Power distribution logic design method
Through a new distribution logic design method, the problem of insufficient transient characteristics and safety in aviation distribution logic design is solved. Through detailed scenario analysis and safety logic design, a control logic equation that meets high efficiency and safety requirements is formed.
Patent Information
- Application Number
- CN202411694872.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-25
- Publication Date
- 2025-03-18
AI Technical Summary
The existing aviation distribution logic design methods have shortcomings in terms of transient characteristics and safety, especially inadequate attention to the transient characteristics and safety of contactor control logic, and there is a problem that the power transfer time is overly dependent on the controller's calculation time, and the logic has a single point of failure.
A distribution logic design method is proposed. By determining the power supply priority of each bus bar in the distribution network, traversing all scenarios for a single scenario analysis, forming a network configuration table, determining the initial control logic equation of the contactor based on this table, and adding safety logic through scene conversion logic analysis and safety logic analysis to form the final control logic equation.
This method can fully consider scenario conversion logic analysis, avoid relying on controller computing time, improve the transient characteristics of the distribution network, and ensure the safety of the control logic by analyzing the fault mode, avoiding single point of failure and common mode failure.
Smart Images

Figure CN119647093A_ABST
Abstract
Description
Technical Field
[0001] The invention belongs to the technical field of aviation power distribution, and in particular relates to a power distribution logic design method. Background Art
[0002] In the field of aviation power systems, with the development of multi-electric and full-electric aircraft, aircraft power systems are becoming more and more complex, and power distribution logic is becoming more and more complex. The implementation method of power distribution logic is a necessary condition to ensure the accurate and reliable operation of the power distribution system. Traditional power distribution logic design methods, such as the logic state equation method, multi-agent-based and power supply priority-based power distribution logic design methods, and some intelligent power distribution algorithms, do not adequately consider the transient logic of the power distribution system, and there is a problem that the power transfer time is overly dependent on the controller operation time. At the same time, there is insufficient attention to safety, and the logic has single point failures. Summary of the invention
[0003] Based on the above background, the present invention proposes a power distribution logic design method to solve the problems of insufficient transient characteristics and insufficient safety of contactor control logic.
[0004] In view of this, according to one aspect of an embodiment of the present invention, a power distribution logic design method is provided, comprising:
[0005] Step 1: Determine the power supply priority of each bus in the distribution network according to the design principle;
[0006] Step 2: Traverse all scenarios of the power distribution network, perform single scenario analysis, obtain the power input state, determine the output state of the contactor in the power distribution network according to the busbar power supply priority, obtain the corresponding relationship between the power input state and the output state of the contactor corresponding to each network configuration, and form a network configuration table;
[0007] Step 3: Determine the preliminary control logic equation of the contactor based on the network configuration table;
[0008] Step 4: According to the preliminary control logic equation, perform scene conversion logic analysis, determine the newly added control logic in the scene conversion process, and form the first control logic equation;
[0009] Step 5: Perform safety logic analysis based on the first control logic equation, and add safety logic of the contactor according to safety requirements to form a second control logic equation;
[0010] Step 6: According to the second control logic equation, select input variables, perform redundancy design on the input variables, and obtain the third control logic equation;
[0011] Step 7: For the third control logic equation, analyze the failure mode of each input variable, analyze the failure impact under each working mode, and determine whether the safety index is met.
[0012] Step 8: If the safety index is met, the third control logic equation is the final control logic equation; if not, it is necessary to repeat steps 1 to 7 or iterate the distribution network.
[0013] Optionally, in step 3, the preliminary logic equation of the contactor adopts a Boolean logic operation method.
[0014] Optionally, in step 3, the preliminary logic equation of the contactor adopts Quine-McCluskey algorithm or Karnaugh map method.
[0015] Optionally, in step 3, the preliminary logic equation of the contactor adopts an SR trigger.
[0016] Optionally, in step 4, the scene conversion logic analysis is performed based on the conversion between different single scenes in step 2 to identify the contactor logic requirements, and the newly added control logic includes power transfer timing and busbar power-off time.
[0017] Optionally, in step 5, the safety logic analysis includes the logic that different AC power sources should be powered independently and the logic that the emergency power source can only supply power to the emergency bus.
[0018] Optionally, in step 6, the input variables include: the voltage of a bus bar connected to the power supply, the state of auxiliary contacts of the power contactor, and the power supply current.
[0019] Optionally, in step 7, the failure mode includes: single point failure or common mode failure.
[0020] Optionally, the failure mode of each input variable is analyzed, and the method for analyzing the failure impact under each working mode is FMEA analysis method or fault tree analysis method.
[0021] Optionally, the power input state and the contactor output state are identified using binary symbols.
[0022] Compared with the traditional distribution logic design method, this method can fully consider the scene conversion logic analysis, analyze the conversion between different single scenes, identify the logic requirements such as power transfer timing and bus power-off time, and can meet the transient characteristics of the distribution network, so it does not need to rely on the operation time of the controller; SR triggers are used in the design of logic equations to avoid logic matching problems. At the same time, the selection of input variables fully considers the redundancy design, and analyzes the failure mode of each input variable, analyzes the failure impact under each working mode, ensures that there is no single point failure or common mode failure in the control logic, and improves the safety of the logic. BRIEF DESCRIPTION OF THE DRAWINGS
[0023] Figure 1 This is a power distribution network diagram for an aircraft;
[0024] Figure 2 Configuration diagram for battery power supply mode only;
[0025] Figure 3 Configuration diagram for dual ground power supply mode
[0026] Figure 4 This is the configuration diagram of the normal power supply mode in the air;
[0027] Figure 5 It is the emergency mode configuration diagram;
[0028] Figure 6 Convert activity diagram for scene
[0029] Figure 7 E1TRUIR control logic diagram. DETAILED DESCRIPTION
[0030] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0031] According to one aspect of an embodiment of the present invention, a power distribution logic design method is provided, comprising:
[0032] Step 1: Determine the power supply priority of each bus in the distribution network according to the design principle;
[0033] Step 2: Traverse all scenarios of the power distribution network, perform single scenario analysis, obtain the power input state, determine the output state of the contactor in the power distribution network according to the busbar power supply priority, obtain the corresponding relationship between the power input state and the output state of the contactor corresponding to each network configuration, and form a network configuration table;
[0034] Step 3: Determine the preliminary control logic equation of the contactor based on the network configuration table;
[0035] Step 4: According to the preliminary control logic equation, perform scene conversion logic analysis, determine the newly added control logic in the scene conversion process, and form the first control logic equation;
[0036] Step 5: Perform safety logic analysis based on the first control logic equation, and add safety logic of the contactor according to safety requirements to form a second control logic equation;
[0037] Step 6: According to the second control logic equation, select input variables, perform redundancy design on the input variables, and obtain the third control logic equation;
[0038] Step 7: For the third control logic equation, analyze the failure mode of each input variable, analyze the failure impact under each working mode, and determine whether the safety index is met.
[0039] Step 8: If the safety index is met, the third control logic equation is the final control logic equation; if not, it is necessary to repeat steps 1 to 7 or iterate the distribution network.
[0040] Furthermore, in step 3, the preliminary logic equation of the contactor adopts a Boolean logic operation method.
[0041] Furthermore, in step 3, the preliminary logic equation of the contactor adopts Quine-McCluskey algorithm or Karnaugh map method.
[0042] Furthermore, in step 3, the preliminary logic equation of the contactor adopts an SR trigger.
[0043] Furthermore, in step 4, the scene conversion logic analysis is performed based on the conversion between different single scenes in step 2 to identify the contactor logic requirements, and the newly added control logic includes power transfer timing and busbar power-off time.
[0044] Furthermore, in step 5, the safety logic analysis includes the logic that different AC power sources should supply power independently and the logic that the emergency power source can only supply power to the emergency bus.
[0045] Furthermore, in step 6, the input variables include: the voltage of the busbar connected to the power supply, the state of the auxiliary contacts of the power contactor and the power supply current.
[0046] Furthermore, in step 7, the failure mode includes: single point failure or common mode failure.
[0047] Furthermore, the failure mode of each input variable is analyzed, and the method for analyzing the failure impact under each working mode is FMEA analysis method or fault tree analysis method.
[0048] Furthermore, the power input state and the contactor output state are represented by binary symbols.
[0049] Example 1
[0050] The present invention is based on a certain aircraft power distribution system configuration, such as Figure 1As shown. V1, V2, V3, and V4 are four AC power supplies. LATU (left autotransformer) and RATU (right autotransformer) can realize the conversion between 230VAC power supply and 115VAC power supply. LTRU (left transformer rectifier), E1TRU (emergency 1 transformer rectifier), RTRU (right transformer rectifier), and E2TRU (emergency 2 transformer rectifier) can realize the conversion of 230VAC into 28VDC.
[0051] V1 is connected to the upper end of LATU through LATUC (V1 contactor);
[0052] LTRU is connected to the upper end of LATU and the lower end of LATUC through LTRUR;
[0053] E1TRU is connected to the upper end of LTRUR through E1TRUIR, the upper end of LATU, and the lower end of LATUC is connected to Bkup BUS (230V emergency bus) through E1TRUR;
[0054] Bkup BUS is connected to power supply V4 through RCB (V4 contactor) and to power supply V3 through BBIR (V3 contactor);
[0055] The upper end of E2TRU is connected to Bkup BUS;
[0056] RTRU is connected to the upper end of RATU through RTRUR, and the upper end of RATU is connected to V2 through RATUC (V2 contactor);
[0057] L115AC (left 115V bus) is connected to the lower end of LATU through LBSB (left 115 bus power supply contactor), and the lower end of LATU is connected to LEP (left ground power) through LEPC (left outer power contactor).
[0058] R115AC (right 115V bus) is connected to the lower end of RATU through RBSB (right 115 bus power supply contactor), and the lower end of RATU is connected to REP (right ground power) through REPC (right external power contactor).
[0059] L115AC is connected to R115AC through LATR (left AC connection contactor) and RATR (right AC connection contactor).
[0060] L28VDC (Left 28V DC bus) is connected to LTRU through LTRUR_L.
[0061] R28VDC (right 28V DC bus) is connected to RTRU through RTRUR_L.
[0062] L28VDC is connected to R28VDC through LDTR (left DC connection contactor) and RDTR (right DC connection contactor).
[0063] E128VDC (Emergency 1 28V DC bus) is connected to E1TRU through E1TRUR_L.
[0064] E228VDC (Emergency 2 28V DC bus) is connected to E2TRU through E2TRUR_L.
[0065] E128VDC is connected to E228VDC through E1DTR (Emergency 1 DC connection contactor) and E2DTR (Emergency 2 DC connection contactor).
[0066] HotBB (battery bus bar) is directly connected to Main Bat (battery), and HotBB is connected to E1 28VDC through BLC (battery contactor)
[0067] The steps for implementing the power distribution logic according to the method of the present invention are as follows:
[0068] Step 1: Determine the power supply priority of each bus according to the design principles. The priority of typical buses in the design principles is as follows:
[0069] Table 1-1L115 AC BUS power supply priority table
[0070] Priority source 1 LBSB LATU 2 LBSB LEPC LEP(ground) 3 LATR RATR RBSB RATU 4 LATR RATR RBSB REPC R EP(ground) 5 No electricity
[0071] Table 1-2 BKup BUS power supply priority table
[0072] Priority source 1 RCB RAT 2 BBIR BB RLY 235R2 3 C1TRUR C1TRUIR L ATUC 235L1 4 C1TRUR C1TRUIR L EPC LEP(ground) 5 No electricity
[0073] Table 1-3E1 28VDC power supply priority table
[0074] Priority source 1 C1TRUR_L E1-TRU 2 E1DTR E2DTR C2TRUR_L E2-TRU 3 BLC BAT 4 No electricity
[0075] Table 1-4L 28V BUS power supply priority table
[0076] Priority source 1 LTRUR_L L-TRU 2 RDTR LDTR RTRUR_L R-TRU 3 No electricity
[0077] Step 2: Traverse all scenarios of the power distribution network, perform single scenario analysis, obtain the power input status, determine the output status of the contactor in the distribution network according to the busbar power supply priority, obtain the corresponding relationship between the power input status and the output status of the contactor corresponding to each network configuration, and form a network configuration table. The configuration in a typical scenario is as follows. The input status of the power supply includes the available state (marked with 1) and the unavailable state (marked with 0), and the output status of the contactor includes the connected state (marked with 1) and the disconnected state (marked with 0)
[0078] Battery power supply mode Figure 2 As shown, BLC, E1DTR, and E2DTR are connected, and other contactors are disconnected;
[0079] The dual ground power supply mode configuration is as follows Figure 3 As shown, LEPC, LBSB, LTRUR, LTRUR_L, E1TRUIR, E1TRUR_L, E1TRUR, RTRUR, E2TRUR_L, RTRUR_L, RBSB, and REPC are connected, and other contactors are disconnected;
[0080] The normal air power supply mode configuration is as follows Figure 4 As shown, LATUC, LBSB, LTRUR, LTRUR_L, E1TRUIR, E1TRUR_L, BBIR, RTRUR, E2TRUR_L, RTRUR_L, RBSB, and RATUC are connected, and other contactors are disconnected;
[0081] Emergency mode configuration Figure 5 As shown, RCB, E1TRUR, E1TRUR_L, E2TRUR_L, BLC, E1DTR, and E2DTR are connected, and other contactors are disconnected;
[0082] According to the scenario analysis, a network configuration table is formed. To simplify the calculation, AC and DC are separated to form an AC network configuration table and a DC network configuration table respectively. The AC network configuration table is shown in Table 2:
[0083] Table 2 230V AC network configuration table
[0084]
[0085]
[0086] Step 3: Determine the preliminary control logic equation of the contactor based on the network configuration table;
[0087] The preliminary control logic of each contactor is obtained by Quin-Mccluskey algorithm
[0088] a) Convert to a minterm expression:
[0089] The minimum expression of the C1TRUIR on condition is:
[0090] F(A,B,C,D)=∑(1,2,3,4,5,6,7,8,17,18,19,20,21,22,23,24)(1)
[0091] b) Grouping: Group all the smallest terms according to the number of 1s in their binary representation. Each group represents terms that contain the same number of 1s in their binary representation.
[0092] c) Compare adjacent groups to find all necessary prime implicants: Start with the smallest group and compare each group with the next adjacent group. Find the items in the two groups that differ by only one bit. These different bits are called "primary differences". For each pair of items with a primary difference, keep the same parts as the new principal element, and keep the different bits as wildcards (for example, merge 01 and 11 into 1-).
[0093] d) Construct a simplified Boolean expression: Combine the found principal elements into the simplest form of a Boolean expression.
[0094] F(C1TRUIR is on) = B(2)
[0095] F(C1TRUIR is open) = B'(3)
[0096] Step 4: Scene transition logic analysis
[0097] Based on the conversion between different single scenarios in step 2, the contactor logic requirements are identified. Taking the conversion from ground power supply to air power supply as an example, the scenario conversion activity diagram is as follows: Figure 6 As shown. First, the generator controller sends a grid application, then the distribution system sets the power transfer flag to true, the distribution system connects LDTR, RDTR, E1DTR, E2DTR, BLC, the distribution system disconnects LEPC, the distribution system detects that the contactor is connected, and sends a "ready" signal, the left generation system connects LATUC, the distribution system disconnects E1TRUR, the distribution system disconnects REPC, the left generation system connects RATUC, BBIR, the distribution system disconnects LDTR, RDTR, E1DTR, E2DTR, and the distribution system sets the power transfer flag to false.
[0098] According to the scenario conversion analysis, LDTR, RDTR, E1DTR, E2DTR, and BLC need to be turned on during power conversion to avoid power failure of the DC bus during the conversion process. Therefore, a new LDTR, RDTR, E1DTR, E2DTR, and BLC connection condition F (power conversion is valid) is obtained.
[0099] Step 5: Security logic analysis
[0100] The safety logic requirements are mainly: AC power supplies are not connected in parallel; emergency power supplies cannot supply power to the general bus.
[0101] Therefore, E1TRUIR adds a prohibition connection condition: BBIR is connected (G) & E1TRUR is connected (H), or RCB is connected (I) & E1TRUR is connected (H).
[0102] Therefore, a disconnection condition is added to C1TRUIR. In emergency mode, C1TRUIR (I) is disconnected.
[0103] F(C1TRUIR is on) = B(GH+IH)′(4)
[0104] F(C1TRUIR disconnected)=B'+I(5)
[0105] Step 6: Select input variables and input variable redundancy design
[0106] There are three criteria for whether the power supply is available: bus voltage, contactor auxiliary contact status and current. The following uses the E1TRUIR contactor logic to illustrate the basis for selecting input variables.
[0107] B (V1 has power) If any of the following conditions is met, B is true.
[0108] a) Discrete quantity acquisition signal [LATUC_AUX_BPCU_L] indicates that LATUC is turned on
[0109] b) Discrete quantity acquisition signal [LEPC_AUX_BPCU_L] indicates that LEPC is turned on
[0110] c) The analog acquisition signal [fLATUL_PHA_VOLT_BPCU_L] indicates that there is power
[0111] d) The following conditions are met at the same time
[0112] 1) Discrete quantity acquisition signal [LBSB_CTRL_BPCU_L] indicates that LBSB is turned on
[0113] 2) Discrete quantity acquisition signal [RBSB_CTRL_BPCU_L] indicates that RBSB is turned on
[0114] 3) Discrete quantity acquisition signal [LDTR_CTRL_BPCU_L] indicates that LDTR is turned on
[0115] 4) Discrete quantity acquisition signal [RDTR_CTRL_BPCU_L] indicates that RDTR is turned on
[0116] 5) Discrete quantity acquisition signal [REPC_CTRL_BPCU_L] indicates that REPC is turned on
[0117] In order to ensure the contactor logic is closed, an SR trigger is used, and finally the E1TRUIR control logic diagram is formed as follows: Figure 7shown.
[0118] Step 7: Failure Mode and Effect Analysis
[0119] Analyze the failure mode of each variable and the impact of failures in each working mode to determine whether the safety indicators are met.
[0120] The logical single-point failure analysis of E1TRUIR normal operating mode is shown in Table 3.
[0121] After analysis, there are two failure modes that will affect the system function performance in the normal working mode. Among them, the failure of the E1TRUR auxiliary contact in the connected state will cause the E1TRUIR to be unable to connect, but this failure only occurs when the E1TRUIR is connected for the first time on the ground, and has no safety impact. The entry conditions of the emergency mode are all multiple conditions, so there is no single point failure.
[0122] Step 8: After analyzing the control logic failure mode and impact, the logic does not have a single point failure that affects flight safety. Therefore, the control logic is finally determined as follows: Figure 7 shown.
[0123] Table 3C1TRUIR logic single point failure analysis table
[0124]
[0125]
[0126] The above is only a specific embodiment of the present invention, and the present invention is described in detail. The unexplained part is a conventional technology. However, the protection scope of the present invention is not limited to this. Any changes or substitutions that can be easily thought of by any technician familiar with the technical field within the technical scope disclosed by the present invention should be included in the protection scope of the present invention. The protection scope of the present invention shall be based on the protection scope of the claims.
Claims
1. A power distribution logic design method, characterized in that: include: Step 1: Determine the power supply priority of each bus in the distribution network according to the design principles; Step 2: Traverse all scenarios of the power distribution network, perform single scenario analysis, obtain the power input state, determine the output state of the contactor in the power distribution network according to the busbar power supply priority, obtain the corresponding relationship between the power input state and the output state of the contactor corresponding to each network configuration, and form a network configuration table; Step 3: Determine the preliminary control logic equation of the contactor based on the network configuration table; Step 4: According to the preliminary control logic equation, perform scene conversion logic analysis, determine the newly added control logic in the scene conversion process, and form the first control logic equation; Step 5: Perform safety logic analysis based on the first control logic equation, and add safety logic of the contactor according to safety requirements to form a second control logic equation; Step 6: According to the second control logic equation, select input variables, perform redundancy design on the input variables, and obtain the third control logic equation; Step 7: For the third control logic equation, analyze the failure mode of each input variable, analyze the failure impact under each working mode, and determine whether the safety index is met. Step 8: If the safety index is met, the third control logic equation is the final control logic equation; If not satisfied, it is necessary to repeat steps 1 to 7 or iterate the distribution network.
2. The power distribution logic design method according to claim 1, characterized in that: In step 3, the preliminary logic equation of the contactor adopts Boolean logic operation method.
3. The power distribution logic design method according to claim 2, characterized in that: In step 3, the preliminary logic equation of the contactor adopts the Quine-McCluskey algorithm or the Karnaugh map method.
4. The power distribution logic design method according to claim 1, characterized in that: In step 3, the contactor preliminary logic equation uses an SR trigger.
5. The power distribution logic design method according to claim 1, characterized in that: In step 4, the scene conversion logic analysis is performed based on the conversion between different single scenes in step 2 to identify the contactor logic requirements, and the newly added control logic includes the power transfer timing and the busbar power-off time.
6. The power distribution logic design method according to claim 1, characterized in that: In the step 5, the safety logic analysis includes the logic that different AC power sources should supply power independently and the logic that the emergency power source can only supply power to the emergency bus.
7. The power distribution logic design method according to claim 1, characterized in that: In step 6, the input variables include: the voltage of the busbar connected to the power supply, the state of the auxiliary contacts of the power contactor and the power supply current.
8. The power distribution logic design method according to claim 1, characterized in that: In step 7, the failure mode includes: single point failure or common mode failure.
9. The power distribution logic design method according to claim 1, characterized in that: The method of analyzing the failure mode of each input variable and the failure impact under each working mode is FMEA analysis or fault tree analysis.
10. The power distribution logic design method according to claim 1, characterized in that: The power input status and contactor output status are indicated in binary.