Avionics system, display reconstruction method and aircraft

Abstract

The present application discloses an avionics system, a display reconstruction method and an aircraft, and relates to the field of avionics technology, wherein the avionics system includes two avionics computing devices and two display devices, the two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device through a digital video line and a signal transmission line; the two avionics computing devices constitute a dual-redundancy avionics computing subsystem, providing avionics computing backup; the two avionics computing devices and the two display devices constitute a cross-redundant display control subsystem, when any avionics computing device and / or any display device fails, the display is reconstructed through other devices to provide display control backup, and the failure includes LRU failure and / or HA failure. The present application realizes the decoupling of display control and avionics computing, improves the flexibility of the avionics system configuration display, and can also enable the avionics system to provide a high-reliability display control backup.

Description

Technical Field

[0001] The present application relates to the field of avionics technology, and in particular to an avionics system, a display reconstruction method and an aircraft. Background Art

[0002] The core of the avionics system (abbreviated as avionics system) generally includes a display control system and an avionics computing system. The display control system is mainly used to provide human-computer interaction, and the avionics computing system is mainly used to provide a public computing platform. There are usually two types of current avionics system architectures: one is a separate architecture, and the other is an integrated architecture. The physical hardware DHA (Display Head Assembly) and IDU (Integrated Display Unit) computer of these two system architectures are integrated, and there is a problem that the display size of the DHA is fixed with the volume of the IDU and cannot be flexibly adjusted. Summary of the invention

[0003] The main purpose of the present application is to provide an avionics system, a display reconstruction method and an aircraft, aiming to solve the technical problem in the related art that the hardware display size of the avionics system is limited and cannot be flexibly adjusted.

[0004] To achieve the above-mentioned purpose, the present application proposes an avionics system, comprising two avionics computing devices and two display devices, the two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device via a digital video line and a signal transmission line;

[0005] Among them, two avionics computing devices constitute a dual-redundancy avionics computing subsystem to provide avionics computing backup;

[0006] Two avionics computing devices and two display devices constitute a cross-redundant display control subsystem. When any avionics computing device and / or any display device fails, display reconstruction is performed through other devices to provide display control backup; among which, other devices are other avionics computing devices and display devices among the two avionics computing devices and the two display devices except the failed device, and the failure includes the failure of the field replaceable unit LRU and / or the failure of the resident application HA.

[0007] In one embodiment, each display device includes:

[0008] The display unit is connected to the two avionics computing devices respectively through digital video lines, and the display unit is used for displaying according to the received video signal.

[0009] In one embodiment, each display device further includes:

[0010] A communication unit, connected to the two avionics computing devices respectively through a signal transmission line, and the communication unit is used to output a user operation instruction according to the user's operation information;

[0011] The self-test unit is connected to two avionics computing devices respectively through signal transmission lines. The self-test unit is used to detect equipment failures and output self-test information.

[0012] In one embodiment, each display device further includes:

[0013] The frozen screen detection unit is connected to the two avionics computing devices respectively through digital video lines, and is also connected to the display unit. The frozen screen detection unit is used to perform frozen screen detection based on the received video signal, and output the video signal that has passed the detection to the display unit.

[0014] In one embodiment, each avionics computing device includes:

[0015] An avionics calculation module, used to perform avionics calculations based on received external information and output graphic processing signals;

[0016] The graphics processing module is connected to the avionics computing module and is connected to two display devices through digital video lines. The graphics processing module is used to generate graphics and render images according to the graphics processing signals, and output two video signals, which are transmitted to the two display devices through digital video lines respectively.

[0017] The avionics computing module is connected to the two display devices respectively through signal transmission lines, and the avionics computing module is also used to receive user operation instructions and self-test information output by the display devices through the signal transmission lines.

[0018] In one embodiment, each avionics computing device further includes:

[0019] The display management module is connected to the avionics computing module and the graphics processing module respectively, and is also connected to each display device through a digital video line and a signal transmission line. The display management modules in the two avionics computing devices are communicated with each other. The display management module is used to monitor the failure conditions of each display device and each avionics computing device to provide avionics computing backup and display control backup.

[0020] In addition, to achieve the above purpose, the present application also proposes a display reconstruction method, which is applicable to the above-mentioned avionics system, and the display reconstruction method includes:

[0021] Obtain fault monitoring information of two avionics computing devices and two display devices;

[0022] Determine the faulty device and other devices according to the fault monitoring information, the faulty device is any avionics computing device and / or any display device, and the other devices are other avionics computing devices and display devices among the two avionics computing devices and the two display devices except the faulty device;

[0023] According to the fault condition of the faulty device and the preset display reconstruction logic, other devices are used to perform display reconstruction to provide display control backup; wherein the fault condition includes the failure of the field replaceable unit LRU and / or the failure of the resident application HA.

[0024] In one embodiment, based on the fault condition of the faulty device and the preset display reconstruction logic, using other devices to perform display reconstruction includes:

[0025] When the fault condition of the faulty device is a single LRU failure, according to the single LRU failure display reconstruction mechanism, other devices are used to perform dual-screen display reconstruction or single-screen display reconstruction, where a single LRU failure refers to an LRU failure in any avionics computing device or any display device;

[0026] When the fault condition of the faulty device is a double LRU failure, according to the double LRU failure display reconstruction mechanism, other devices are used to perform single-screen display reconstruction or display fault alarm, where double LRU failure means that any avionics computing device and any display device have LRU failure, or two display devices have LRU failure;

[0027] When the fault condition of the faulty device is a single HA failure, dual-screen display reconstruction is performed using other devices according to the single HA failure display reconstruction mechanism, where a single HA failure refers to a HA failure in any avionics computing device;

[0028] When the fault condition of the faulty device is dual HA failure, according to the dual HA failure display reconstruction mechanism, other devices are used to perform dual-screen display reconstruction and / or display fault alarm, where dual HA failure means that both avionics computing devices have HA failure.

[0029] In one embodiment, the two avionics computing devices include a master computing device and a slave computing device;

[0030] When the fault condition of the faulty device is a single LRU failure, according to the single LRU failure display reconstruction mechanism, other devices are used to perform dual-screen display reconstruction or single-screen display reconstruction, including:

[0031] If the LRU of the master computing device fails, the slave computing device is switched to perform dual-screen display reconstruction on the two display devices;

[0032] If the LRU of the slave computing device fails, the master computing device continues to perform normal display control on the two display devices;

[0033] If an LRU failure occurs in any display device, the main computing device will reconstruct the single-screen display of the other display device.

[0034] In one embodiment, when the fault condition of the faulty device is a double LRU failure, according to the double LRU failure display reconstruction mechanism, other devices are used to perform single-screen display reconstruction or display fault alarm, including:

[0035] If the LRU of the master computing device and any display device fails, the slave computing device is switched to perform single-screen display reconstruction on the other display device;

[0036] If LRU failure occurs in the slave computing device and any display device, the master computing device reconstructs the single-screen display of the other display device;

[0037] If LRU failure occurs in both display devices, the main computing device will issue a display failure alarm.

[0038] In one embodiment, each avionics computing device includes a graphics processing module, the graphics processing module includes a primary flight display PFD unit and a multi-function display MFD unit, the PFD unit and the MFD unit are connected to each display device via a digital video line and a signal transmission line; the two avionics computing devices include a master computing device and a slave computing device;

[0039] When the fault condition of the faulty device is a single HA failure, dual-screen display reconstruction is performed using other devices according to the single HA failure display reconstruction mechanism, including:

[0040] If the PFD unit or the MFD unit in the master computing device fails in HA, the PFD unit and the MFD unit in the slave computing device are switched to perform dual-screen display reconstruction on the two display devices;

[0041] If the PFD unit or the MFD unit in the slave computing device has HA failure, the PFD unit and the MFD unit in the master computing device continue to perform normal display control on the two display devices.

[0042] In one embodiment, when the fault condition of the faulty device is a dual HA failure, according to the dual HA failure display reconstruction mechanism, other devices are used to perform dual-screen display reconstruction and / or display fault alarm, including:

[0043] If the PFD unit in the master computing device and the MFD unit in the slave computing device have HA failure, the structure of the PFD unit in the slave computing device is sent to the master computing device to form a new PFD unit in the master computing device, so that the new PFD unit and the MFD unit in the master computing device perform dual-screen display reconstruction on the two display devices;

[0044] If the MFD unit in the master computing device and the PFD unit in the slave computing device have HA failure, the structure of the MFD unit in the slave computing device is sent to the master computing device to form a new MFD unit in the master computing device, so that the PFD unit in the master computing device and the new MFD unit perform dual-screen display reconstruction on the two display devices;

[0045] If the PFD units in both the master computing device and the slave computing device have HA failure, the MFD unit in the master computing device will continue to control the MFD display of the two display devices, and the master computing device will issue a PFD display failure alarm;

[0046] If HA failure occurs in both the MFD units in the master computing device and the slave computing device, the PFD unit in the master computing device continues to perform PFD display control on the two display devices, and the master computing device issues an MFD display failure alarm.

[0047] In addition, to achieve the above objectives, the present application also proposes an aircraft, including the avionics system as described above.

[0048] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium. A computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the display reconstruction method as described above are implemented.

[0049] In addition, to achieve the above-mentioned purpose, the present application also proposes a computer program product, which includes a computer program. When the computer program is executed by a processor, the steps of the display reconstruction method as described above are implemented.

[0050] One or more technical solutions proposed in this application have at least the following technical effects:

[0051] An avionics system is proposed, comprising two avionics computing devices and two display devices. The two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device through a digital video line and a signal transmission line. The two avionics computing devices constitute a dual-redundancy avionics computing subsystem. The two avionics computing devices and the two display devices constitute a cross-redundancy display control subsystem to form an avionics system with a distributed architecture. When any avionics computing device fails, the other avionics computing device can provide avionics computing backup to ensure the normal operation of the avionics system. When any avionics computing device and / or any display device fails, the cross-redundancy display control subsystem can perform display reconstruction through the remaining other devices. Provide display control backup to ensure the normal configuration display of the avionics system; the avionics system realizes the decoupling of display control and avionics computing, can be applied to display devices of any size, and has flexible equipment installation and wiring, which can meet more personalized display requirements and improve the flexibility of avionics system configuration display; on this basis, in the cross-redundant display control subsystem, any avionics computing device and / or any display device may have a failure of the field replaceable unit LRU and / or a failure of the resident application HA, taking into account a variety of fault conditions, and can adapt to different application environments to perform display reconstruction accordingly, so that the avionics system can provide a high-reliability display control backup to ensure the normal configuration display of the avionics system, thereby avoiding affecting user operations. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0053] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related technologies, the drawings required for use in the embodiments or the related technical descriptions are briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0054] Figure 1 A schematic diagram of the system architecture of an embodiment of the avionics system of the present application;

[0055] Figure 2 This is a schematic diagram of the structure of a display device in an embodiment of the avionics system of the present application;

[0056] Figure 3 A schematic diagram of the system architecture of another embodiment of the avionics system of the present application;

[0057] Figure 4 This is a structural schematic diagram of an avionics computing device in another embodiment of the avionics system of the present application;

[0058] Figure 5 A schematic diagram showing a flow chart of an embodiment of a reconstruction method of the present application;

[0059] Figure 6 This is a display reconstruction logic diagram corresponding to a single LRU failure in another embodiment of the display reconstruction method of the present application;

[0060] Figure 7 This is a display reconstruction logic diagram corresponding to double LRU failure in another embodiment of the display reconstruction method of the present application;

[0061] Figure 8 This is a logical diagram of display reconstruction corresponding to a single HA failure in another embodiment of the display reconstruction method of the present application;

[0062] Fig. 9 This is a logical diagram of display reconstruction corresponding to dual HA failure in another embodiment of the display reconstruction method of the present application.

[0063] The realization of the purpose, functional features and advantages of this application will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0064] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0065] It should be noted that if there are directional indications (such as up, down, left, right, front, back...) in the embodiments of the present application, the directional indication is only used to explain the relative position relationship, movement, etc. between the components in a certain specific posture. If the specific posture changes, the directional indication will also change accordingly. In addition, if there are descriptions of "first", "second", etc. in the embodiments of the present application, the descriptions of "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of technical features indicated. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In addition, if "and / or" or "and / or" appears in the full text, its meaning includes three parallel schemes. Taking "A and / or B" as an example, it includes scheme A, scheme B, or schemes that satisfy both A and B. In addition, the technical solutions between the various embodiments can be combined with each other, but they must be based on the fact that they can be implemented by ordinary technicians in this field. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such combination of technical solutions does not exist and is not within the scope of protection required by this application.

[0066] With the advancement of eVTOL (Electric Vertical Takeoff and Landing) technology and the increase in air traffic demand, eVTOL aircraft continue to develop. Based on the advantages of low carbon and environmental protection, low noise, high level of automation, low operating cost, and high safety, eVTOL can be used in a variety of scenarios such as urban transportation, emergency rescue missions, rapid cargo transportation, and terminal delivery.

[0067] The avionics system (abbreviated as avionics system) is the brain of eVTOL, among which the display control system and avionics computing system are the core of the avionics system. The display control system is mainly used to provide human-computer interaction, and the avionics computing system is mainly used to provide a public computing platform. Currently, there are usually two architectures of display control systems and avionics computing systems:

[0068] One is a separate architecture, including two devices, IDU (Integrated Display Unit) and IMA (Integrated Modular Avionics) computer / computing platform. The software of the display control system resides in the IDU and IMA devices respectively, and the physical hardware DHA (Display Head Assembly) is integrated with the IDU. This separate architecture is usually used in large aircraft. It has the advantages of high system integration, strong computing power and scalability, and high safety redundancy. The disadvantages are that there are many system devices, large SWaP (Size Weight and Power), high cost, and the display size of DHA is fixed with the size of IDU and cannot be flexibly adjusted.

[0069] The other is an integrated architecture, which is a smart integrated display unit (Smart IDU) computer with computing, graphics processing and display capabilities. It is a single device, and all the software of the display control system resides in the device. The physical hardware DHA and Smart IDU are integrated. This integrated architecture is usually used in general aviation aircraft. It has the advantages of high integration. The disadvantages are high equipment complexity, high maintenance difficulty, limited upgrades, large weight and space constraints, single point failure of DHA and IDU (that is, if the IDU fails, even if the DHA is normal, the DHA will be abandoned), and the display size of the DHA is fixed with the volume of the IDU and cannot be flexibly adjusted.

[0070] In addition, in the above two architectures, the avionics computing system part mostly adopts a single-core design. Due to the low computing power of the single-core processor and the limited system computing power, it is usually only possible to meet the computing power requirements of the resident application by adding more modules, which leads to increased equipment weight and cost.

[0071] At the same time, in the display control of the above-mentioned avionics system architecture, if there is a device failure, the entire system will generally stop running directly, and the DHA will not be able to display. Alternatively, a single fault response measure is used to add a physical hardware DHA integrated with the IDU, and then call the backup DHA for display. However, if there is a fault on the IDU side, the entire system still needs to be stopped, and both the DHA and the backup DHA will not be able to display. Therefore, when facing different equipment failure situations, the response measures of the avionics system in the relevant technology are limited, and the normal use of the display function and the integrity of the display results cannot be guaranteed, which affects user operations.

[0072] In view of the above problems, the present application provides an avionics system, a display reconstruction method and an aircraft. The present application and the following embodiments are described below in conjunction with the accompanying drawings.

[0073] The present application proposes an avionics system, which is applied to an aircraft.

[0074] In one embodiment of the avionics system of the present application, refer to Figure 1 , Figure 1 The system architecture diagram of the avionics system may include two avionics computing devices and two display devices. The two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device via a digital video line and a signal transmission line.

[0075] Among them, two avionics computing devices constitute a dual-redundancy avionics computing subsystem to provide avionics computing backup; two avionics computing devices and two display devices constitute a cross-redundant display control subsystem. When any avionics computing device and / or any display device fails, display reconstruction is performed through other devices to provide display control backup; wherein other devices are other avionics computing devices and display devices in the two avionics computing devices and two display devices except for the failed device, and the failure may include the failure of the line replaceable unit (LRU) and / or the failure of the hosted application (HA). The cross-redundant display control subsystem can also optionally execute the display reconstruction method of the embodiment of the present application.

[0076] It should be noted that in the dual-redundancy avionics computing subsystem, the two avionics computing devices can back up each other, or one of them can be designated as the master computing device and the other as the slave computing device to achieve master-slave backup. In actual application, the master computing device can be used by default to perform relevant calculations and control operations of the avionics system, and the master computing device can output two video signals at the same time. The slave computing device only performs hot backup. When the master computing device fails, the slave computing device is enabled to replace the work of the master computing device to ensure normal display control of the display device. Therefore, when any avionics computing device fails, the dual-redundancy avionics computing subsystem can provide avionics computing backup by the other avionics computing device to ensure the normal operation of the avionics system.

[0077] It can be understood that the dual-redundancy avionics computing subsystem can provide avionics computing backup by another avionics computing device when any avionics computing device fails to ensure the normal operation of the avionics system. Therefore, in the event of a single avionics computing device failure, the avionics system can still maintain normal display of two display devices, especially when the two display devices display different contents respectively, the normal display function of the system can also be guaranteed.

[0078] It should also be noted that in the cross-redundant display control subsystem, the two avionics computing devices can back up each other, and the two display devices can also back up each other, to achieve cross-redundant backup of the video source end and the display end. The avionics computing device and / or the display device has a fault, which may be an LRU failure in the avionics computing device and / or the display device, and / or an HA failure in the avionics computing device. Among them, LRU failure refers to a major failure of the LRU (field replaceable unit) that cannot support the resident application to complete the expected function. The LRU (field replaceable unit) may include an IDU (Integrated Display Unit), an RDIU (Remote Data Interface Unit), a GPM (General Processing Module), etc. HA failure refers to a fault situation in which HA (resident application) in a high-reliability system is unable to provide aircraft-level functions continuously and without interruption as expected, resulting in service interruption or performance degradation. The HA (resident application) may include FMS (Flight Management System), CAS (Crew Alerting System), OMS (Onboard Maintenance System), PFD (Primary Flight Display) control module, MFD (Multifunction Display) control module, etc.

[0079] It can be understood that when the cross-redundant display control subsystem performs display reconstruction, it can use conventional display reconstruction methods to directly switch between the set multiple display modes to convert the display of main flight information, navigation information and crew warning information, etc., to ensure the continuity and coherence of the display of main flight information and main engine information for pilots; it can also control the display device for display reconstruction after changing the display content, display layout, display direction and other related display configuration parameters for display devices of different numbers or sizes; it can also use the preset display reconstruction logic to implement different display reconstruction controls, which can be selected according to needs in actual application, and is not specifically limited here. Exemplarily, when the cross-redundant display control subsystem performs display reconstruction, it can execute the display reconstruction method of the embodiment of the present application, which can be specifically executed by an avionics computing device or an external control device that is connected to the avionics computing device.

[0080] Exemplarily, the avionics computing device may be an ACU (Avionics Computing Unit) avionics computer / computing platform, and the display device may be a DHA (Display Head Assembly) display screen / display, which only provides display functions, is smaller in size, and is easier to install. The two display devices may display the same content, for example, both display the operating data of the avionics system and provide them to different users; or they may display different content, for example, one display device is used as a PFD display and the other display device is used as an MFD display to realize the display of PFD+MFD. The specific selection can be made according to actual needs and is not specifically limited here.

[0081] In this embodiment, the digital video line may be a digital visual interface (DVI) cable or an optical fiber; the signal transmission line may be a communication line with various interface standards, such as RS232, RS422, RS485 and other communication cables.

[0082] Exemplarily, the DHA display screen is provided with a digital video interface and a digital signal interface, and can be connected to the ACU avionics computer through the digital video interface and a video signal line such as a DVI cable to receive video signals; it can also be connected to the ACU through a digital signal interface and a signal transmission line such as an RS422 communication line to send user operation instructions (such as touch screen instructions, key instructions, etc.) and self-test information (such as LRU failure in the DHA, equipment failure in the DHA, etc.). The signal transmission line is preferably an RS422 communication line, which has a longer transmission distance and a higher transmission rate, and supports point-to-multipoint bidirectional communication.

[0083] It is understandable that in this avionics system, the DHA display screen is no longer integrated with the IDU computer, but a separate DHA display screen and ACU avionics computer are used, which can be connected by a DVI cable or optical fiber, thus realizing the decoupling of display control and avionics calculation. This avionics system physically realizes the decoupling of the DHA display screen and the ACU avionics computer, and functionally realizes the decoupling of the terminal display function and the graphics generation function. When it is necessary to adapt to DHA display screens of different sizes and shapes, only the display software part of the ACU avionics computer can be configured and upgraded to match the replaced DHA display screen, without replacing the entire ACU avionics computer. Therefore, it can meet more personalized display needs, including flexible adjustment of display size, display shape, display content and display direction, etc., which improves the display flexibility of the system; moreover, this avionics system does not have the single point failure defect of the avionics system of the related technology.

[0084] In a feasible implementation, the digital video line is a DVI cable, and each avionics computing device and each display device is integrated with an equalizer chip.

[0085] In another feasible implementation, the digital video line is an optical fiber, each avionics computing device may include an electro-optical conversion module, each display device may include an optical-electrical conversion module, and the electro-optical conversion modules are connected to each other via optical fibers.

[0086] It should be noted that the transmission distance of traditional DVI on aircraft is generally 7m (meters), but in this avionics system, the connection distance between the DHA display screen and the ACU avionics computer is about 10m, so some of the current conventional DVI connection methods cannot be directly applied to this avionics system, otherwise signal attenuation will occur. For this reason, an electro-optical conversion module can be designed in the avionics computing device as the sending end, and an optical-electrical conversion module can be designed in the display device as the receiving end. In actual application, the electro-optical conversion module can be set in the ACU avionics computer, and the optical-electrical conversion module can be set in the DHA display screen.

[0087] It is understandable that the connection between the ACU avionics computer and the DHA display screen can be achieved through optical fiber, which can achieve long-distance wiring and anti-EMI (Electromagnetic Interference) interference. At the same time, the installation and wiring of the cable are simple and convenient. The avionics system can be installed using simple quick-release, self-locking tray nuts / screws and other installation methods, without the need for a dedicated chassis and equipment rack, and has a flexible installation effect.

[0088] The avionics system proposed in this embodiment forms a distributed avionics system architecture of a new avionics computing subsystem + display control subsystem. The dual-redundancy avionics computing subsystem can provide avionics computing backup by another avionics computing device when any avionics computing device fails to ensure the normal operation of the avionics system. The cross-redundancy display control subsystem can perform display reconstruction through the remaining other devices when any avionics computing device and / or any display device fails to provide display control backup to ensure the normal configuration and display of the avionics system. The avionics system with this distributed architecture realizes the decoupling of display control and avionics computing, can be applied to display devices of any size, and has flexible equipment installation and wiring, which can meet more personalized display requirements and improve the flexibility of avionics system configuration and display; on this basis, in the cross-redundancy display control subsystem, the failure of any avionics computing device and / or any display device can include the failure of the field replaceable unit LRU and / or the failure of the resident application HA. Taking into account a variety of failure conditions, the display reconstruction can be adapted to different application environments, so that the avionics system can provide a high-reliability display control backup to ensure the normal configuration and display of the avionics system, thereby avoiding affecting user operations.

[0089] In a possible implementation, Figure 2 The structure diagram of the display device in this embodiment is shown, and each display device may include a display unit. The display unit is connected to two avionics computing devices respectively through a digital video line, and the display unit is used to display according to the received video signal.

[0090] It should be noted that the display unit can be a hardware display component, such as a 1080P (resolution of 1920×1080 pixels) display, a 1440P (resolution of 1920×1440 pixels) display, or other display screens of different sizes; display screens of different ratios such as 16:9 and 4:3; display screens of different shapes such as a rectangular screen and an oval screen, etc., and no specific limitation is made here.

[0091] In another possible implementation, if Figure 2 As shown, each display device may also include a communication unit and a self-test unit. The communication unit is connected to two avionics computing devices through a signal transmission line, and the communication unit is used to output user operation instructions according to user operation information; the self-test unit is connected to two avionics computing devices through a signal transmission line, and the self-test unit is used to detect device failures and output self-test information.

[0092] It should be noted that the communication unit can directly use the touch screen of the display unit to implement touch input, and / or use physical keys, buttons, etc. to implement mixed input. The self-test unit can implement the BIT (Built-In Test) function, automatically detect the hardware and software functions and performance of the display device, and generate self-test information, which is fed back to the avionics computing device so that the avionics computing device can respond to the fault or issue an alarm when a fault is found. Exemplarily, the self-test unit can implement self-test and fault reporting through power-on self-test (PBIT), periodic self-test (CIBT) and maintenance self-test (IBIT), and the self-test information obtained, such as the existence of LRU failure in DHA.

[0093] In another possible implementation, if Figure 2 As shown, each display device may further include a frozen screen detection unit. The frozen screen detection unit is connected to the two avionics computing devices and the display unit through a digital video line. The frozen screen detection unit is used to perform frozen screen detection according to the received video signal and output the video signal that has passed the detection to the display unit.

[0094] It can be understood that the frozen screen detection unit can perform frozen screen detection based on the received video signal. For example, it can be achieved by making a similarity judgment on the display screen analyzed based on the video signal. If the similarity is less than a preset value, it is deemed to have passed the detection, otherwise the detection fails. Then the video signal that has passed the detection is output to the display unit for real-time display, which can effectively prevent the graphics card of the avionics computing device from sending erroneous display screens due to jamming or frozen screen, thereby avoiding affecting user operations.

[0095] In the avionics system provided in this embodiment, a single display device can have two independent video source access functions, which can achieve high-reliability display; it can also realize self-detection function and self-detection feedback to ensure normal user operation and fault monitoring of multiple devices; it can also detect the integrity of the displayed image to ensure the integrity of the displayed content.

[0096] In another embodiment of the avionics system of the present application, refer to Figure 3 and Figure 4 , Figure 3 This is a schematic diagram of the system architecture of the avionics system. Figure 4The schematic diagram of the structure of the avionics computing device in the avionics system is shown in FIG. Each avionics computing device may include an avionics computing module and a graphics processing module. The avionics computing module is used to perform avionics computing according to the received external information and output a graphics processing signal; the graphics processing module is connected to the avionics computing module and is respectively connected to two display devices through a digital video line; the graphics processing module is used to generate graphics and render images according to the graphics processing signal and output two video signals, which are respectively transmitted to the two display devices through the digital video line; the avionics computing module is respectively connected to the two display devices through a signal transmission line, and the avionics computing module is also used to receive user operation instructions and self-test information output by the display device through the signal transmission line.

[0097] An exemplary example is Figure 3 As shown, both avionics computing devices use ACU avionics computers, which are respectively represented as the left avionics computer ACU_L and the right avionics computer ACU_R. Both display devices use DHA display screens, which are respectively represented as the left display screen DHA_L and the right display screen DHA_R. ACU_L is connected to DHA_L and DHA_R through RS422 communication lines and DVI cables, respectively. ACU_R is also connected to DHA_L and DHA_R through RS422 communication lines and DVI cables, respectively. ACU_L and ACU_R are connected through a communication bus. ACU_L and ACU_R are each provided with an avionics computing module and a graphics processing module to perform avionics computing and display control.

[0098] It can be understood that the avionics computing device of this embodiment integrates the avionics computing function and the graphics generation function. Compared with the related art method of integrating the IDU computing unit with the avionics computing unit, this embodiment can effectively reduce the equipment weight, cable weight and reduce hardware costs.

[0099] Another exemplary example is Figure 4 As shown, a master computing device and a slave computing device can be set in two avionics computing devices, which are connected to each other through a communication bus, and other cross-linking devices can be connected between the two. They can also be connected to an external cross-linking system through an external bus, so that the avionics computing module in the avionics computing device can receive external information sent by the external cross-linking device / cross-linking system, thereby performing avionics calculations.

[0100] It should be noted that both the master computing device and the slave computing device can host all applications, receive external input, and complete data processing and cross-checking. The difference is: under normal working conditions, the master computing device sends instructions and data to the outside, including sending video signals to the display device for screen display, receiving user operation instructions and self-test information sent by the display device, etc.; the slave computing device acts as a hot backup and does not actively send information to the outside.

[0101] In actual applications, there may be a certain time difference between the power-on of two avionics computing devices. After both avionics computing devices have completed the power-on self-test, handshake and health comparison can be performed through the communication bus; if the health is consistent, the master and slave of this power-on can be switched according to the master-slave relationship recorded at the previous power-on. For example, if ACU_L was the master computing device at the previous power-on, ACU_R will be selected as the master computing device after this power-on; if it is the first power-on or the records on both sides are inconsistent, the master and slave can be determined according to the date of the day, or set according to actual needs, and no specific limitation is made here.

[0102] Exemplarily, whether the avionics computing device needs to be switched between master and slave can be achieved through health scoring. A health scoring table is set for each of the multiple avionics computing devices. When the health of a certain avionics computing device is lower than a preset threshold, it is determined that the avionics computing device needs to be switched between master and slave. The avionics computing device itself can also perform cyclic fault detection. When certain critical faults are detected, it is determined that the avionics computing device needs to be switched between master and slave.

[0103] Among them, the avionics computing module uses a multi-core computing processor, and the graphics processing module uses an independent graphics card.

[0104] It is understandable that a single avionics computing device uses a multi-core computing processor. Compared with the GPM used in related technologies, the multi-core computing has higher computing power, which can improve the computing power of the avionics computing device and realize more avionics computing functions. A single avionics computing device uses an independent graphics card, which can independently output two video sources and realize cross-redundant backup of the video source end and the display end, that is, cross-redundant display control backup of two avionics computing devices and two display devices.

[0105] In a possible implementation, Figure 3 and Figure 4 As shown, each avionics computing device may also include a display management module. The display management module is connected to the avionics computing module and the graphics processing module respectively, and is also connected to each display device through a digital video line and a signal transmission line. The display management modules in two avionics computing devices are communicated and connected. The display management module is used to monitor the failure of each display device and each avionics computing device to provide avionics computing backup and display control backup.

[0106] It should be noted that the display management (DM: Display Manager) module can also be used to determine that the avionics computing device in which it is located is the main computing device, so that the avionics computing module in the main computing device can output two video signals to two display devices. At this time, the other avionics computing device is automatically determined as a slave computing device and serves as a hot backup and does not actively output video signals.

[0107] In the specific implementation process, the DM module can monitor the health of four devices, namely two avionics computing devices and two display devices in real time, perform corresponding display management and control, and monitor the failure of the display software on the avionics computing device. For example, in the event of failure of the main computing device, it can automatically switch to the slave computing device, and use the backup ACU avionics computer to continue to maintain two independent and effective video signal outputs. After giving them to the two DHA display screens, the normal mode display of the dual-screen content can continue to be maintained, that is, the avionics computing backup function provided by the dual-redundancy avionics computing subsystem is used to ensure the normal display of the two DHA display screens. For another example, the display reconstruction method of the embodiment of the present application can obtain fault monitoring information of two avionics computing devices and two display devices, determine the faulty device and other devices based on the fault monitoring information, and then use other devices to perform display reconstruction according to the fault condition of the faulty device and the preset display reconstruction logic, and continue to perform dual-screen display, single-screen display, or fault alarm, that is, the display control backup function provided by the cross-redundant display control subsystem is utilized; wherein, the faulty device can be any avionics computing device and / or any display device, and the other devices are other avionics computing devices and display devices in the two avionics computing devices and the two display devices except the faulty device, and the fault condition includes the failure of the line replaceable unit (LRU: Line Replaceable Unit) and / or the failure of the hosted application (HA: Hosted Application). The DM module can also be configured to execute the steps of each embodiment of the display reconstruction method of the present application described below.

[0108] For example, Figure 4 As shown, the avionics computing device may also include basic modules such as interface modules, power modules, bottom-level software and real-time operating systems (RTOS), etc., which are not specifically limited here. The interface module can provide various types of signal interfaces, and the power module can ensure the power supply requirements of each module in the avionics computing device to achieve the normal activation of the corresponding functions. Among them, the interface module can be connected to the avionics computing module and the graphics processing module respectively, and connected to two display devices respectively through digital video cables, connected to two display devices respectively through signal transmission cables, and connected to another avionics computing device through a communication bus; the interface module can be used to forward the video signal provided by the graphics processing module to the display device through a digital video cable, and can also be used to receive user operation instructions and self-test information output by the display device through a signal transmission line, and then forward it to the avionics computing module, and can also be used to send various interactive information to another avionics computing device through a communication bus, so that the interface module of the other avionics computing device can receive it accordingly.

[0109] It is understandable that the ACU avionics computer and the DHA display screen are separated. The avionics computer has various types of interfaces and can be arranged in the area where the cross-linking system is concentrated. It receives information input from the external system, performs avionics calculations, graphics generation and image rendering to generate video signals, and then transmits them to the DHA display screen through optical fiber for display. Compared with the architecture of the integrated IDU, the installation and wiring of the avionics system of this embodiment is more flexible, which greatly reduces the weight of the onboard cables.

[0110] In the avionics system provided in this embodiment, the avionics computing device can not only realize high-computing avionics computing capabilities and display control functions, but also reduce the number of modules while meeting the computing power requirements of multiple resident applications, making installation and wiring more flexible, and reducing the device SWaP (volume, weight and power consumption), thereby reducing the weight of the entire system, providing a high-reliability, high-availability, high-performance, low-weight distributed architecture avionics system, which increases system flexibility and integration compared to the existing avionics system architecture, and can reduce the connection cost of hardware devices in the system.

[0111] The present application also proposes a display reconstruction method suitable for an avionics system, and the avionics system may be the avionics system of any of the above-mentioned embodiments.

[0112] In one embodiment of the display reconstruction method of the present application, based on the cross-redundant display control subsystem of the above-mentioned avionics system, refer to Figure 5 , Figure 5 The flowchart of the display reconstruction method is shown in FIG. 1 . The display reconstruction method may include steps S10 to S30:

[0113] Step S10, obtaining fault monitoring information of two avionics computing devices and two display devices.

[0114] It should be noted that the display reconstruction method can be built into any avionics computing device, or can be implemented by an external control device that is communicatively connected to two avionics computing devices. The following example is taken as an example of the avionics computing device as the execution subject of the display reconstruction method.

[0115] Exemplarily, the DM module can be set in any avionics computing device to achieve this, or the DM modules of two avionics computing devices can exchange information to achieve this collaboratively. The fault monitoring information of the avionics computing device can be obtained by directly detecting it through a built-in program, or by synchronizing information after detection by another avionics computing device, which is not specifically limited here. The fault monitoring information of the display device can be obtained by the self-test unit of the display device and then sent to the avionics computing device through a signal transmission line.

[0116] Step S20, determining the faulty device and other devices according to the fault monitoring information; wherein the faulty device is any avionics computing device and / or any display device, and the other devices are other avionics computing devices and display devices among the two avionics computing devices and the two display devices except the faulty device.

[0117] It should be noted that the fault monitoring information includes specific information about the faulty device and the specific fault conditions, for example, ACU_L has an LRU failure, ACU_R has an HA failure, etc. By analyzing the fault monitoring information in detail, it is possible to know the faulty device and identify it as a faulty device; and the fault condition of the faulty device can be obtained and temporarily stored for backup. Correspondingly, the remaining avionics computing devices and display devices except the faulty device among the four devices will be identified as other devices.

[0118] For example, based on Figure 3 For the avionics system shown in the figure, if the fault monitoring information shows that ACU_L has an LRU failure, ACU_L can be determined as the faulty device, and the fault condition of the faulty device is a single LRU failure, and ACU_R, DHA_L and DHA_R are other devices; if the fault monitoring information shows that both DHA_L and ACU_L have LRU failures, DHA_L and ACU_L can be determined as the faulty devices, and the fault condition of the faulty device is a double LRU failure, and ACU_R and DHA_R are other devices.

[0119] Step S30, based on the fault condition of the faulty device and the preset display reconstruction logic, use other devices to perform display reconstruction to provide display control backup; wherein the fault condition includes a field replaceable unit LRU failure and / or a resident application HA failure.

[0120] It should be noted that the definition and examples of LRU failure and HA failure refer to the previous description and will not be repeated here. The preset display reconstruction logic may include multiple specific logic processing schemes. After obtaining the faulty device and its fault condition, the appropriate logic processing scheme is selected for different fault conditions. Other devices may be used for display reconstruction to provide display control backup to ensure the normal display function of the system. Other devices may also be used for fault alarm to remind users.

[0121] Exemplarily, for the detection of whether there is an LRU failure in the avionics computing device, the avionics computing device itself can perform cyclic fault detection, and when it is detected that the LRU has certain preset critical faults, the avionics computing device is determined to have an LRU failure. For the detection of whether there is an LRU failure in the display device, it can be obtained by the self-test information periodically sent by the display device to the avionics computing device, wherein when the avionics computing device does not receive the self-test information of the display device within a fixed period, the display device will also be determined to have an LRU failure; it can also be manually determined whether the display device is black or frozen, and then manually restart the display device through the restart button. For the detection of whether there is an HA failure in the avionics computing device, it can be achieved by the resident applications of the two avionics computing devices transmitting health to each other, and setting health score tables for the resident applications on the interconnected multiple avionics computing devices. When the health of a certain avionics computing device is lower than the preset threshold, it is determined that it has an HA failure; it can also be achieved by the resident application on the avionics computing device periodically reporting HA status information.

[0122] The display reconstruction method proposed in this embodiment is suitable for an avionics system including two avionics computing devices and two display devices. In the avionics system, the two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device via a digital video line and a signal transmission line. The two avionics computing devices and the two display devices constitute a cross-redundant display control subsystem. On this basis, fault monitoring information of the two avionics computing devices and the two display devices is obtained, and after the faulty device and other devices are determined according to the fault monitoring information, display reconstruction is performed using other devices according to the fault condition of the faulty device and a preset display reconstruction logic to provide display control backup. The method takes into account a variety of fault conditions, can adapt to different application environments for corresponding display reconstruction, and implements different display reconstruction operations for different fault conditions, so that the avionics system can provide a high-reliability display control backup effect, and can ensure that the configuration display of the avionics system is normal, thereby avoiding affecting user operations.

[0123] In another embodiment of the present application, the reconstruction method is shown as follows: Figure 6-9 , step S30 in the display reconstruction method may include at least one of the following steps S31 to S34:

[0124] Step S31, when the fault condition of the faulty device is a single LRU failure, according to the single LRU failure display reconstruction mechanism, dual-screen display reconstruction or single-screen display reconstruction is performed using other devices, wherein the single LRU failure refers to the LRU failure of any avionics computing device or any display device;

[0125] Step S32, when the fault condition of the faulty device is a double LRU failure, according to the double LRU failure display reconstruction mechanism, use other devices to perform single-screen display reconstruction or display fault alarm, wherein the double LRU failure refers to the LRU failure of any avionics computing device and any display device, or the LRU failure of two display devices;

[0126] Step S33, when the fault condition of the faulty device is a single HA failure, dual-screen display reconstruction is performed using other devices according to a single HA failure display reconstruction mechanism, wherein a single HA failure refers to a HA failure in any avionics computing device;

[0127] Step S34, when the fault condition of the faulty device is dual HA failure, according to the dual HA failure display reconstruction mechanism, other devices are used to perform dual-screen display reconstruction and / or display fault alarm, wherein dual HA failure means that both avionics computing devices have HA failure.

[0128] It should be noted that a single LRU failure means that one of the four devices has an LRU failure, and a double LRU failure means that two of the four devices have an LRU failure; a single HA failure means that one of the four avionics computing devices has an HA failure, and a double HA failure means that two of the four avionics computing devices have HA failures. Dual-screen display reconstruction means that both display devices can display normally, and the display of the two display devices is controlled and the display screen is reconstructed; single-screen display reconstruction means that one of the two devices can display normally, and the display is controlled and the display screen is reconstructed; display failure alarm means an alarm reminder through an alarm device such as an alarm light on the avionics computing device.

[0129] In a specific embodiment, based on the above-mentioned avionics system, the two avionics computing devices are divided into a main computing device and a slave computing device, and the two display devices are divided into a first display device and a second display device. If there is no fault in the four devices in the system, the main computing device performs normal display control on the first display device and the second display device by default, and the slave computing device is in a hot standby state. Among them, the slave computing device is in a hot standby state means that the slave computing device performs all data reception and computing activities, but does not actively output information (including digital signals and video signals) to the outside. The first display device and the second display device normally receive the video signal output by the main computing device, and the displayed content can be different. For example, the first display device displays the PFD main flight parameter information, and the second display device displays the MFD multi-function parameter information, realizing the dual-screen display of PFD+MFD.

[0130] In a feasible implementation, based on the above-mentioned avionics system, the two avionics computing devices include a master computing device and a slave computing device; step S31 may include at least one of steps S31.1 to S31.3:

[0131] Step S31.1, if the LRU of the master computing device fails, the slave computing device is switched to perform dual-screen display reconstruction on the two display devices;

[0132] Step S31.2, if the LRU of the slave computing device fails, the master computing device continues to perform normal display control on the two display devices;

[0133] Step S31.3, if any display device has an LRU failure, the main computing device reconstructs the single-screen display of the other display device, and the slave computing device remains in a hot backup state.

[0134] For example, based on Figure 3 The avionics system shown in the figure sets ACU_L as the master computing device and ACU_R as the slave computing device. Figure 6 , Figure 6 Displays the reconstruction logic diagram corresponding to a single LRU failure. A single LRU failure can be caused by four situations: ACU_L has an LRU failure, ACU_R has an LRU failure, DHA_L has an LRU failure, and DHA_R has an LRU failure. Figure 6 middle, Figure 6 (a) is the control logic in normal state. Figure 6 (b) is the display reconstruction logic when ACU_L has LRU failure. Figure 6 (c) in the figure is the display reconstruction logic when ACU_R has LRU failure. Figure 6 (d) in the figure is the display reconstruction logic when DHA_L has LRU failure. Figure 6 (e) in FIG. 5 is the display reconstruction logic when there is an LRU failure in DHA_R.

[0135] like Figure 6 As shown in (a), in a normal state, ACU_L controls the display of DHA_L and DHA_R, and DHA_L and DHA_R display different contents on a dual screen. At this time, ACU_R is in hot standby state.

[0136] like Figure 6 As shown in (b) in FIG. 1 , if ACU_L fails, the slave computing device performs dual-screen display reconstruction on the two display devices. Specifically, ACU_R performs display control on DHA_L and DHA_R, so that DHA_L and DHA_R switch video sources, perform display reconstruction, and maintain normal dual-screen display; Figure 6As shown in (c), if ACU_R fails, the main computing device will maintain normal display control over the two display devices, specifically, ACU_L will maintain normal display control over DHA_L and DHA_R, so that DHA_L and DHA_R maintain normal display. It can be seen that the avionics system can maintain normal display of the two display screens when a single ACU avionics computer LRU fails, and provides a display control backup method in which the other avionics computing device controls the two display devices to display different contents respectively when any avionics computing device fails, achieving the effect of not affecting the normal display function in the reconstruction state.

[0137] like Figure 6 As shown in (d) in FIG. 1 , if DHA_L fails, the main computing device reconstructs the single-screen display of the other display device. Specifically, ACU_L controls the display of DHA_R to keep the display content of DHA_R in a normal state, or reconstructs the display of DHA_R to display the content of the original dual-screen display on the one display without failure. At this time, ACU_R is in hot standby state. Similarly, Figure 6 As shown in (e), if DHA_R fails, ACU_L will control the display of DHA_L to achieve single-screen display reconstruction, and ACU_R is in hot backup state. It can be seen that the avionics system can still maintain the integrity of the display content when a single DHA display fails, and provides a display control backup method in which all content is displayed by another display device when any display device fails, achieving the effect of not affecting the normal display function in the reconstruction state.

[0138] In a feasible implementation, based on the above-mentioned avionics system, step S32 may include at least one of steps S32.1 to S32.4:

[0139] Step S32.1, if LRU failure occurs in the master computing device and any display device, the slave computing device is switched to perform single-screen display reconstruction on the other display device;

[0140] Step S32.2, if LRU failure occurs in the slave computing device and any display device, the master computing device performs single-screen display reconstruction on the other display device;

[0141] Step S32.3, if both the master computing device and the slave computing device have LRU failures, restart the master computing device and the slave computing device;

[0142] Step S32.4: If LRU failure occurs in both display devices, the main computing device issues a display failure alarm.

[0143] For example, based on Figure 3The avionics system shown in the figure sets ACU_L as the master computing device and ACU_R as the slave computing device. Figure 7 , Figure 7 Display reconstruction logic diagram corresponding to double LRU failure. Double LRU failure can be caused by six situations: ACU_L and DHA_L have LRU failure, ACU_L and DHA_R have LRU failure, ACU_R and DHA_L have LRU failure, ACU_R and DHA_R have LRU failure, ACU_L and ACU_R have LRU failure, and DHA_L and DHA_R have LRU failure. Figure 7 middle, Figure 7 (a) is the display reconstruction logic when LRU failure occurs in ACU_L and DHA_L. Figure 7 (b) is the display reconstruction logic when ACU_L and DHA_R have LRU failure. Figure 7 (c) in the figure is the display reconstruction logic when LRU failure occurs in ACU_R and DHA_L. Figure 7 (d) in the figure is the display reconstruction logic when LRU failure occurs in ACU_R and DHA_R. Figure 7 (e) is the display reconstruction logic when ACU_L and ACU_R have LRU failure. Figure 7 (f) in FIG. 5 is the display reconstruction logic when LRU failure occurs in DHA_L and DHA_R.

[0144] like Figure 7 As shown in (a) in FIG. 1 , if ACU_L and DHA_L fail, the slave computing device is switched to reconstruct the single-screen display of another display device. Specifically, ACU_R controls DHA_R to switch the video source and reconstruct the display to maintain the display content in a normal state, or display the original dual-screen display content on the one display without fault. Similarly, Figure 7 As shown in (b) in Figure 1, if ACU_L and DHA_R fail, ACU_R will be switched to control the display of DHA_L to achieve single-screen display reconstruction. Figure 7 As shown in (c) in FIG. 1 , if ACU_R and DHA_L fail, the main computing device reconstructs the single-screen display of the other display device, specifically, the display of DHA_R is controlled by ACU_L to keep the display content of DHA_R in a normal state, or the display is reconstructed to display the content of the original dual-screen display on the one display without fault; similarly, Figure 7As shown in (d), if ACU_R and DHA_R fail, ACU_L will control the display of DHA_L to achieve single-screen display reconstruction. It can be seen that when any ACU fails and any DHA fails, the avionics system can be reconstructed through the remaining available ACU and DHA to achieve complete display of the display content in the reconstruction mode, providing a display control backup method in which another avionics computing device controls another display device to display all the content when any avionics computing device and any display device fail.

[0145] like Figure 7 As shown in (e), if ACU_L and ACU_R fail, DHA_L and DHA_R will have no video source input. At this time, DHA_L and DHA_R are both in a normal state but without video display. In this case, the main computing device ACU_L and the slave computing device ACU_R can be restarted. Specifically, the ACU can be restarted automatically or manually. For example, when the DM module detects that both ACU_L and ACU_R have LRU failures, a restart control signal is generated to automatically restart the ACU where it is located, and the restart control signal is output through the communication bus to automatically restart the other ACU. For another example, when the DM module detects that both ACU_L and ACU_R have LRU failures, a prompt signal can be generated to enable the staff to manually restart the two ACUs. Figure 7 As shown in (f), if DHA_L and DHA_R fail, ACU_L and ACU_R will not be affected. At this time, ACU_L continues to be in a valid output state, and ACU_R is in an active but no output state, that is, it is in a hot standby state. In this case, the software resident in ACU_L can be used to issue text or sound and light alarms to remind the staff.

[0146] In a feasible implementation, based on the above-mentioned avionics system, each avionics computing device includes a graphics processing module, the graphics processing module may include a primary flight display (PFD) unit and a multi-function display (MFD) unit, the PFD unit and the MFD unit are both connected to each display device through a digital video line and a signal transmission line; the two avionics computing devices include a master computing device and a slave computing device; step S33 may include at least one of steps S33.1 to S33.2:

[0147] Step S33.1, if the PFD unit or the MFD unit in the master computing device has HA failure, the PFD unit and the MFD unit in the slave computing device are switched to perform dual-screen display reconstruction on the two display devices;

[0148] Step S33.2: If the PFD unit or the MFD unit in the slave computing device fails in HA, the PFD unit and the MFD unit in the master computing device continue to perform normal display control on the two display devices.

[0149] For example, based on Figure 3 The avionics system shown sets ACU_L as the master computing device and ACU_R as the slave computing device. The graphics processing modules in ACU_L and ACU_R include a PFD unit and an MFD unit. The PFD unit is used to control the display device to display the PFD main flight parameter information, and the MFD unit is used to control the display device to display the MFD multi-function parameter information.

[0150] Reference Figure 8 , Figure 8 The schematic diagram of the reconstruction logic corresponding to a single HA failure is shown. A single HA failure may include HA failure in the PFD unit of ACU_L, HA failure in the MFD unit of ACU_L, HA failure in the PFD unit of ACU_R, and HA failure in the MFD unit of ACU_R. Figure 8 middle, Figure 8 (a) is the control logic in normal state. Figure 8 (b) is a schematic diagram of the state of the PFD unit of ACU_L when HA fails. Figure 8 (c) is a schematic diagram of the display reconstruction state when the PFD unit of ACU_L has HA failure. When the PFD unit of ACU_L has HA failure and executes the display reconstruction logic, Figure 8 The state transformation of (b) is Figure 8 The state of (c).

[0151] like Figure 8 As shown in (a), in a normal state, ACU_L controls the display of DHA_L and DHA_R, DHA_L performs PFD display, and DHA_R performs MFD display, or DHA_L performs MFD display and DHA_R performs PFD display. At this time, the PFD unit and MFD unit in ACU_R are in an active but non-outputting state. ACU_L and ACU_R maintain a communication connection, and HA transfer (transfer HA) can be implemented. HA transfer refers to a certain form of transfer or switching of resident applications in a high-reliability environment.

[0152] like Figure 8 (b) and Figure 8As shown in (c), if there is no LRU failure in ACU_L and ACU_R, and there is HA failure in the PFD unit of ACU_L, HA transfer can be performed to control the display of DHA_L and DHA_R through the PFD unit and MFD unit of ACU_R, so that DHA_L and DHA_R switch the video source, perform display reconstruction, and maintain normal dual-screen display. At this time, ACU_L is in an active but non-output state. Similarly, the display reconstruction logic when there is HA failure in the MFD unit of ACU_L is similar and will not be repeated here.

[0153] Since the PFD unit and MFD unit in ACU_R are in an active but non-output state in a normal state, if there is no LRU failure in ACU_L and ACU_R, and there is an HA failure in the PFD unit or MFD unit in the computing device ACU_R, the display control of DHA_L and DHA_R can be maintained through ACU_L in a normal state, so that DHA_L and DHA_R maintain normal display.

[0154] It can be seen that the avionics system can still maintain normal display on two display screens when a single HA fails in a single ACU avionics computer, achieving the effect of not affecting the normal display function in the reconstruction state.

[0155] In another feasible implementation, based on the above-mentioned avionics system, step S34 may include at least one of steps S34.1 to S34.4:

[0156] S34.1, if the PFD unit in the master computing device and the MFD unit in the slave computing device have HA failure, the structure of the PFD unit in the slave computing device is sent to the master computing device to form a new PFD unit in the master computing device, so that the new PFD unit and the MFD unit in the master computing device perform dual-screen display reconstruction on the two display devices;

[0157] S34.2, if the MFD unit in the master computing device and the PFD unit in the slave computing device have HA failure, the structure of the MFD unit in the slave computing device is sent to the master computing device to form a new MFD unit in the master computing device, so that the PFD unit in the master computing device and the new MFD unit perform dual-screen display reconstruction on the two display devices;

[0158] S34.3, if the PFD units in both the master computing device and the slave computing device have HA failure, the MFD unit in the master computing device continues to perform MFD display control on the two display devices, and the master computing device issues a PFD display failure alarm;

[0159] S34.4, if HA failure occurs in both the MFD units in the master computing device and the slave computing device, the PFD unit in the master computing device continues to perform PFD display control on the two display devices, and the master computing device issues an MFD display failure alarm.

[0160] It should be noted that the structure may be a MSG structure for storing ACU avionics computer messages, which includes information such as the message type, additional information, and message delivery time, which is not specifically limited here.

[0161] For example, refer to Fig. 9 , Fig. 9 The logical diagram for the reconstruction of the display corresponding to the double HA failure is shown. The double HA failure may include four situations: HA failure of the PFD unit of ACU_L and the MFD unit of ACU_R, HA failure of the MFD unit of ACU_L and the PFD unit of ACU_R, HA failure of the PFD unit of ACU_L and the PFD unit of ACU_R, and HA failure of the MFD unit of ACU_L and the MFD unit of ACU_R. It should be noted that the two situations of HA failure of the PFD unit and the MFD unit of ACU_L and HA failure of the PFD unit and the MFD unit of ACU_R do not belong to the fault conditions of double HA failure defined in this embodiment. Fig. 9 middle, Fig. 9 (a) is the control logic in normal state. Fig. 9 (b) is a schematic diagram of the state when the PFD unit of ACU_L and the MFD unit of ACU_R have HA failure. Fig. 9 (c) is a schematic diagram of the display reconstruction state when the PFD unit of ACU_L and the MFD unit of ACU_R have HA failure. When the PFD unit of ACU_L and the MFD unit of ACU_R have HA failure and the display reconstruction logic is executed, Fig. 9 The state transformation of (b) is Fig. 9 The state of (c).

[0162] Fig. 9 The state shown in (a) is the same as Figure 8(a) is consistent with the above, and will not be repeated here. If the PFD unit and MFD unit of the main computing device ACU_L have HA failure, the slave computing device will be switched to reconstruct the dual-screen display of the two display devices, specifically, the PFD unit and MFD unit of ACU_R will be used to control the display of DHA_L and DHA_R, so that DHA_L and DHA_R switch the video source, perform display reconstruction, and maintain normal dual-screen display; if the PFD unit and MFD unit of the slave computing device ACU_R have HA failure, the main computing device will maintain normal display control of the two display devices, specifically, the PFD unit and MFD unit of ACU_L will be used to control the display of DHA_L and DHA_R in a normal state, so that DHA_L and DHA_R maintain normal display.

[0163] like Fig. 9 (b) and Fig. 9 As shown in (c) in FIG. 1 , if neither ACU_L nor ACU_R has LRU failure, and the PFD unit of ACU_L and the MFD unit of ACU_R have HA failure, the MSG structure of the PFD unit in ACU_R can be sent to ACU_L through HA transfer. The MSG structure of the PFD unit can be seen in Fig. 9 In (c) of FIG. 1 , the MSG (PFD) transmitted between ACU_R and ACU_L is as follows: Fig. 9 As shown in (c), at this time, ACU_R acts as the transmitter of HA transfer, i.e., transfer HA_TX(PFD), and ACU_L acts as the receiver of HA transfer, i.e., transfer HA_RX(PFD), so that the PFD unit and MFD unit obtained after the transfer in ACU_L can control the display of DHA_L and DHA_R, so that the DHA (DHA_L or DHA_R) displaying the PFD main flight parameter information switches the video source and performs display reconstruction, and the DHA (DHA_R or DHA_L) displaying the MFD multi-function parameter information maintains normal display, so that DHA_L and DHA_R maintain normal dual-screen display, and ACU_R is in an active but no output state. Similarly, the display reconstruction logic of the MFD unit of ACU_L and the PFD unit of ACU_R when HA fails is similar, which will not be repeated here.

[0164] If there is no LRU failure in ACU_L and ACU_R, and both the PFD units of ACU_L and ACU_R have HA failure, the MFD unit in ACU_L will continue to control the MFD display of the two display devices or one of them, and at the same time, the ACU_L will control the completion of the PFD failure alarm. Similarly, if there is no LRU failure in ACU_L and ACU_R, and both the MFD units of ACU_L and ACU_R have HA failure, the PFD unit in ACU_L will continue to control the PFD display of the two display devices or one of them, and at the same time, the ACU_L will control the completion of the MFD failure alarm. Among them, the alarm mode of ACU includes text reminder, sound and light reminder, etc., which are not specifically limited here.

[0165] It can be seen that the avionics system can still maintain normal display of some information when there is dual HA failure in the two ACU avionics computers. Compared with the system architecture in the relevant technology, it can improve the effective utilization of the display function, adapt to the display control of more fault conditions, and improve the adaptability of the avionics system.

[0166] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the display reconstruction method of the present application. More simple transformations based on this technical concept are all within the protection scope of the present application.

[0167] The display reconstruction method proposed in this embodiment can solve the technical problem that the avionics system in the related art has limited fault response measures, which affects the normal display function of the display control system. The specific architecture of the avionics system involved can refer to the above embodiment. Since the avionics system in the display reconstruction method can adopt all the technical solutions of the above avionics system embodiment, it also has at least all the beneficial effects brought by the technical solutions of the above embodiment, which will not be repeated here. Correspondingly, the avionics system that can implement the display reconstruction method can also specifically implement all the technical solutions of the display reconstruction method embodiment and all the beneficial effects brought by it, which will not be repeated here.

[0168] The present application also provides an aircraft.

[0169] In an embodiment of the aircraft of the present application, the aircraft is an aviation aircraft and may include an avionics system as described above. Optionally, the avionics system may implement the display reconstruction method in the above embodiment.

[0170] The aircraft provided by the present application adopts the avionics system in the above embodiment, which can solve the technical problems in the related art that the hardware display size of the avionics system is limited and cannot be flexibly adjusted, and the technical problems that the fault response measures are limited and affect the normal display function of the display control system. Compared with the related art, the beneficial effects of the aircraft provided by the present application are the same as the beneficial effects of the avionics system and the display reconstruction method provided by the above embodiment, and the other technical features in the aircraft are the same as the features disclosed in the above embodiment, which will not be repeated here.

[0171] The present application also provides a computer-readable storage medium having computer-readable program instructions (ie, computer program) stored thereon, the computer-readable program instructions being used to execute the display reconstruction method in the above-mentioned embodiment.

[0172] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared or semiconductor systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: a portable computer disk, hard disk, random access memory (RAM: Random Access Memory), read-only memory (ROM: Read Only Memory), erasable programmable read-only memory (EPROM: Erasable Programmable Read Only Memory or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM: CD-Read Only Memory), optical storage device, magnetic storage device, etc., or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by an instruction execution system or device, or a combination of the two. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency: Radio Frequency), etc., or any suitable combination of the above.

[0173] The computer-readable storage medium may be included in the aircraft, or may exist independently without being installed in the aircraft.

[0174] The computer-readable storage medium carries one or more programs. When the one or more programs are executed by the aircraft, the aircraft can implement the functions defined in the display reconstruction method disclosed in the embodiment of the present application.

[0175] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or to an external computer, such as an Internet connection provided by an Internet service provider.

[0176] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the method, device, system and computer program product according to various embodiments of the present application. In this regard, each box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of the boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0177] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0178] The storage medium provided in this application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned display reconstruction method, and can solve the technical problem that the avionics system has limited fault response measures in the related art, which affects the normal display function of the display control system. Compared with the related art, the beneficial effects of the computer-readable storage medium provided in this application are the same as the beneficial effects of the display reconstruction method provided in the above-mentioned embodiment, and will not be repeated here.

[0179] The present application also provides a computer program product, including a computer program, which implements the steps of the display reconstruction method as described above when executed by a processor.

[0180] The computer program product provided by the present application can solve the technical problem that the avionics system has limited fault response measures in the related art, which affects the normal display function of the display control system. Compared with the related art, the beneficial effects of the computer program product provided by the present application are the same as the beneficial effects of the display reconstruction method provided by the above embodiment, which will not be repeated here.

[0181] The above are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect application in other related technical fields are included in the patent protection scope of the present application.

Claims

1. An avionics system, characterized in that: It comprises two avionics computing devices and two display devices, the two avionics computing devices are communicatively connected, and each display device is connected to each avionics computing device via a digital video line and a signal transmission line; Wherein, the two avionics computing devices constitute a dual-redundancy avionics computing subsystem to provide avionics computing backup; The two avionics computing devices and the two display devices constitute a cross-redundant display control subsystem. When any of the avionics computing devices and / or any of the display devices fails, display reconstruction is performed through other devices to provide display control backup; wherein, the other devices are the other avionics computing devices and the display devices among the two avionics computing devices and the two display devices except the failed device, and the failure includes the failure of the field replaceable unit LRU and / or the failure of the resident application HA; Each of the avionics computing devices comprises: An avionics calculation module, used to perform avionics calculations based on received external information and output graphic processing signals; A graphics processing module is connected to the avionics computing module and is respectively connected to the two display devices through the digital video lines. The graphics processing module is used to generate graphics and render images according to the graphics processing signals, and output two video signals, which are respectively transmitted to the two display devices through the digital video lines.

2. The avionics system according to claim 1, characterized in that: Each of the display devices comprises: The display unit is connected to the two avionics computing devices respectively through the digital video lines, and the display unit is used for displaying according to the received video signal.

3. The avionics system according to claim 2, characterized in that: Each of the display devices further includes: A communication unit, connected to the two avionics computing devices respectively through the signal transmission line, and the communication unit is used to output user operation instructions according to user operation information; The self-checking unit is connected to the two avionics computing devices respectively through the signal transmission line, and the self-checking unit is used to detect device failure and output self-checking information.

4. The avionics system according to claim 2 or 3, characterized in that: Each of the display devices further includes: A frozen screen detection unit is connected to the two avionics computing devices respectively through the digital video line, and is also connected to the display unit. The frozen screen detection unit is used to perform frozen screen detection according to the received video signal, and output the video signal that passes the detection to the display unit.

5. The avionics system according to claim 1, characterized in that: The avionics computing module is connected to the two display devices respectively through the signal transmission lines, and the avionics computing module is also used to receive user operation instructions and self-test information output by the display devices through the signal transmission lines.

6. The avionics system according to claim 5, characterized in that: Each of the avionics computing devices further includes: The display management module is connected to the avionics computing module and the graphics processing module respectively, and is also connected to each of the display devices through the digital video line and the signal transmission line. The display management modules in the two avionics computing devices are communicatively connected. The display management module is used to monitor the failure conditions of each of the display devices and each of the avionics computing devices to provide the avionics computing backup and the display control backup.

7. A display reconstruction method, characterized in that: Applicable to the avionics system according to any one of claims 1 to 6, the display reconstruction method comprising: Acquiring fault monitoring information of the two avionics computing devices and the two display devices; Determine the faulty device and other devices according to the fault monitoring information, the faulty device being any one of the avionics computing devices and / or any one of the display devices, and the other devices being other avionics computing devices and display devices among the two avionics computing devices and the two display devices except the faulty device; According to the fault condition of the faulty device and the preset display reconstruction logic, the other devices are used to perform display reconstruction to provide display control backup; wherein the fault condition includes the failure of a field replaceable unit LRU and / or the failure of a resident application HA.

8. The display reconstruction method according to claim 7, characterized in that: The performing display reconstruction by using the other devices according to the fault condition of the faulty device and the preset display reconstruction logic includes: When the fault condition of the faulty device is a single LRU failure, according to the single LRU failure display reconstruction mechanism, the other devices are used to perform dual-screen display reconstruction or single-screen display reconstruction, wherein the single LRU failure refers to the LRU failure of any of the avionics computing devices or any of the display devices; When the fault condition of the faulty device is a double LRU failure, according to the double LRU failure display reconstruction mechanism, the other devices are used to perform single-screen display reconstruction or display fault alarm, wherein the double LRU failure refers to the LRU failure of any one of the avionics computing devices and any one of the display devices, or the LRU failure of two of the display devices; When the fault condition of the faulty device is a single HA failure, dual-screen display reconstruction is performed using the other devices according to a single HA failure display reconstruction mechanism, wherein the single HA failure refers to the HA failure of any of the avionics computing devices; When the fault condition of the faulty device is a dual HA failure, according to the dual HA failure display reconstruction mechanism, the other device is used to perform dual-screen display reconstruction and / or display fault alarm, wherein the dual HA failure refers to the HA failure in both of the two avionics computing devices.

9. The display reconstruction method according to claim 8, characterized in that: The two avionics computing devices include a master computing device and a slave computing device; When the fault condition of the faulty device is a single LRU failure, according to the single LRU failure display reconstruction mechanism, using the other device to perform dual-screen display reconstruction or single-screen display reconstruction includes: If the LRU of the master computing device fails, switching to the slave computing device to perform dual-screen display reconstruction on the two display devices; If the LRU of the slave computing device fails, the master computing device continues to perform normal display control on the two display devices; If the LRU fails in any of the display devices, the main computing device reconstructs the single-screen display of the other display device.

10. The display reconstruction method according to claim 9, characterized in that: When the fault condition of the faulty device is a double LRU failure, according to the double LRU failure display reconstruction mechanism, using the other device to perform single-screen display reconstruction or display fault alarm includes: If the LRU of the master computing device and any of the display devices fails, switching the slave computing device to perform single-screen display reconstruction on the other display device; If the LRU fails in the slave computing device and any of the display devices, the master computing device performs single-screen display reconstruction on the other display device; If the LRU fails in both of the two display devices, the main computing device will issue a display failure alarm.

11. The display reconstruction method according to claim 8, characterized in that: Each of the avionics computing devices includes a graphics processing module, and the graphics processing module includes a primary flight display PFD unit and a multi-function display MFD unit, and the PFD unit and the MFD unit are connected to each of the display devices through the digital video line and the signal transmission line; the two avionics computing devices include a master computing device and a slave computing device; When the fault condition of the faulty device is a single HA failure, performing dual-screen display reconstruction using the other device according to the single HA failure display reconstruction mechanism includes: If the HA fails in the PFD unit or the MFD unit in the master computing device, switching the PFD unit and the MFD unit in the slave computing device to perform dual-screen display reconstruction on the two display devices; If the HA fails in the PFD unit or the MFD unit in the slave computing device, the PFD unit and the MFD unit in the master computing device continue to perform normal display control on the two display devices.

12. The display reconstruction method according to claim 11, characterized in that: When the fault condition of the faulty device is a dual HA failure, according to the dual HA failure display reconstruction mechanism, using the other device to perform dual-screen display reconstruction and / or display fault alarm includes: If the PFD unit in the master computing device and the MFD unit in the slave computing device have HA failures, the structure of the PFD unit in the slave computing device is sent to the master computing device to form a new PFD unit in the master computing device, so that the new PFD unit and the MFD unit in the master computing device perform dual-screen display reconstruction on the two display devices; If the MFD unit in the master computing device and the PFD unit in the slave computing device have HA failures, the structure of the MFD unit in the slave computing device is sent to the master computing device to form a new MFD unit in the master computing device, so that the PFD unit in the master computing device and the new MFD unit perform dual-screen display reconstruction on the two display devices; If the PFD units in both the master computing device and the slave computing device have HA failures, the MFD unit in the master computing device continues to perform MFD display control on the two display devices, and the master computing device issues a PFD display failure alarm; If HA failure occurs in both the MFD units in the master computing device and the slave computing device, the PFD unit in the master computing device continues to perform PFD display control on the two display devices, and the master computing device issues an MFD display failure alarm.

13. An aircraft, characterized in that: The invention comprises an avionics system as claimed in any one of claims 1 to 6.

Images