Control method and device for supporting external auditing of solid-state power of electromechanical system

Abstract

The invention provides a control method and device for supporting external auditing of solid-state power of an electromechanical system, and belongs to the overall technical field of electromechanical systems in the aviation technology, and the control device comprises an SSPC, a diode, a relay and a circuit breaker. The device is divided into a dual-redundancy automatic + manual override level, a single-redundancy automatic + manual override level and a single-redundancy automatic level according to safety levels from high to low, a redundancy control mode of a standard mode is formulated according to different failure probabilities and safety levels, the multiple redundancy switching problems of SSPC automatic control and manual override can be effectively solved, and the reliability of the device is improved. Seamless switching is achieved, the problem that the right cannot be handed over between redundancies is completely eradicated, transplantation is convenient, and external auditing of aviation electromechanical system solid state power control can be supported.

Description

Technical Field

[0001] The present invention belongs to the general technical field of aeronautical technology electromechanical systems, and in particular relates to a control method and device for supporting external audit of solid-state power of electromechanical systems. Background Art

[0002] The comprehensive scope of aircraft electromechanical system control generally includes hydraulic, landing gear control, fuel, fire protection, environmental control, anti-icing, oxygen, power supply, lighting and other systems. Generally, distributed remote interface units (RIU) are used to collect data, electromechanical integrated management computers (EMCP) are used for centralized processing and solving, and distributed remote power distribution units (RPDU) are used to implement control drive technology, and the design principle of bus transmission control instructions is preferred. Important key control functions are designed with hard-line override modes, such as fuel supply, and emergency control is independent of computer control. Controls involving the prevention of non-command operation requirements are generally implemented by connecting the negative line of the control drive in series with an operating switch, such as landing gear retraction and extension, fire protection cut-off, etc.

[0003] In the prior art, for control requirements with low safety levels, redundant solid-state power control (SSPC) technology is used to transmit control instructions to the remote power distribution unit (RPDU) through the bus, and drive the SSPC to drive power by converting instructions, thereby achieving driving in the small and medium power range. This method belongs to the automatic control method.

[0004] However, for control requirements with a higher level of safety, manual control and automatic control are provided, and manual control has a higher priority than automatic control. Therefore, how to ensure that when the SSPC solid-state control mode fails, the manual override can accurately take over and replace the SSPC solid-state control is a technical problem. Summary of the invention

[0005] In order to solve the control requirements for higher safety levels in the prior art, the problem of redundancy switching between automatic control and manual override of aircraft electromechanical system SSPC; and the problem of power control source switching during manual intervention, the present invention provides a control design method that supports external audit of solid-state power of electromechanical system. For different failure probabilities and functional safety levels, standardized control methods that match them and can support external audits are formulated. The technical solutions are as follows:

[0006] In a first aspect, a control device supporting external audit of solid-state power of an electromechanical system is provided, wherein the device is provided with a single redundancy automatic level according to a safety level, and the device comprises an SSPC, wherein a positive end of the SSPC is connected to a 28V bus bar, and a negative end is connected to a load; the SSPC receives automatic control instructions from the bus, and directly controls the connection and disconnection of the load.

[0007] Furthermore, the device is also provided with a single redundancy automatic + manual override level according to the safety level, and the safety level of the single redundancy automatic + manual override level is higher than the safety level of the single redundancy automatic level. The device comprises: SSPC, circuit breaker, relay 1, relay 2,

[0008] The positive terminal of the circuit breaker is connected to the second bus bar, the negative terminal is connected to the pin 1 of the relay 1, and the pin 2 of the relay 1 is connected to the load;

[0009] The positive terminal of the SSPC is connected to the first bus bar, the negative terminal is connected to the pin 1 of the relay 2, and the pin 3 of the relay 2 is connected to the load;

[0010] The manual switch override start end is connected to relay 1 coil point A, and relay 1 coil point B is grounded; the manual switch override end is connected to relay 2 coil point A, and relay 2 coil point B is grounded;

[0011] In automatic mode, the manual switch is set to automatic position, SSPC receives automatic control instructions from the bus, and controls the connection and disconnection of the load drive channel through the normally closed contact of relay 2;

[0012] In manual mode, the manual switch is set to the override open position, relay 1 works, the second bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, and the load is connected through relay 1;

[0013] In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, relay 2 disconnects the first bus power supply channel, pin 1 and pin 3 of relay 1 are connected, relay 1 disconnects the second bus power supply channel, and controls the load to shut down.

[0014] Furthermore, the device is also provided with a dual-redundancy automatic + manual override level according to the safety level, and the safety level of the dual-redundancy automatic + manual override level is higher than the safety level of the single-redundancy automatic + manual override level. The device comprises: SSPC1, SSPC2, a circuit breaker, a relay 1, a relay 2, a diode 1, a diode 2,

[0015] Among them, the positive end of SSPC1 is connected to the first bus bar, the negative end is connected to the positive end of diode 1, the negative end of diode 1 is connected to pin 7 of relay 2, and pin 9 of relay 2 is connected to the load; the positive end of SSPC2 is connected to the second bus bar, the negative end is connected to the positive end of diode 2, the negative end of diode 2 is connected to pin 4 of relay 2, and pin 6 of relay 2 is connected to the load;

[0016] The positive terminal of the circuit breaker is connected to the third bus bar, the negative terminal is connected to the pin 1 of the relay 1, the pin 2 of the relay 1 is connected to the pin 1 of the relay 2; the pin 3 of the relay 2 is connected to the load;

[0017] The manual switch override start end is connected to relay 1 coil point A, and relay 1 coil point B is grounded; the manual switch override end is connected to relay 2 coil point A, and relay 2 coil point B is grounded;

[0018] In automatic mode, the manual switch is set to the automatic position, and SSPC1 and SSPC2 simultaneously receive automatic control instructions from the bus to control the connection and disconnection of the load drive channel. The diode ensures that a single channel failure has no effect on the other channel, and also avoids the circulation caused by the voltage difference between the two drive channels;

[0019] In manual mode, the manual switch is set to the override open position, relay 1 works, the third bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, pins 1 and 3 of relay 2 are connected, and the load is controlled by relay 1 and relay 2 to be connected;

[0020] In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, the third bus power supply channel is disconnected, pin 4 and pin 5 of relay 2 are connected, the second bus power supply channel is disconnected, and pin 7 and pin 8 of relay 2 are connected to disconnect the first bus power supply channel.

[0021] In the second aspect, a control method supporting external audit of solid-state power of electromechanical systems is provided, which is applied to any device described in the first aspect. For the single redundancy automatic level, the SSPC receives automatic control instructions from the bus and directly controls the connection and disconnection of the load.

[0022] In one implementation, for single redundancy automatic + manual override level,

[0023] In automatic mode, the manual switch is set to automatic position, SSPC receives automatic control instructions from the bus, and controls the connection and disconnection of the load drive channel through the normally closed contact of relay 2;

[0024] In manual mode, the manual switch is set to the override open position, relay 1 works, the second bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, and the load is connected through relay 1;

[0025] In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, relay 2 disconnects the first bus power supply channel, pin 1 and pin 3 of relay 1 are connected, relay 1 disconnects the second bus power supply channel, and controls the load to shut down.

[0026] In one implementation, for dual-redundancy automatic + manual override levels,

[0027] In automatic mode, the manual switch is set to the automatic position, and SSPC1 and SSPC2 simultaneously receive automatic control instructions from the bus to control the connection and disconnection of the load drive channel. The diode ensures that a single channel failure has no effect on the other channel, and also avoids the circulation caused by the voltage difference between the two drive channels;

[0028] In manual mode, the manual switch is set to the override open position, relay 1 works, the third bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, pins 1 and 3 of relay 2 are connected, and the load is controlled by relay 1 and relay 2 to be connected;

[0029] In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, the third bus power supply channel is disconnected, pin 4 and pin 5 of relay 2 are connected, the second bus power supply channel is disconnected, and pin 7 and pin 8 of relay 2 are connected to disconnect the first bus power supply channel.

[0030] The beneficial effects of the present invention are at least:

[0031] The control device supporting external audit of solid-state power of electromechanical system provided by the present invention comprises: SSPC, diode, relay and circuit breaker. The device is divided into three levels according to the safety level from high to low, namely, dual redundancy automatic + manual override, single redundancy automatic + manual override, and single redundancy automatic. The present invention formulates a standard mode of redundancy control according to different failure probabilities and safety levels, which can effectively solve the problem of multiple redundancy switching of SSPC automatic control and manual override, realize seamless switching, eliminate the problem of power transfer between redundancies, facilitate transplantation, and support external audit of solid-state power control of aviation electromechanical system. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 It is a schematic diagram of the design principle of single redundancy automatic control mode;

[0033] Figure 2 This is a schematic diagram of the design principle of non-similar automatic control plus manual override mode;

[0034] Figure 3 This is a schematic diagram of the design principle of non-similar dual-redundancy automatic control plus single-redundancy manual override mode. DETAILED DESCRIPTION

[0035] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0036] The features and illustrative embodiments of various aspects of the present invention will be described in detail below. In the detailed description below, many specific details are proposed to provide a comprehensive understanding of the present invention. However, it is obvious to those skilled in the art that the present invention can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present invention by illustrating examples of the present invention. The present invention is by no means limited to any specific settings and methods proposed below, but covers any improvements, replacements and modifications of structures, methods, devices without departing from the spirit of the present invention. In the accompanying drawings and the following description, known structures and technologies are not shown to avoid unnecessary ambiguity in the present invention.

[0037] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features in the embodiments can be combined with each other, and the embodiments can refer to and quote each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0038] The present invention is described in detail below with reference to the accompanying drawings and specific embodiments.

[0039] The present invention combines the relay combination with the SSPC through external hard wire winding, realizes the linkage of manual override and automatic control, and meets the non-similar safety margin control requirements.

[0040] See also Figure 1 A control device supporting external audit of solid-state power of electromechanical system, wherein the device is provided with single redundancy automatic level according to safety level, and the device comprises SSPC, wherein the positive end of SSPC is connected to 28V bus bar, and the negative end is connected to load; SSPC receives automatic control instruction from bus, and directly controls connection and disconnection of load.

[0041] See also Figure 2 The device is also provided with a single redundancy automatic + manual override level according to the safety level. The safety level of the single redundancy automatic + manual override level is higher than the safety level of the single redundancy automatic level. The device includes: SSPC, circuit breaker, relay 1, relay 2,

[0042] The positive terminal of the circuit breaker is connected to the second bus bar, the negative terminal is connected to the pin 1 of the relay 1, and the pin 2 of the relay 1 is connected to the load;

[0043] The positive terminal of the SSPC is connected to the first bus bar, the negative terminal is connected to the pin 1 of the relay 2, and the pin 3 of the relay 2 is connected to the load;

[0044] The manual switch override start end is connected to relay 1 coil point A, and relay 1 coil point B is grounded; the manual switch override end is connected to relay 2 coil point A, and relay 2 coil point B is grounded;

[0045] In automatic mode, the manual switch is set to automatic position, SSPC receives automatic control instructions from the bus, and controls the connection and disconnection of the load drive channel through the normally closed contact of relay 2;

[0046] In manual mode, the manual switch is set to the override open position, relay 1 works, the second bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, and the load is connected through relay 1;

[0047] In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, relay 2 disconnects the first bus power supply channel, pin 1 and pin 3 of relay 1 are connected, relay 1 disconnects the second bus power supply channel, and controls the load to shut down.

[0048] See also Figure 3 The device is also provided with a dual-redundancy automatic + manual override level according to the safety level. The safety level of the dual-redundancy automatic + manual override level is higher than the safety level of the single-redundancy automatic + manual override level. The device includes: SSPC1, SSPC2, circuit breaker, relay 1, relay 2, diode 1, diode 2,

[0049] Among them, the positive end of SSPC1 is connected to the first bus bar, the negative end is connected to the positive end of diode 1, the negative end of diode 1 is connected to pin 7 of relay 2, and pin 9 of relay 2 is connected to the load; the positive end of SSPC2 is connected to the second bus bar, the negative end is connected to the positive end of diode 2, the negative end of diode 2 is connected to pin 4 of relay 2, and pin 6 of relay 2 is connected to the load;

[0050] The positive terminal of the circuit breaker is connected to the third bus bar, the negative terminal is connected to the pin 1 of the relay 1, the pin 2 of the relay 1 is connected to the pin 1 of the relay 2; the pin 3 of the relay 2 is connected to the load;

[0051] The manual switch override start end is connected to relay 1 coil point A, and relay 1 coil point B is grounded; the manual switch override end is connected to relay 2 coil point A, and relay 2 coil point B is grounded;

[0052] In automatic mode, the manual switch is set to the automatic position, and SSPC1 and SSPC2 simultaneously receive automatic control instructions from the bus to control the connection and disconnection of the load drive channel. The diode ensures that a single channel failure has no effect on the other channel, and also avoids the circulation caused by the voltage difference between the two drive channels;

[0053] In manual mode, the manual switch is set to the override open position, relay 1 works, the third bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, pins 1 and 3 of relay 2 are connected, and the control load is turned on;

[0054] In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, the third bus power supply channel is disconnected, pin 4 and pin 5 of relay 2 are connected, the second bus power supply channel is disconnected, and pin 7 and pin 8 of relay 2 are connected to disconnect the first bus power supply channel.

[0055] Specifically, Figure 1 It is the design principle of single redundancy automatic control mode. Only the automatic control mode is set. RPDU receives bus instructions and controls the corresponding SSPC channel to control the load power, so as to realize automatic connection and disconnection of the load. The failure probability of this control mode can reach 1e-3, which can be used for most Class III and below control of electromechanical systems.

[0056] Figure 2 This is the design principle of non-similar automatic control plus manual override mode, in which the power supply of SSPC automatic control channel and manual hard-wire override channel comes from different bus bars. In automatic control mode (switch is set to automatic position), RPDU receives bus instructions and controls the corresponding SSPC channel to control load power, realizing automatic connection and disconnection of load; in manual control mode (switch is set to override on or override off), the switch can be connected or disconnected through the hard-wire logic override automatic control channel of the relay group. When the switch is in the override on position, the relay of the manual hard-wire override channel is powered on and connected to connect the manual control channel, and the load is connected; when the switch is in the override off position, the relay of the automatic control channel is powered on and connected to cut off the power supply of the automatic control channel, and the load is disconnected. The failure probability of this control mode can reach 1e-7, and it is mainly used for the control of Class II and some Class III levels of electromechanical systems.

[0057] Figure 3This is the design principle of the non-similar dual-redundancy automatic control plus single-redundancy manual override mode, in which the power supplies of the SSPC automatic control channel and the manual hard-wire override channel come from different buses. In the automatic control mode (the switch is set to the automatic position), different RPDUs receive bus instructions and control the corresponding SSPC channels to control the load power, realizing the automatic connection and disconnection of the load; in the manual control mode (the switch is set to the override on or override off), the switch can be connected or disconnected through the hard-wired logic override dual-redundancy automatic control channel of the relay group. When the switch is in the override on position, the relay of the manual hard-wire override channel is powered on and connected to connect the manual control channel, and the load is connected; when the switch is in the override off position, the relay of the automatic control channel is powered on and connected to cut off the power supply of the two automatic control channels, and at the same time cut off the power distribution of the manual control channel, and the load is disconnected. The different control channels of this control mode are arranged in multiple RPDUs considering regional safety factors, and the failure probability can reach 1e-9, which is mainly used for the control of Class I and some Class II levels of electromechanical systems.

[0058] In summary, the present invention relates to the improvement of the reliability of power control, which is a safety margin supplement to the conventional solid-state control technology. According to different failure probabilities and safety levels, a standard mode of redundancy control is formulated, which can effectively solve the various redundancy switching problems of SSPC automatic control and manual override, realize seamless switching, eliminate the problem of the inability to hand over power between redundancies, facilitate transplantation, and support external audits of solid-state power control of aviation electromechanical systems.

[0059] The above only expresses the implementation mode of the present invention, and its description is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent. It should be pointed out that for ordinary technicians in this field, several modifications and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. In addition, the parts not detailed in the present invention are all conventional technologies.

Claims

1. A control device supporting external audit of solid-state power of electromechanical systems, characterized in that: The device is provided with a single redundancy automatic level according to the safety level, and comprises a SSPC, wherein the positive end of the SSPC is connected to the 28V bus bar, and the negative end is connected to the load; the SSPC receives automatic control instructions from the bus and directly controls the connection and disconnection of the load.

2. The device according to claim 1, characterized in that The device is also provided with a single redundancy automatic + manual override level according to the safety level. The safety level of the single redundancy automatic + manual override level is higher than the safety level of the single redundancy automatic level. The device comprises: SSPC, circuit breaker, relay 1, relay 2, The positive terminal of the circuit breaker is connected to the second bus bar, the negative terminal is connected to the pin 1 of the relay 1, and the pin 2 of the relay 1 is connected to the load; The positive terminal of the SSPC is connected to the first bus bar, the negative terminal is connected to the pin 1 of the relay 2, and the pin 3 of the relay 2 is connected to the load; The manual switch override start end is connected to point A of relay 1 coil, and point B of relay 1 coil is grounded; the manual switch override end is connected to point A of relay 2 coil, and point B of relay 2 coil is grounded.

3. The device according to claim 2, characterized in that In automatic mode, the manual switch is set to automatic position, SSPC receives automatic control instructions from the bus, and controls the connection and disconnection of the load drive channel through the normally closed contact of relay 2; In manual mode, the manual switch is set to the override open position, relay 1 works, the second bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, and the load is controlled by relay 1 to be connected; In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, relay 2 disconnects the first bus power supply channel, pin 1 and pin 3 of relay 1 are connected, relay 1 disconnects the second bus power supply channel, and controls the load to shut down.

4. The device according to claim 1, characterized in that The device is also provided with a dual-redundancy automatic + manual override level according to the safety level. The safety level of the dual-redundancy automatic + manual override level is higher than the safety level of the single-redundancy automatic + manual override level. The device comprises: SSPC1, SSPC2, a circuit breaker, a relay 1, a relay 2, a diode 1, a diode 2, Among them, the positive end of SSPC1 is connected to the first bus bar, the negative end is connected to the positive end of diode 1, the negative end of diode 1 is connected to pin 7 of relay 2, and pin 9 of relay 2 is connected to the load; the positive end of SSPC2 is connected to the second bus bar, the negative end is connected to the positive end of diode 2, the negative end of diode 2 is connected to pin 4 of relay 2, and pin 6 of relay 2 is connected to the load; The positive terminal of the circuit breaker is connected to the third bus bar, the negative terminal is connected to the pin 1 of the relay 1, the pin 2 of the relay 1 is connected to the pin 1 of the relay 2; the pin 3 of the relay 2 is connected to the load; The manual switch override start end is connected to point A of relay 1 coil, and point B of relay 1 coil is grounded; the manual switch override end is connected to point A of relay 2 coil, and point B of relay 2 coil is grounded.

5. The device according to claim 4, characterized in that In automatic mode, the manual switch is set to automatic position, and SSPC1 and SSPC2 simultaneously receive automatic control instructions from the bus to control the connection and disconnection of the load drive channel; In manual mode, the manual switch is set to the override open position, relay 1 works, the third bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, pins 1 and 3 of relay 2 are connected, and the load is controlled by relay 1 and relay 2 to be connected; In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, the third bus power supply channel is disconnected, pin 4 and pin 5 of relay 2 are connected, the second bus power supply channel is disconnected, and pin 7 and pin 8 of relay 2 are connected to disconnect the first bus power supply channel.

6. A control method to support external audit of solid-state power of electromechanical systems, characterized in that: Applicable to the device described in any one of claims 1 to 5, for the single redundancy automatic level, the SSPC receives automatic control instructions from the bus and directly controls the connection and disconnection of the load.

7. The device according to claim 6, characterized in that For single redundancy automatic + manual override level, In automatic mode, the manual switch is set to automatic position, SSPC receives automatic control instructions from the bus, and controls the connection and disconnection of the load drive channel through the normally closed contact of relay 2; In manual mode, the manual switch is set to the override open position, relay 1 works, the second bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, and the load is connected through relay 1; In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, relay 2 disconnects the first bus power supply channel, pin 1 and pin 3 of relay 1 are connected, relay 1 disconnects the second bus power supply channel, and controls the load to shut down.

8. The device according to claim 6, characterized in that For dual-redundancy automatic + manual override level, In automatic mode, the manual switch is set to automatic position, and SSPC1 and SSPC2 simultaneously receive automatic control instructions from the bus to control the connection and disconnection of the load drive channel; In manual mode, the manual switch is set to the override open position, relay 1 works, the third bus passes through the circuit breaker, pins 1 and 2 of relay 1 are connected, pins 1 and 3 of relay 2 are connected, and the load is controlled by relay 1 and relay 2 to be connected; In manual mode, the manual switch is set to the override off position, relay 2 works, pin 1 and pin 2 of relay 2 are connected, the third bus power supply channel is disconnected, pin 4 and pin 5 of relay 2 are connected, the second bus power supply channel is disconnected, and pin 7 and pin 8 of relay 2 are connected to disconnect the first bus power supply channel.

Images