing device, using the backup ACU avionics computer to maintain two independent, valid video signal outputs. After being fed to the two DHA displays, the dual-screen content can continue to display in normal mode. This utilizes the avionics computing backup function provided by the dual-redundant avionics computing subsystem to ensure the normal display of the two DHA displays. For another example, the display reconstruction method of the embodiment of the present application can obtain fault monitoring information of two avionics computing devices and two display devices, determine the faulty device and other devices based on the fault monitoring information, and then, based on the fault condition of the faulty device and the preset display reconstruction logic, use the other devices to perform display reconstruction and continue dual-screen display, single-screen display, or fault alarm, thus utilizing the display control backup function provided by the cross-redundant display control subsystem; wherein, the faulty device can be any avionics computing device and / or any display device, and the other devices can be the other avionics computing devices and display devices of the two avionics computing devices and the two display devices other than the faulty device, and the fault conditions can include line replaceable unit (LRU) failure and / or resident application (HA) failure. The DM module can also be configured to execute the steps of each embodiment of the display reconstruction method of the present application described below.

[0067] For example, Figure 4 As shown, the avionics computing device may also include basic modules such as an interface module and a power module, as well as underlying software and a real-time operating system (RTOS), among others, though these are not specifically limited here. The interface module provides various signal interfaces, and the power module ensures the power supply requirements of each module within the avionics computing device, ensuring the proper operation of corresponding functions. The interface module can be connected to the avionics computing module and the graphics processing module, as well as to two display devices via digital video cables, two display devices via signal transmission cables, and another avionics computing device via a communication bus. The interface module can forward the video signal provided by the graphics processing module to the display device via the digital video cable, receive user operation commands and self-test information output by the display device via the signal transmission cable, and then forward it to the avionics computing module. It can also transmit various interactive information to another avionics computing device via the communication bus for receipt by the interface module of the other avionics computing device.

[0068] As you can understand, the ACU avionics computer and DHA display are separated. The avionics computer, equipped with various interfaces, can be located in a centralized area for cross-linking systems. It receives input from external systems, performs avionics calculations, generates graphics, and renders images to generate video signals, which are then transmitted via optical fiber to the DHA display for display. Compared to the integrated IDU architecture, this embodiment offers greater flexibility in avionics system installation and wiring, significantly reducing the weight of onboard cabling.

[0069] In the avionics system provided by this embodiment, the avionics computing device can not only realize high-computing avionics computing capabilities and display control functions, but also reduce the number of modules while meeting the computing power requirements of multiple resident applications, make installation and wiring more flexible, and reduce the device SWaP (volume, weight and power consumption), thereby reducing the weight of the entire system, providing an avionics system with a distributed architecture that is highly reliable, highly available, high-performance and low-weight. Compared with the existing avionics system architecture, it increases system flexibility and integration, and can reduce the connection cost of hardware devices in the system.

[0070] The present application also proposes a display reconstruction method suitable for an avionics system, and the avionics system may be the avionics system of any of the above embodiments.

[0071] In one embodiment of the display reconstruction method of the present application, based on the cross-redundant display control subsystem of the above-mentioned avionics system, refer to Figure 5 , Figure 5 The flowchart of the display reconstruction method is shown below. The display reconstruction method may include steps S10 to S30: Step S10: Acquire fault monitoring information of two avionics computing devices and two display devices.

[0072] It should be noted that the display reconstruction method can be built into any avionics computing device, or can be implemented by an external control device that is communicatively connected to the two avionics computing devices. The following example illustrates the display reconstruction method using the avionics computing device as the execution subject.

[0073] For example, this can be achieved by installing a DM module within any avionics computing device, or by having the DM modules of two avionics computing devices exchange information to achieve collaborative implementation. Fault monitoring information for the avionics computing device can be obtained directly through detection by a built-in program, or by synchronization with another avionics computing device after detection, without specific limitations. Fault monitoring information for the display device can be obtained by the display device's self-test unit and transmitted to the avionics computing device via a signal transmission line.

[0074] Step S20, determining the faulty device and other devices based on the fault monitoring information; wherein the faulty device is any avionics computing device and / or any display device, and the other devices are the other avionics computing devices and display devices among the two avionics computing devices and the two display devices except the faulty device.

[0075] It's important to note that fault monitoring information includes specific information about the faulty device and the specific fault condition. For example, an LRU failure in ACU_L or a HA failure in ACU_R can be detected. Detailed analysis of this fault monitoring information reveals the faulty device and identifies it as the faulty device. The fault condition of the device can also be obtained and temporarily stored for backup. Accordingly, the remaining avionics computing and display devices, excluding the faulty device, are identified as "other devices."

[0076] For example, based on Figure 3 For the avionics system shown in the figure, if the fault monitoring information indicates that ACU_L has an LRU failure, ACU_L can be determined as the faulty device, and the fault condition of the faulty device is a single LRU failure, while ACU_R, DHA_L, and DHA_R are other devices; if the fault monitoring information indicates that both DHA_L and ACU_L have LRU failures, DHA_L and ACU_L can be determined as the faulty devices, and the fault condition of the faulty device is a dual LRU failure, while ACU_R and DHA_R are other devices.

[0077] Step S30: Based on the fault condition of the faulty device and the preset display reconstruction logic, other devices are used to perform display reconstruction to provide display control backup; wherein the fault condition includes failure of a field replaceable unit (LRU) and / or failure of a resident application (HA).

[0078] It should be noted that the definitions and examples of LRU and HA failures are described above and will not be repeated here. The preset display reconstruction logic can include multiple specific logical processing solutions. After identifying the faulty device and its fault condition, the appropriate logical processing solution is selected for each fault condition. Other devices can be used for display reconstruction to provide display control backup and ensure normal display function of the system. Other devices can also be used to generate fault alarms to alert users.

[0079] Exemplarily, to detect whether an avionics computing device has an LRU failure, the avionics computing device itself can perform cyclic fault detection. When it is detected that the LRU has certain preset critical faults, the avionics computing device is determined to have an LRU failure. To detect whether a display device has an LRU failure, the display device can obtain the information by periodically sending self-test information to the avionics computing device. When the avionics computing device does not receive the self-test information of the display device within a fixed period, the display device will also be determined to have an LRU failure. Alternatively, the display device can be manually determined to have a black screen or a frozen screen, and then manually restarted by pressing the restart button. To detect whether an avionics computing device has an HA failure, the resident applications of the two avionics computing devices can be used to transmit health status to each other. A health score table can be set for each resident application on the multiple interconnected avionics computing devices. When the health of an avionics computing device is lower than a preset threshold, it is determined to have an HA failure. Alternatively, the resident application on the avionics computing device can periodically report HA status information.

[0080] The display reconstruction method proposed in this embodiment is suitable for an avionics system including two avionics computing devices and two display devices. In this avionics system, the two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device via a digital video line and a signal transmission line. The two avionics computing devices and the two display devices constitute a cross-redundant display control subsystem. On this basis, fault monitoring information of the two avionics computing devices and the two display devices is obtained, and after the faulty device and other devices are determined based on the fault monitoring information, display reconstruction is performed using the other devices based on the fault condition of the faulty device and preset display reconstruction logic to provide display control backup. This method takes into account a variety of fault conditions and can adapt to different application environments to perform display reconstruction accordingly, realizing different display reconstruction operations for different fault conditions, so that the avionics system can provide a high-reliability display control backup effect, and can ensure that the configuration display of the avionics system is normal, thereby avoiding affecting user operations.

[0081] In another embodiment of the reconstruction method shown in the present application, refer to Figure 6-9 , step S30 in the display reconstruction method may include at least one of the following steps S31 to S34: Step S31: When the fault condition of the faulty device is a single LRU failure, dual-screen display reconstruction or single-screen display reconstruction is performed using other devices according to the single LRU failure display reconstruction mechanism, where a single LRU failure refers to an LRU failure in any avionics computing device or any display device. Step S32: When the fault condition of the faulty device is a dual LRU failure, using other devices to perform single-screen display reconstruction or display a fault alarm according to the dual LRU failure display reconstruction mechanism, wherein the dual LRU failure refers to an LRU failure in any avionics computing device and any display device, or an LRU failure in both display devices; Step S33: When the fault condition of the faulty device is a single HA failure, dual-screen display reconstruction is performed using other devices according to a single HA failure display reconstruction mechanism, wherein a single HA failure refers to a HA failure in any avionics computing device; Step S34: When the fault condition of the faulty device is dual HA failure, dual-screen display reconstruction and / or display fault alarm are performed using other devices according to the dual HA failure display reconstruction mechanism, wherein dual HA failure means that both avionics computing devices have HA failure.

[0082] It should be noted that a single LRU failure refers to an LRU failure in one of the four devices, while a dual LRU failure refers to an LRU failure in two of the four devices. A single HA failure refers to an HA failure in one of the four avionics computing devices, while a dual HA failure refers to an HA failure in both of the four avionics computing devices. Dual-screen display reconstruction means that both display devices can display normally, and the display control of both display devices is performed, and the display screen is reconstructed. Single-screen display reconstruction means that one of the two display devices can display normally, and the display control of the other display device is performed, and the display screen is reconstructed. Display failure alarm refers to an alarm reminder through the alarm light and other alarm devices on the avionics computing device.

[0083] In a specific embodiment, based on the aforementioned avionics system, the two avionics computing devices are divided into a master computing device and a slave computing device, and the two display devices are divided into a first display device and a second display device. If all four devices in the system are not faulty, the master computing device defaults to normal display control of the first and second display devices, and the slave computing device is in hot standby mode. The slave computing device being in hot standby mode means that the slave computing device performs all data reception and computing activities but does not actively output information (including digital signals and video signals). The first and second display devices normally receive the video signal output by the master computing device, and the displayed content can be different. For example, the first display device displays the PFD primary flight parameter information, while the second display device displays the MFD multi-function parameter information, achieving a dual-screen display of the PFD and MFD.

[0084] In a feasible embodiment, based on the above-mentioned avionics system, the two avionics computing devices include a master computing device and a slave computing device; step S31 may include at least one of steps S31.1 to S31.3: Step S31.1: If an LRU failure occurs in the master computing device, the slave computing device is switched to perform dual-screen display reconstruction on the two display devices; Step S31.2: If an LRU failure occurs in the slave computing device, the master computing device continues to perform normal display control on the two display devices. Step S31.3: If any display device has an LRU failure, the master computing device reconstructs the other display device into a single-screen display, and the slave computing device remains in a hot backup state.

[0085] For example, based on Figure 3 In the avionics system shown, ACU_L is set as the master computing device and ACU_R is set as the slave computing device. Figure 6 , Figure 6 The logical diagram for the reconstruction of the display corresponding to a single LRU failure can be one of the following four situations: ACU_L has LRU failure, ACU_R has LRU failure, DHA_L has LRU failure, and DHA_R has LRU failure. Figure 6 middle, Figure 6 (a) is the control logic in normal state. Figure 6 (b) is the display reconstruction logic when ACU_L has LRU failure. Figure 6 (c) in the figure is the display reconstruction logic when ACU_R has LRU failure. Figure 6 (d) in the figure is the display reconstruction logic when DHA_L has LRU failure. Figure 6 (e) in FIG. 5 is the display reconstruction logic when DHA_R has LRU failure.

[0086] like Figure 6 As shown in (a), in normal state, ACU_L controls the display of DHA_L and DHA_R, and DHA_L and DHA_R perform dual-screen display of different contents. At this time, ACU_R is in hot standby state.

[0087] like Figure 6 As shown in (b) in FIG, if ACU_L fails, the slave computing device performs dual-screen display reconstruction on the two display devices. Specifically, ACU_R controls the display of DHA_L and DHA_R, so that DHA_L and DHA_R switch the video source and perform display reconstruction to maintain normal dual-screen display. Figure 6As shown in (c), if ACU_R fails, the main computing device maintains normal display control over both display devices. Specifically, ACU_L maintains display control over DHA_L and DHA_R in the normal state, ensuring that DHA_L and DHA_R maintain normal display. This shows that even if a single ACU avionics computer LRU fails, the avionics system can maintain normal display on both displays. This provides a display control backup method where, if either avionics computing device fails, the other avionics computing device controls the two display devices to display different content, achieving the effect of not affecting normal display functions during the reconstruction state.

[0088] like Figure 6 As shown in (d) in the figure, if DHA_L fails, the main computing device will reconstruct the other display device to a single screen. Specifically, ACU_L will control the display of DHA_R to keep the display content of DHA_R in a normal state, or make DHA_R reconstruct the display to display the content of the original dual-screen display on the unfaulted display. At this time, ACU_R is in hot standby state. Similarly, Figure 6 As shown in (e) in the figure, if DHA_R fails, ACU_L assumes display control of DHA_L, achieving single-screen display reconstruction. At this point, ACU_R is in hot standby mode. This demonstrates that this avionics system can maintain the integrity of displayed content even if a single DHA display fails. This provides a display control backup method, allowing all content to be displayed on the other display device if any display device fails, ensuring that normal display functionality remains unaffected during reconstruction.

[0089] In a feasible embodiment, based on the above-mentioned avionics system, step S32 may include at least one of steps S32.1 to S32.4: Step S32.1: If an LRU failure occurs on the master computing device and any display device, the slave computing device is switched to perform single-screen display reconstruction on the other display device; Step S32.2: If an LRU failure occurs on the slave computing device and any display device, the master computing device performs single-screen display reconstruction on the other display device. Step S32.3: If both the master computing device and the slave computing device have LRU failures, restart the master computing device and the slave computing device; Step S32.4: If LRU failure occurs in both display devices, the main computing device issues a display failure alarm.

[0090] For example, based on Figure 3 In the avionics system shown, ACU_L is set as the master computing device and ACU_R is set as the slave computing device. Figure 7 , Figure 7Reconstruct the logic diagram for the display of double LRU failure. Double LRU failure can be caused by six situations: ACU_L and DHA_L have LRU failure, ACU_L and DHA_R have LRU failure, ACU_R and DHA_L have LRU failure, ACU_R and DHA_R have LRU failure, ACU_L and ACU_R have LRU failure, and DHA_L and DHA_R have LRU failure. Figure 7 middle, Figure 7 (a) is the display reconstruction logic when LRU failure occurs in ACU_L and DHA_L. Figure 7 (b) is the display reconstruction logic when LRU failure occurs in ACU_L and DHA_R. Figure 7 (c) in the figure is the display reconstruction logic when LRU failure occurs in ACU_R and DHA_L. Figure 7 (d) is the display reconstruction logic when LRU failure occurs in ACU_R and DHA_R. Figure 7 (e) is the display reconstruction logic when ACU_L and ACU_R have LRU failure. Figure 7 (f) in the figure is the display reconstruction logic when DHA_L and DHA_R have LRU failure.

[0091] like Figure 7 As shown in (a) in the figure, if ACU_L and DHA_L fail, the slave computing device will reconstruct the single-screen display of the other display device. Specifically, ACU_R controls DHA_R to switch the video source and reconstruct the display to maintain the normal display content, or display the original dual-screen content on the unfaulted display. Similarly, Figure 7 As shown in (b) in Figure 1, if ACU_L and DHA_R fail, ACU_R will be switched to control the display of DHA_L, thus achieving single-screen display reconstruction. Figure 7 As shown in (c) in the figure, if ACU_R and DHA_L fail, the main computing device will reconstruct the single-screen display of the other display device. Specifically, ACU_L will control the display of DHA_R to keep the display content of DHA_R in a normal state, or reconstruct the display to display the content originally displayed on the dual-screen on the unfaulted display. Similarly, Figure 7As shown in (d) in Figure 1, if ACU_R and DHA_R fail, ACU_L assumes display control of DHA_L, achieving single-screen display reconstruction. This shows that if any ACU or DHA fails, the avionics system can reconstruct the display using the remaining available ACU and DHA, achieving complete display of the displayed content in reconstruction mode. This provides a display control backup method where, if either avionics computing device or display device fails, the other avionics computing device controls the display of all the content on the other display device.

[0092] like Figure 7 As shown in (e), if ACU_L and ACU_R fail, DHA_L and DHA_R will have no video source input. At this time, DHA_L and DHA_R are both in a normal state but without video display. In this case, the master computing device ACU_L and the slave computing device ACU_R can be restarted. Specifically, the ACU can be restarted automatically or manually. For example, when the DM module detects that both ACU_L and ACU_R have LRU failures, a restart control signal is generated to automatically restart the ACU where it is located, and the restart control signal is output through the communication bus to automatically restart the other ACU. For another example, when the DM module detects that both ACU_L and ACU_R have LRU failures, a prompt signal can be generated to enable the staff to manually restart the two ACUs. Figure 7 As shown in (f), if DHA_L and DHA_R fail, ACU_L and ACU_R will not be affected. At this time, ACU_L continues to be in a valid output state, and ACU_R is in an active but no output state, that is, in a hot standby state. In this case, the software resident in ACU_L can use text or sound and light alarms to remind staff.

[0093] In one feasible embodiment, based on the above-mentioned avionics system, each avionics computing device includes a graphics processing module, which may include a primary flight display (PFD) unit and a multifunction display (MFD) unit, and each of the PFD unit and the MFD unit is connected to each display device via a digital video cable and a signal transmission cable; the two avionics computing devices include a master computing device and a slave computing device; and step S33 may include at least one of steps S33.1 to S33.2: Step S33.1: If the PFD unit or the MFD unit in the master computing device fails in HA, the PFD unit and the MFD unit in the slave computing device are switched to perform dual-screen display reconstruction on the two display devices; Step S33.2: If the PFD unit or the MFD unit in the slave computing device fails in HA, the PFD unit and the MFD unit in the master computing device continue to perform normal display control on the two display devices.

[0094] For example, based on Figure 3 The avionics system shown in the figure sets ACU_L as the master computing device and ACU_R as the slave computing device. The graphics processing modules in ACU_L and ACU_R include a PFD unit and an MFD unit. The PFD unit controls the display device to display the PFD primary flight parameter information, while the MFD unit controls the display device to display the MFD multi-function parameter information.

[0095] Reference Figure 8 , Figure 8 The logical diagram for the reconstruction of a single HA failure is displayed. A single HA failure can be caused by the following four situations: HA failure of the PFD unit of ACU_L, HA failure of the MFD unit of ACU_L, HA failure of the PFD unit of ACU_R, and HA failure of the MFD unit of ACU_R. Figure 8 middle, Figure 8 (a) is the control logic in normal state. Figure 8 (b) is a schematic diagram of the state of the ACU_L PFD unit when HA fails. Figure 8 (c) is a schematic diagram of the display reconstruction state when the PFD unit of ACU_L has HA failure. When the PFD unit of ACU_L has HA failure and executes the display reconstruction logic, Figure 8 The state transformation of (b) is Figure 8 The state of (c).

[0096] like Figure 8 As shown in (a), in normal state, ACU_L controls the display of DHA_L and DHA_R, DHA_L performs PFD display, and DHA_R performs MFD display, or DHA_L performs MFD display, and DHA_R performs PFD display. At this time, the PFD unit and MFD unit in ACU_R are in an active but non-output state. ACU_L and ACU_R maintain a communication connection, which can realize HA transfer (transfer HA). HA transfer refers to some form of transfer or switching of resident applications in a high-reliability environment.

[0097] like Figure 8 (b) and Figure 8 As shown in (c), if neither ACU_L nor ACU_R has an LRU failure, but the ACU_L PFD unit has an HA failure, HA transfer can be performed. The ACU_R PFD and MFD units control the display of DHA_L and DHA_R, causing DHA_L and DHA_R to switch video sources and perform display reconstruction, maintaining normal dual-screen display. At this time, ACU_L is in an active but non-output state. Similarly, the display reconstruction logic when the ACU_L MFD unit has an HA failure is similar and will not be repeated here.

[0098] Since the PFD unit and MFD unit in ACU_R are in an active but non-output state in a normal state, if there is no LRU failure in ACU_L and ACU_R, and there is an HA failure in the PFD unit or MFD unit in the computing device ACU_R, the display control of DHA_L and DHA_R can be maintained through ACU_L in a normal state, so that DHA_L and DHA_R maintain normal display.

[0099] It can be seen that the avionics system can still maintain normal display on both display screens when a single HA fails in a single ACU avionics computer, achieving the effect of not affecting the normal display function in the reconstruction state.

[0100] In another feasible embodiment, based on the above-mentioned avionics system, step S34 may include at least one of steps S34.1 to S34.4: S34.1. If the PFD unit in the master computing device and the MFD unit in the slave computing device experience HA failure, the structure of the PFD unit in the slave computing device is sent to the master computing device to form a new PFD unit in the master computing device. The new PFD unit and the MFD unit in the master computing device then perform dual-screen display reconstruction on the two display devices. S34.2. If the MFD unit in the master computing device and the PFD unit in the slave computing device experience HA failure, the structure of the MFD unit in the slave computing device is sent to the master computing device to form a new MFD unit in the master computing device, so that the PFD unit in the master computing device and the new MFD unit can reconstruct the dual-screen display of the two display devices. S34.3. If the PFD units in both the master computing device and the slave computing device experience HA failure, the MFD unit in the master computing device will continue to control the MFD display on both display devices, and the master computing device will issue a PFD display failure alarm. S34.4: If the MFD units in both the master computing device and the slave computing device experience HA failure, the PFD unit in the master computing device continues to control the PFD display of the two display devices, and the master computing device issues an MFD display failure alarm.

[0101] It should be noted that the structure may be a MSG structure for storing ACU avionics computer messages, which includes information such as the message type, additional information, and message delivery time, which is not specifically limited here.

[0102] For example, refer to Figure 9 , Figure 9The following is a display reconstruction logic diagram corresponding to double HA failure. Double HA failure may include four situations: HA failure of ACU_L's PFD unit and ACU_R's MFD unit, HA failure of ACU_L's MFD unit and ACU_R's PFD unit, HA failure of ACU_L's PFD unit and ACU_R's PFD unit, and HA failure of ACU_L's MFD unit and ACU_R's MFD unit. It should be noted that the two situations of HA failure of ACU_L's PFD unit and MFD unit, and HA failure of ACU_R's PFD unit and MFD unit do not belong to the double HA failure fault situation defined in this embodiment. Figure 9 middle, Figure 9 (a) is the control logic in normal state. Figure 9 (b) is a schematic diagram of the state when the PFD unit of ACU_L and the MFD unit of ACU_R have HA failure. Figure 9 (c) is a schematic diagram of the display reconstruction state when the PFD unit of ACU_L and the MFD unit of ACU_R have HA failure. When the PFD unit of ACU_L and the MFD unit of ACU_R have HA failure and the display reconstruction logic is executed, Figure 9 The state transformation of (b) is Figure 9 The state of (c).

[0103] Figure 9 The state shown in (a) is the same as Figure 8 (a) is consistent with the above and will not be repeated here. If the PFD unit and MFD unit of the master computing device ACU_L experience HA failure, the slave computing device will switch to perform dual-screen display reconstruction on the two display devices. Specifically, the PFD unit and MFD unit of ACU_R will control the display of DHA_L and DHA_R, causing DHA_L and DHA_R to switch video sources, perform display reconstruction, and maintain normal dual-screen display. If the PFD unit and MFD unit of the slave computing device ACU_R experience HA failure, the master computing device will maintain normal display control over the two display devices. Specifically, the PFD unit and MFD unit of ACU_L will control the display of DHA_L and DHA_R in a normal state, so that DHA_L and DHA_R maintain normal display.

[0104] like Figure 9 (b) and Figure 9 As shown in (c), if there is no LRU failure in ACU_L and ACU_R, and there is HA failure in the PFD unit of ACU_L and the MFD unit of ACU_R, the MSG structure of the PFD unit in ACU_R can be sent to ACU_L through HA transfer. The MSG structure of the PFD unit can be seen in Figure 9In (c) of FIG, the MSG (PFD) transmitted between ACU_R and ACU_L is as follows: Figure 9 As shown in (c), the ACU_R acts as the transmitter of the HA transfer (transfer HA_TX(PFD)), while the ACU_L acts as the receiver of the HA transfer (transfer HA_RX(PFD)). The PFD and MFD units obtained from the transfer in ACU_L control the display of DHA_L and DHA_R, causing the DHA (DHA_L or DHA_R) displaying the PFD primary flight parameters to switch video sources and perform display reconstruction, while the DHA (DHA_R or DHA_L) displaying the MFD multi-function parameters maintains normal display, thus maintaining normal dual-screen display for DHA_L and DHA_R. At this time, the ACU_R is in an active but non-output state. Similarly, the display reconstruction logic for the ACU_L MFD and ACU_R PFD units in the event of HA failure is similar and will not be further described here.

[0105] If neither ACU_L nor ACU_R has an LRU failure, and both the PFD units of ACU_L and ACU_R have an HA failure, the MFD unit in ACU_L will continue to control the MFD display for one or both of the two display devices, and the ACU_L will control the PFD failure alarm. Similarly, if neither ACU_L nor ACU_R has an LRU failure, and both the MFD units of ACU_L and ACU_R have an HA failure, the PFD unit in ACU_L will continue to control the PFD display for one or both of the two display devices, and the ACU_L will control the MFD failure alarm. The ACU alarm methods include text reminders, audio and visual prompts, etc., which are not specifically limited here.

[0106] It can be seen that this avionics system can still maintain the normal display of some information when there is a dual HA failure in the two ACU avionics computers. Compared with the system architecture in related technologies, it can improve the effective utilization of display functions, adapt to display control in more fault conditions, and improve the adaptability of the avionics system.

[0107] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the display reconstruction method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0108] The display reconstruction method proposed in this embodiment can solve the technical problem in related technologies where avionics systems have limited fault response measures, which affects the normal display function of the display control system. The specific architecture of the avionics system involved can refer to the above-mentioned embodiment. Since the avionics system in this display reconstruction method can adopt all the technical solutions of the above-mentioned avionics system embodiments, it also has at least all the beneficial effects brought about by the technical solutions of the above-mentioned embodiments, which will not be detailed here. Correspondingly, the avionics system that can implement this display reconstruction method can also specifically implement all the technical solutions of the display reconstruction method embodiments and all the beneficial effects brought about by them, which will not be detailed here.

[0109] The present application also provides an aircraft.

[0110] In an embodiment of the aircraft of the present application, the aircraft is an aviation aircraft, which may include an avionics system as described above. Optionally, the avionics system may implement the display reconstruction method in the above embodiment.

[0111] The aircraft provided in this application, utilizing the avionics system of the aforementioned embodiments, can address the technical issues in related art avionics systems, such as limited hardware display size and inflexible adjustment, as well as limited fault response measures that affect the normal display function of the display control system. Compared to related art, the aircraft provided in this application offers the same beneficial effects as the avionics system and display reconstruction method provided in the aforementioned embodiments. Other technical features of this aircraft are the same as those disclosed in the aforementioned embodiments and are not further elaborated here.

[0112] The present application also provides a computer-readable storage medium having computer-readable program instructions (ie, a computer program) stored thereon, wherein the computer-readable program instructions are used to execute the display reconstruction method in the above embodiment.

[0113] The computer-readable storage medium provided herein may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems or devices, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to, a portable computer disk electrically connected with one or more wires, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or the like, or any suitable combination thereof. In this embodiment, the computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by an instruction execution system or device, or a combination thereof. The program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including, but not limited to, wires, optical cables, RF (Radio Frequency), or the like, or any suitable combination thereof.

[0114] The computer-readable storage medium may be included in the aircraft, or may exist independently without being assembled into the aircraft.

[0115] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the aircraft, the aircraft can implement the above-mentioned functions defined in the display reconstruction method disclosed in the embodiment of the present application.

[0116] Computer program code for performing the operations of the present application may be written in one or more programming languages, or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, and C++, as well as conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a stand-alone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or to an external computer, such as an Internet connection provided by an Internet service provider.

[0117] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the methods, devices, systems and computer program products according to various embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, program segment or a part of code, and the module, program segment or a part of code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order than that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of the boxes in the block diagram and / or flowchart, can be implemented by a dedicated hardware-based system that performs the specified function or operation, or can be implemented by a combination of dedicated hardware and computer instructions.

[0118] The modules described in the embodiments of the present application may be implemented in software or hardware, wherein the name of a module does not necessarily limit the unit itself.

[0119] The storage medium provided in this application is a computer-readable storage medium that stores computer-readable program instructions (i.e., a computer program) for executing the aforementioned display reconstruction method. This computer-readable storage medium can address the technical issues in related art, such as the limited fault response measures in avionics systems, which affect the normal display functions of display control systems. Compared to related art, the beneficial effects of the computer-readable storage medium provided in this application are similar to those of the display reconstruction method provided in the aforementioned embodiments, and are not further elaborated here.

[0120] The present application also provides a computer program product, including a computer program, which implements the steps of the display reconstruction method as described above when executed by a processor.

[0121] The computer program product provided in this application can address the technical issues in related art, such as limited fault response measures in avionics systems, which affect the normal display function of display control systems. Compared to related art, the beneficial effects of the computer program product provided in this application are similar to those of the display reconstruction method provided in the above-mentioned embodiments, and are not further elaborated here.

[0122] The above are only some embodiments of the present application and are not intended to limit the patent scope of the present application. All equivalent structural transformations made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect application in other related technical fields are included in the patent protection scope of the present application.

Claims

1. An avionics system, characterized in that: It comprises two avionics computing devices and two display devices, the two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device via a digital video line and a signal transmission line; Wherein, the two avionics computing devices constitute a dual-redundancy avionics computing subsystem to provide avionics computing backup; The two avionics computing devices and the two display devices constitute a cross-redundant display control subsystem. When any one of the avionics computing devices and / or any one of the display devices fails, display reconstruction is performed through other devices to provide display control backup; wherein, the other devices are the other avionics computing devices and the display devices among the two avionics computing devices and the two display devices except the failed device, and the failure includes the failure of the field replaceable unit LRU and / or the failure of the resident application HA.

2. The avionics system according to claim 1, characterized in that: Each of the display devices comprises: The display unit is connected to the two avionics computing devices respectively through the digital video lines, and the display unit is used for displaying according to the received video signal.

3. The avionics system according to claim 2, characterized in that: Each of the display devices further includes: A communication unit, connected to the two avionics computing devices respectively through the signal transmission line, and the communication unit is used to output user operation instructions according to user operation information; The self-checking unit is connected to the two avionics computing devices respectively through the signal transmission line, and the self-checking unit is used to detect device failure and output self-checking information.

4. The avionics system according to claim 2 or 3, characterized in that: Each of the display devices further includes: A frozen screen detection unit is connected to the two avionics computing devices respectively through the digital video line, and is also connected to the display unit. The frozen screen detection unit is used to perform frozen screen detection according to the received video signal, and output the video signal that passes the detection to the display unit.

5. The avionics system according to claim 1, characterized in that: Each of the avionics computing devices comprises: An avionics calculation module, used to perform avionics calculations based on received external information and output graphic processing signals; A graphics processing module is connected to the avionics computing module and is connected to the two display devices through the digital video lines. The graphics processing module is used to generate graphics and render images according to the graphics processing signals, and output two video signals, which are transmitted to the two display devices through the digital video lines respectively. The avionics computing module is connected to the two display devices respectively through the signal transmission lines, and the avionics computing module is also used to receive user operation instructions and self-test information output by the display devices through the signal transmission lines.

6. The avionics system according to claim 5, characterized in that: Each of the avionics computing devices further includes: The display management module is connected to the avionics computing module and the graphics processing module respectively, and is also connected to each of the display devices through the digital video line and the signal transmission line. The display management modules in the two avionics computing devices are communicatively connected. The display management module is used to monitor the failure conditions of each of the display devices and each of the avionics computing devices to provide the avionics computing backup and the display control backup.

7. A display reconstruction method, characterized in that: Applicable to the avionics system according to any one of claims 1 to 6, the display reconstruction method comprising: Acquiring fault monitoring information of the two avionics computing devices and the two display devices; Determine the faulty device and other devices according to the fault monitoring information, the faulty device being any one of the avionics computing devices and / or any one of the display devices, and the other devices being other avionics computing devices and display devices among the two avionics computing devices and the two display devices except the faulty device; According to the fault condition of the faulty device and the preset display reconstruction logic, the other devices are used to perform display reconstruction to provide display control backup; wherein the fault condition includes the failure of a field replaceable unit LRU and / or the failure of a resident application HA.

8. The display reconstruction method according to claim 7, characterized in that: The performing display reconstruction by using the other devices according to the fault condition of the faulty device and the preset display reconstruction logic includes: When the fault condition of the faulty device is a single LRU failure, according to the single LRU failure display reconstruction mechanism, the other devices are used to perform dual-screen display reconstruction or single-screen display reconstruction, wherein the single LRU failure refers to the LRU failure of any of the avionics computing devices or any of the display devices; When the fault condition of the faulty device is a double LRU failure, according to the double LRU failure display reconstruction mechanism, the other devices are used to perform single-screen display reconstruction or display fault alarm, wherein the double LRU failure refers to the LRU failure of any one of the avionics computing devices and any one of the display devices, or the LRU failure of two of the display devices; When the fault condition of the faulty device is a single HA failure, dual-screen display reconstruction is performed using the other devices according to a single HA failure display reconstruction mechanism, wherein the single HA failure refers to the HA failure of any of the avionics computing devices; When the fault condition of the faulty device is a dual HA failure, according to the dual HA failure display reconstruction mechanism, the other device is used to perform dual-screen display reconstruction and / or display fault alarm, wherein the dual HA failure refers to the HA failure in both of the two avionics computing devices.

9. The display reconstruction method according to claim 8, characterized in that: The two avionics computing devices include a master computing device and a slave computing device; When the fault condition of the faulty device is a single LRU failure, according to the single LRU failure display reconstruction mechanism, using the other device to perform dual-screen display reconstruction or single-screen display reconstruction includes: If the LRU of the master computing device fails, switching to the slave computing device to perform dual-screen display reconstruction on the two display devices; If the LRU of the slave computing device fails, the master computing device continues to perform normal display control on the two display devices; If the LRU fails in any of the display devices, the main computing device reconstructs the single-screen display of the other display device.

10. The display reconstruction method according to claim 9, characterized in that: When the fault condition of the faulty device is a double LRU failure, according to the double LRU failure display reconstruction mechanism, using the other device to perform single-screen display reconstruction or display fault alarm includes: If the LRU of the master computing device and any of the display devices fails, switching the slave computing device to perform single-screen display reconstruction on the other display device; If the LRU fails in the slave computing device and any of the display devices, the master computing device performs single-screen display reconstruction on the other display device; If the LRU fails in both of the two display devices, the main computing device will issue a display failure alarm.

11. The display reconstruction method according to claim 8, characterized in that: Each of the avionics computing devices includes a graphics processing module, and the graphics processing module includes a primary flight display PFD unit and a multi-function display MFD unit, and the PFD unit and the MFD unit are connected to each of the display devices through the digital video line and the signal transmission line; the two avionics computing devices include a master computing device and a slave computing device; When the fault condition of the faulty device is a single HA failure, performing dual-screen display reconstruction using the other device according to the single HA failure display reconstruction mechanism includes: If the HA fails in the PFD unit or the MFD unit in the master computing device, switching the PFD unit and the MFD unit in the slave computing device to perform dual-screen display reconstruction on the two display devices; If the HA fails in the PFD unit or the MFD unit in the slave computing device, the PFD unit and the MFD unit in the master computing device continue to perform normal display control on the two display devices.

12. The display reconstruction method according to claim 11, characterized in that: When the fault condition of the faulty device is a dual HA failure, according to the dual HA failure display reconstruction mechanism, using the other device to perform dual-screen display reconstruction and / or display fault alarm includes: If the PFD unit in the master computing device and the MFD unit in the slave computing device have HA failures, the structure of the PFD unit in the slave computing device is sent to the master computing device to form a new PFD unit in the master computing device, so that the new PFD unit and the MFD unit in the master computing device perform dual-screen display reconstruction on the two display devices; If the MFD unit in the master computing device and the PFD unit in the slave computing device have HA failures, the structure of the MFD unit in the slave computing device is sent to the master computing device to form a new MFD unit in the master computing device, so that the PFD unit in the master computing device and the new MFD unit perform dual-screen display reconstruction on the two display devices; If the PFD units in both the master computing device and the slave computing device have HA failures, the MFD unit in the master computing device continues to perform MFD display control on the two display devices, and the master computing device issues a PFD display failure alarm; If HA failure occurs in both the MFD units in the master computing device and the slave computing device, the PFD unit in the master computing device continues to perform PFD display control on the two display devices, and the master computing device issues an MFD display failure alarm.

13. An aircraft, characterized in that: The invention comprises an avionics system as claimed in any one of claims 1 to 6.

Images