Single event effect detection protection method and device for aero-engine over-rotation protection system

Abstract

The invention relates to the technical field of aero-engine control, in particular to an aero-engine over-rotation protection system single event effect detection protection method and device. The method comprises the steps that an over-rotation protection processing unit conducts multi-path independent high-limit-value judgment detection on the engine rotating speed, whether the engine rotating speed is larger than an over-rotation preset limiting value or not is judged, and the logic judgment value of each path of engine rotating speed is obtained; performing voting processing on the logic judgment values of the multi-path engine rotating speed; if the logic judgment value of the preset number of paths is an effective value, an over-running protection parking instruction is output; if the logic judgment values of all the engine rotating speeds are the same, it is judged that the over-rotation protection processing unit does not generate the single event effect, and otherwise, it is judged that the over-rotation protection processing unit generates the single event effect. The single event effect fault of the engine over-rotation protection system can be timely and accurately detected, the air parking rate is reduced, hardware does not need to be newly added, and high practicability and economical efficiency are achieved.

Description

Technical Field

[0001] The present invention relates to the technical field of aircraft engine control, and more specifically to a single particle effect detection and protection method and device for an aircraft engine overspeed protection system. Background Art

[0002] Single event effect refers to a single particle, such as solar high-energy particles, high-energy neutrons and protons, which is incident on a microelectronic device and interacts with silicon to produce reactants with extra energy, which is released into the surrounding atoms, causing the logic function of the microelectronic device to flip or the device to be damaged.

[0003] Single particle effects in the atmospheric neutron environment have a very important impact on the safety of civil aviation engine control systems. Due to the continuous reduction in the size of integrated circuit components in aircraft engine overspeed protection systems, the increase in aircraft flight altitude to improve efficiency, and the increase in ordinary flights in polar regions, the impact of atmospheric neutrons on aircraft engine overspeed protection systems has continued to increase over time, posing a serious threat to aircraft safety. According to research, neutrons are the main cause of single particle effects in memory and other devices on aircraft. Atmospheric neutrons can change the state of digital storage circuits or other digital circuits in the engine electronic control system. If no detection or verified protection measures are taken, it may cause engine overspeed protection failure, resulting in an unexpected shutdown accident.

[0004] Aircraft engine overspeed protection systems usually use complex devices such as field programmable gate arrays (FPGAs) and memories. These devices are very sensitive to atmospheric neutrons and are prone to single-event effects, which are inevitable. It is crucial to take effective single-event effect fault detection measures for the engine overspeed protection system. Therefore, effective single-event effect fault detection and fault tolerance measures must be taken for aircraft engine overspeed protection systems.

[0005] Single event effects can cause non-destructive and destructive faults, such as single event upset, multi-bit upset, multi-cell upset, single event lock, single event pulse, single event functional interruption, single event gate penetration, and single event burnout. Non-destructive faults can usually be repaired by resetting operations, while destructive faults require replacement of the corresponding device to repair.

[0006] Since the engine overspeed protection system contains a variety of sensitive electronic devices and may be affected by a variety of single-particle effects, it is very difficult to detect single-particle effect faults. At present, the mainstream engine overspeed protection system adopts redundancy and fault detection design, but these measures cannot completely eliminate the impact of single-particle effects. Therefore, in recent years, some parking incidents caused by single-particle effects have occurred on the route.

[0007] By combining efficient fault repair and isolation measures, the resistance of components to single-particle effects can be enhanced. The protection design of single-particle effects can filter and mitigate single-particle effect faults, thereby reducing the probability of component functional failure. However, the implementation of single-particle effect fault detection will cause the related detection logic and circuits to grow exponentially, resulting in a significant increase in the cost and weight of control system development.

[0008] Therefore, low-cost and easy-to-implement single event effect fault detection technology becomes increasingly important. Summary of the invention

[0009] The purpose of the present invention is to provide a method and device for detecting and protecting single particle effects of an aircraft engine overspeed protection system, so as to solve the problem that the prior art is difficult to perform simple, accurate and timely detection and protection of single particle effects of an aircraft engine overspeed protection system.

[0010] In order to achieve the above object, the present invention provides a single event effect detection and protection method for an aircraft engine overspeed protection system, comprising the following steps:

[0011] The overspeed protection processing unit performs multiple independent high-limit judgment detections on the engine speed to determine whether the engine speed is greater than the preset overspeed limit value, and obtains the logical judgment value of each engine speed;

[0012] Voting the logical judgment values ​​of multiple engine speeds;

[0013] If the logic judgment value of the preset route is a valid value, an over-rotation protection stop command is output;

[0014] If the logical judgment values ​​of the engine speeds of all roads are the same, it is determined that no single particle effect occurs in the overspeed protection processing unit; otherwise, it is determined that a single particle effect occurs in the overspeed protection processing unit, and a single particle effect fault signal is sent to the engine electronic controller.

[0015] In one embodiment, the method further comprises the following steps:

[0016] The over-rotation protection processing unit stores the preset over-rotation limit value of each channel in partitions according to physical addresses at certain intervals.

[0017] In one embodiment, the method further comprises the following steps:

[0018] Conduct three-way independent high limit judgment and detection on the engine speed;

[0019] The three-way generator speed judgment values ​​are processed by two-out-of-three voting. If two or three of the logic judgment values ​​are valid, an over-speed protection stop command is output.

[0020] In one embodiment, the method further comprises the following steps: performing a power-on self-test on the over-speed protection processing unit, and if the self-test fails, sending a single event effect fault signal to the engine electronic controller.

[0021] In one embodiment, the method further includes the following steps: the engine electronic controller sends a reset signal to the over-speed protection processing unit according to the received single event effect fault signal, and performs a reset operation on the over-speed protection processing unit.

[0022] In one embodiment, the method further comprises the following steps:

[0023] After receiving the single particle effect fault signal, the engine electronic controller calculates the health status of the channel. The aircraft engine overspeed protection system switches to the channel with the best health status to work according to the health status of each channel.

[0024] In one embodiment, the engine speed includes a first engine speed and a second engine speed:

[0025] The first engine speed and the second engine speed are respectively subjected to multiple independent high limit judgment detections;

[0026] If the first engine speed outputs a first over-speed protection stop command after the judgment, the high-side switch action is triggered;

[0027] If the second engine speed outputs the second over-speed protection stop command after the judgment, the low-side switch action is triggered;

[0028] When both the high-side switch and the low-side switch are triggered, the aircraft engine is controlled to stop.

[0029] In one embodiment, the aircraft engine overspeed protection system includes two channels with mutual redundant backup, and each channel is configured with an independent overspeed protection processing unit and an electronic controller.

[0030] In order to achieve the above-mentioned object, the present invention provides a detection and protection device for single-particle effects of an aircraft engine overspeed protection system, comprising a plurality of overspeed protection processing units and an engine electronic controller:

[0031] The over-speed protection processing unit performs multiple independent high-limit value judgment detections on the engine speed to judge whether the engine speed is greater than the preset over-speed limit value, obtains the logic judgment value of each engine speed, and performs voting processing on the logic judgment values ​​of the multiple engine speeds; if the logic judgment value of the preset number of paths is a valid value, an over-speed protection stop instruction is output; if the logic judgment values ​​of the engine speeds of all paths are the same, it is determined that the over-speed protection processing unit has no single particle effect, otherwise it is determined that the over-speed protection processing unit has a single particle effect, and a single particle effect fault signal is sent to the engine electronic controller;

[0032] The engine electronic controller sends a reset signal to the over-speed protection processing unit according to the received single event effect fault signal, and performs a reset operation on the over-speed protection processing unit.

[0033] In one embodiment, the over-speed protection processing unit stores the preset over-speed limit value of each channel in partitions according to physical addresses at certain intervals.

[0034] In one embodiment, the over-speed protection processing unit performs three independent high-limit value judgment detections on the engine speed;

[0035] The three-way generator speed judgment values ​​are processed by two-out-of-three voting. If two or three of the logic judgment values ​​are valid, an over-speed protection stop command is output.

[0036] In one embodiment, the over-speed protection processing unit performs a power-on self-check, and if the self-check fails, sends a single event effect fault signal to the engine electronic controller.

[0037] In one embodiment, the engine electronic controller, after receiving the received single event effect fault signal, calculates the health status of the channel;

[0038] The aircraft engine overspeed protection system switches to the channel with the best health status to operate according to the health status of each channel.

[0039] In one embodiment, the engine speed includes a first engine speed and a second engine speed:

[0040] The first engine speed and the second engine speed are respectively subjected to multiple independent high limit judgment detections;

[0041] If the first engine speed outputs a first over-speed protection stop command after the judgment, the high-side switch action is triggered;

[0042] If the second engine speed outputs the second over-speed protection stop command after the judgment, the low-side switch action is triggered;

[0043] When both the high-side switch and the low-side switch are triggered, the aircraft engine is controlled to stop.

[0044] In one embodiment, the aircraft engine overspeed protection system includes two channels with mutual redundant backup, and each channel is configured with an independent overspeed protection processing unit and an electronic controller.

[0045] The present invention provides a method and device for detecting and protecting single particle effects of an aircraft engine overspeed protection system. Through a triple-module redundant design, it is ensured that the single particle effect will not affect the overspeed judgment of two paths at the same time, so that an engine overspeed parking command can be issued reliably and accurately, and faults can be accurately detected, and erroneous parking commands can be avoided, thereby reducing the in-flight parking rate. The system can be reset when a fault occurs, meeting the requirements of CCAR33.28(f), without the need to add hardware equipment, and the function can be realized by using existing equipment and specific algorithms, and the system has high practicality and economy. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] The above and other features, properties and advantages of the present invention will become more apparent through the following description in conjunction with the accompanying drawings and embodiments, in which the same reference numerals always represent the same features, wherein:

[0047] Figure 1 A schematic diagram of a single event effect detection and protection device for an aircraft engine overspeed protection system according to an embodiment of the present invention is disclosed;

[0048] Figure 2 A flow chart of a single-particle effect detection and protection method for an aircraft engine overspeed protection system according to an embodiment of the present invention is disclosed.

[0049] The meanings of the reference numerals in the figures are as follows:

[0050] 100 over-speed protection processing unit;

[0051] 111 first high limit;

[0052] 112 second highest limit;

[0053] 113 the third highest limit;

[0054] 121 1st Division;

[0055] 122 Second Division;

[0056] 123 Third Division;

[0057] 131 The first over-speed protection stop command;

[0058] 132 The second over-speed protection stop command;

[0059] 140 single event effect fault signal;

[0060] 200 engine electronic controller;

[0061] 201 reset signal;

[0062] 202 over-speed preset limit value;

[0063] 300 parking solenoid valve;

[0064] 301 high side switch;

[0065] 302 low side switch. DETAILED DESCRIPTION

[0066] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the invention and are not used to limit the invention.

[0067] In the complex atmospheric neutron environment, single particle effect failures in the processing unit (such as FPGA, etc.) of the aircraft engine overspeed protection system are inevitable. This single particle effect may cause changes in the preset overspeed limit value, which in turn causes a series of failures. If the limit value is reduced, the overspeed stop command may be mistakenly issued; if the limit value is increased, the stop command may not be issued normally, seriously affecting the normal implementation of the overspeed protection detection function during parking.

[0068] In order to solve the problem of the change of the preset limit value of overspeed, the mis-issuance or refusal of overspeed parking command caused by the single particle effect in the overspeed protection processing unit, effective measures must be taken to detect and protect the single particle effect of the engine overspeed protection system. The present invention proposes a detection and protection method and device for the single particle effect of the overspeed protection system of an aircraft engine, which can realize all-round detection and effectively mitigate the single particle effect at the system level of the overspeed protection system, and provide safer and more reliable engine overspeed protection.

[0069] The present invention proposes a single-particle effect detection and protection device for an aircraft engine overspeed protection system, comprising a plurality of overspeed protection processing units and an engine electronic controller:

[0070] The over-speed protection processing unit is used to perform single event effect detection, and if a single event effect occurs, send a single event effect fault signal to the engine electronic controller;

[0071] The engine electronic controller sends a reset signal to the over-speed protection processing unit according to the received single event effect fault signal, and performs a reset operation on the over-speed protection processing unit.

[0072] More specifically, the over-speed protection processing unit performs multiple independent high-limit judgment detections on the engine speed to determine whether the engine speed is greater than the over-speed preset limit value, and obtains the logical judgment value of each engine speed;

[0073] The logic judgment values ​​of multiple engine speeds are voted, and if the judgment values ​​of the preset number of paths are all valid values, an over-speed protection stop instruction is output;

[0074] If the logical judgment values ​​of the engine speeds of all roads are the same, it is determined that no single particle effect occurs in the overspeed protection processing unit; otherwise, it is determined that a single particle effect occurs in the overspeed protection processing unit, and a single particle effect fault signal is sent to the engine electronic controller.

[0075] Furthermore, the over-speed protection processing unit stores the preset over-speed limit value of each channel in partitions according to physical addresses at certain intervals.

[0076] The aircraft engine overspeed protection system in this embodiment includes a mutually redundant A channel and a B channel, each of which is equipped with an independent overspeed protection processing unit and an engine electronic controller. The overspeed protection processing unit is an FPGA device, which is easily affected by single-particle effects.

[0077] Figure 1 The schematic diagram of the single-particle effect detection and protection device of the aircraft engine overspeed protection system according to an embodiment of the present invention is disclosed. Taking channel A as an example, Figure 1 The detection protection device shown includes an over-speed protection processing unit 100 and an engine electronic controller 200 .

[0078] In this embodiment, the value of the signal is set to 1 if it is valid, and set to 0 if it is invalid.

[0079] The over-speed protection processing unit 100 inputs two independent engine speed signals, including a first engine speed signal N2a and a second engine speed signal N2b.

[0080] The trigger logic of the high-side switch 301 and the low-side switch 302 at both ends of the parking solenoid valve 300 of the engine overspeed protection system A channel adopts three-way independent judgment logic, and performs three-choice-two voting on the judgment results, and then outputs the processing results as instructions to ensure that the single particle flip does not affect the final output instruction.

[0081] More specifically, the first engine speed signal N2a is input into the overspeed protection processing unit 100, enters the high-side switch trigger logic, and performs three independent high limit judgment detections:

[0082] In the first path, it is determined whether the first engine speed signal N2a is greater than the first upper limit 111, the first upper limit 111 is also called the first overspeed preset limit value, and a logical judgment value of the first path engine speed is obtained.

[0083] In the second path, it is determined whether the first engine speed signal N2a is greater than the second upper limit 112, the second upper limit 112 is also called the second overspeed preset limit value, and a logical judgment value of the second path engine speed is obtained.

[0084] In the third path, it is determined whether the first engine speed signal N2a is greater than a third upper limit 113, which is also called a third overspeed preset limit value, to obtain a logic judgment value of the third path engine speed.

[0085] If the first engine speed N2a of a certain route is higher than the corresponding overspeed preset limit value, the logic judgment value of the corresponding route is set to a valid value, such as 1, and output.

[0086] The over-speed protection processing unit 100 performs a two-out-of-three voting process on the logic judgment values ​​of the three output engine speeds, and then outputs the processing result as an instruction to ensure that the final output instruction is not affected when a single particle upset or other effects occur in one of the paths.

[0087] The three-choice-two voting means that when only two or three logical judgment values ​​are valid values ​​1, the first over-speed protection stop instruction 131 of the first engine speed signal N2a is output, and the first over-speed protection stop instruction 131 is set to 1, triggering the high-side switch 301 to act.

[0088] The second engine speed signal N2b is input into the over-speed protection processing unit 100, enters the low-side switch trigger logic, performs three-way independent high limit judgment detection, performs three-choice two voting processing, and then outputs the processing result as an instruction, outputs the second over-speed protection stop instruction 132, and the second over-speed protection stop instruction 132 is set to 1, triggering the low-side switch 302 to act.

[0089] The specific judgment logic of the second engine speed signal N2b is the same as the judgment logic of the first engine speed signal N2a. Figure 1 The ellipse in the figure is omitted and will not be described here.

[0090] When both the high-side switch 301 and the low-side switch 302 are triggered, the parking solenoid valve 300 works to control the aircraft engine to stop.

[0091] In this embodiment, the overspeed protection processing unit 100 obtains the adjustable parameter - the overspeed preset limit value 202 from the engine electronic controller (EEC) 200, and performs partition storage, selecting the first partition 121, the second partition 122 and the third partition 123 according to the physical addresses at a certain interval.

[0092] The super-rotation preset limit value is stored in the first partition 121 as the first super-rotation preset limit value, the super-rotation preset limit value is stored in the second partition 122 as the second super-rotation preset limit value, and the super-rotation preset limit value is stored in the third partition 123 as the third super-rotation preset limit value. By allocating a reasonable physical address, it is ensured that the super-rotation preset limit value 202 will not cause two or more super-rotation preset limit values ​​to change due to a single particle effect.

[0093] In this embodiment, the over-speed protection processing unit 100 determines whether a single event effect occurs in the FPGA through the three-choice-two voting processing result and the FPGA self-detection information. If it is determined that a single event effect occurs in the FPGA, a single event effect fault signal 140 is sent to the engine electronic controller 200;

[0094] The engine electronic controller 200 sends a reset signal 201 to the over-speed protection processing unit 100 according to the received single-particle effect fault signal 140, and performs an FPGA reset operation on the over-speed protection processing unit 100, so that the error state caused by the single-particle effect such as the single-particle upset can be automatically restored to the initial state.

[0095] More specifically, judging whether a single event effect occurs in the FPGA through the three-choice-two voting processing result includes the following steps:

[0096] If the logic judgment values ​​of the three paths in the three-choice-two voting processing result are the same, for example, all are 1, it is considered that the over-rotation protection processing unit 100 has not had a single particle effect, and the single particle effect fault signal 140 is set to 0; otherwise, it is considered that the over-rotation protection processing unit 100 has had a single particle effect, and the single particle effect fault signal 140 is set to 1.

[0097] More specifically, judging whether a single event effect occurs in the FPGA through the FPGA self-detection information includes the following steps:

[0098] The over-speed protection processing unit 100 is subjected to FPGA power-on self-check. If the self-check fails, it is considered that a single event effect has occurred in the over-speed protection processing unit 100, and a single event effect fault signal 140 is sent to the engine electronic controller 200.

[0099] Since the aircraft engine overspeed protection system in this embodiment has mutually redundant backup channels, when the engine electronic controller 200 receives the single particle effect fault signal 140, it calculates the health status of the channel. The aircraft engine overspeed protection system switches to the channel with the best health status to operate according to the health status of each channel, thereby minimizing the impact of the single particle effect on the engine and ensuring the reliable operation of the engine to the greatest extent.

[0100] Based on the detection and protection device of the single particle effect of the aircraft engine overspeed protection system, the present invention also proposes a detection and protection method of the single particle effect of the aircraft engine overspeed protection system.

[0101] The present invention provides a method for detecting and protecting a single event effect of an aircraft engine overspeed protection system, comprising the following steps:

[0102] The overspeed protection processing unit performs multiple independent high-limit judgment detections on the engine speed to judge whether the engine speed is greater than the preset overspeed limit value, and obtains the judgment value of each engine speed;

[0103] Voting the logical judgment values ​​of multiple engine speeds;

[0104] If the logic judgment value of the preset route is a valid value, an over-rotation protection stop command is output;

[0105] If the logical judgment values ​​of the engine speeds of all roads are the same, it is determined that no single particle effect occurs in the overspeed protection processing unit; otherwise, it is determined that a single particle effect occurs in the overspeed protection processing unit, and a single particle effect fault signal is sent to the engine electronic controller.

[0106] Furthermore, the over-speed protection processing unit stores the preset over-speed limit value of each channel in partitions according to physical addresses at certain intervals.

[0107] Furthermore, the over-speed protection processing unit performs three independent high-limit judgment detections on the engine speed;

[0108] The three-way transmitter speed logic judgment values ​​are voted on to select two from three. If two or three of the logic judgment values ​​are valid, an over-speed protection stop command is output.

[0109] The core content and concept of the present invention is to adopt a triple-module redundant design to ensure that a single particle effect will not affect the overspeed judgment of two paths at the same time, so as to reliably and accurately issue an engine overspeed stop instruction.

[0110] Furthermore, if the judgment values ​​of the multiple engine speeds are all the same, it is determined that no single particle upset event occurs in the overspeed protection processing unit; otherwise, it is determined that a single particle upset event occurs in the overspeed protection processing unit, and a single particle effect fault signal is sent to the electronic controller.

[0111] Furthermore, a power-on self-check is performed on the over-rotation protection processing unit, and if a self-check error occurs, a reset signal is sent to the electronic controller.

[0112] Furthermore, the engine electronic controller sends a reset signal to the over-speed protection processing unit according to the received single event effect fault signal, and performs a reset operation on the over-speed protection processing unit.

[0113] Furthermore, after receiving the single particle effect fault signal, the engine electronic controller EEC calculates the health status of the channel. The aircraft engine overspeed protection system switches to the channel with the best health status according to the health status of each channel to minimize the impact of the single particle effect on the engine.

[0114] The specific implementation details of the detection and protection method of the single particle effect of the aircraft engine overspeed protection system correspond to the aforementioned detection and protection device of the single particle effect of the aircraft engine overspeed protection system, so the specific details will not be repeated here.

[0115] This method mainly involves the relevant steps and implementation methods of single-particle effect fault detection and protection of the engine overspeed protection unit FPGA. In practical applications, parameter restrictions and algorithm optimization can be flexibly adjusted according to actual work requirements.

[0116] The following is Figure 1 Taking the A channel of the aircraft engine overspeed protection system as an example, the detection and protection method of the single event effect of the engine overspeed protection system proposed by the present invention is described. The method mainly includes the following steps, some of which can be omitted or transformed into other contents, but the key steps remain unchanged.

[0117] The present invention provides a method for detecting and protecting single-event effects of an aircraft engine overspeed protection system, comprising the following steps:

[0118] Step S1, the over-speed protection processing unit 100 ( Figure 2 The adjustable parameter - the overspeed preset limit value 202 read from the engine electronic controller 200 by the overspeed FPGA is partitioned and stored by setting a certain interval of physical addresses to ensure that a single single event effect will not affect the two stored overspeed preset limit values;

[0119] Step S2, performing independent high limit judgment detection on the first engine speed N2a in three ways, wherein the high limit judgment detection in the three ways are respectively the overspeed preset limit values ​​in different partitions stored in step S1;

[0120] If the first engine speed N2a of a certain route is higher than the preset overspeed limit value, the logic judgment value output of the route is set to 1;

[0121] Step S3, performing a two-out-of-three voting process on the high-limit logic judgment values ​​outputted in three ways by the first engine speed N2a;

[0122] If the high limit logic judgment values ​​of two or three channels are set to 1, the over-rotation protection stop command finally output is set to 1, otherwise it is set to 0;

[0123] Step S4, judging whether a single event effect occurs in the over-speed protection processing unit 100, if the logic judgment values ​​of the three paths are the same, for example, all are 1, it is judged that no single event effect occurs, otherwise it is judged that a single event effect occurs in the FPGA, and a single event effect fault signal is sent to the engine electronic controller 200;

[0124] Step S5: the engine electronic controller 200 performs a reset operation on the FPGA where the single event effect occurs;

[0125] The triggering conditions for FPGA reset include single-particle effects in FPGA and FPGA self-detection errors.

[0126] Step S6, the engine electronic controller 200 calculates the health status of the current channel according to the received FPGA single particle effect fault signal 140, takes actions such as switching channels, switches to the channel with the best health status to work, and minimizes the impact of the single particle effect on the engine.

[0127] The present invention provides a method and device for detecting and protecting single-particle effects of an aircraft engine overspeed protection system, which specifically has the following beneficial effects:

[0128] 1) It can timely and accurately detect the single-particle effect failure of the engine overspeed protection system, effectively avoiding the erroneous issuance of overspeed shutdown commands, preventing the engine from stopping due to erroneous issuance of overspeed commands, thereby reducing the engine in-flight shutdown rate;

[0129] 2) After a single-event effect failure occurs, the engine overspeed protection system can be reset to prevent the failure of the overspeed protection check function during normal parking, fully meeting the requirements of CCAR33.28(f);

[0130] 3) There is no need to add hardware equipment to the over-rotation protection system. The detection and protection functions of single particle effects can be realized by using existing equipment and adding specific algorithms and logics, which is highly practical and economical.

[0131] Although the above methods are illustrated and described as a series of actions for simplicity of explanation, it should be understood and appreciated that these methods are not limited by the order of the actions, because according to one or more embodiments, some actions may occur in a different order and / or concurrently with other actions from those illustrated and described herein or not illustrated and described herein but understandable to those skilled in the art.

[0132] As shown in this application and claims, unless the context clearly indicates an exception, the words "a", "an", "an" and / or "the" do not refer to the singular and may also include the plural. Generally speaking, the terms "include" and "comprise" only indicate the inclusion of the steps and elements that have been clearly identified, and these steps and elements do not constitute an exclusive list. The method or device may also include other steps or elements.

[0133] Those skilled in the art will appreciate that information, signals, and data may be represented using any of a variety of different technologies and techniques. For example, data, instructions, commands, information, signals, bits, symbols, and chips cited throughout the above description may be represented by voltage, current, electromagnetic waves, magnetic fields or magnetic particles, optical fields or optical particles, or any combination thereof.

[0134] Those skilled in the art will further appreciate that the various illustrative logic blocks, modules, circuits, and algorithm steps described in conjunction with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or a combination of the two. To clearly illustrate this interchangeability of hardware and software, various illustrative components, blocks, modules, circuits, and steps are generally described above in terms of their functionality. Whether such functionality is implemented as hardware or software depends on the specific application and the design constraints imposed on the overall system. The technician may implement the described functionality in different ways for each specific application, but such implementation decisions should not be interpreted as resulting in a departure from the scope of the present invention.

[0135] The various illustrative logic modules and circuits described in conjunction with the embodiments disclosed herein may be implemented or executed with a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein. A general purpose processor may be a microprocessor, but in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine. The processor may also be implemented as a combination of computing devices, such as a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors in cooperation with a DSP core, or any other such configuration.

[0136] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. The software module may reside in a RAM memory, a flash memory, a ROM memory, an EPROM memory, an EEPROM memory, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to a processor so that the processor can read and write information from / to the storage medium. In an alternative, a storage medium may be integrated into a processor. The processor and the storage medium may reside in an ASIC. The ASIC may reside in a user terminal. In an alternative, the processor and the storage medium may reside in a user terminal as discrete components.

[0137] In one or more exemplary embodiments, the functions described may be implemented in hardware, software, firmware, or any combination thereof. If implemented as a computer program product in software, each function may be stored on or transmitted by a computer-readable medium as one or more instructions or codes. Computer-readable media include both computer storage media and communication media, including any medium that facilitates the transfer of a computer program from one place to another. Storage media may be any available medium that can be accessed by a computer. As an example and not limitation, such a computer-readable medium may include RAM, ROM, EEPROM, CD-ROM or other optical disk storage, disk storage or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of an instruction or data structure and can be accessed by a computer. Any connection is also properly referred to as a computer-readable medium. For example, if the software is transmitted from a website, a server, or other remote source using a coaxial cable, a fiber optic cable, a twisted pair, a digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwaves, the coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, radio, and microwaves are included in the definition of the medium. Disk and disc as used herein include compact disc (CD), laser disc, optical disc, digital versatile disc (DVD), floppy disk and Blu-ray disc, wherein disk often reproduces data magnetically, while disc reproduces data optically with lasers. Combinations of the above should also be included within the scope of computer-readable media.

[0138] The above embodiments are provided for persons familiar with the art to implement or use the present invention. Personnel familiar with the art can make various modifications or changes to the above embodiments without departing from the inventive concept of the present invention. Therefore, the protection scope of the present invention is not limited to the above embodiments, but should be the maximum scope of the innovative features mentioned in the claims.

Claims

1. A single event effect detection and protection method for an aircraft engine overspeed protection system, characterized in that: The following steps are involved: The overspeed protection processing unit performs multiple independent high-limit judgment detections on the engine speed to determine whether the engine speed is greater than the preset overspeed limit value, and obtains the logical judgment value of each engine speed; Voting the logical judgment values ​​of multiple engine speeds; If the logic judgment value of the preset route is a valid value, an over-rotation protection stop command is output; If the logical judgment values ​​of the engine speeds of all roads are the same, it is determined that no single particle effect occurs in the overspeed protection processing unit; otherwise, it is determined that a single particle effect occurs in the overspeed protection processing unit, and a single particle effect fault signal is sent to the engine electronic controller.

2. The single event effect detection and protection method for an aircraft engine overspeed protection system according to claim 1, characterized in that: The following steps are also included: The over-rotation protection processing unit stores the preset over-rotation limit value of each channel in partitions according to physical addresses at certain intervals.

3. The single event effect detection and protection method for an aircraft engine overspeed protection system according to claim 1, characterized in that: Further comprising the steps of: Conduct three-way independent high limit judgment and detection on the engine speed; The three-way transmitter speed logic judgment values ​​are voted on to select two from three. If two or three of the logic judgment values ​​are valid, an over-speed protection stop command is output.

4. The single event effect detection and protection method for an aircraft engine overspeed protection system according to claim 1, characterized in that: The following steps are also included: The over-speed protection processing unit is powered on for self-test. If the self-test fails, a single event effect fault signal is sent to the engine electronic controller.

5. The single event effect detection and protection method for an aircraft engine overspeed protection system according to claim 1, characterized in that: The following steps are also included: The engine electronic controller sends a reset signal to the over-speed protection processing unit according to the received single event effect fault signal, and performs a reset operation on the over-speed protection processing unit.

6. The single event effect detection and protection method for an aircraft engine overspeed protection system according to claim 1, characterized in that: Further comprising the steps of: After receiving the single particle effect fault signal, the engine electronic controller calculates the health status of the channel. The aircraft engine overspeed protection system switches to the channel with the best health status to work according to the health status of each channel.

7. The single event effect detection and protection method for an aircraft engine overspeed protection system according to claim 1, characterized in that: The engine speed includes a first engine speed and a second engine speed: The first engine speed and the second engine speed are respectively subjected to multiple independent high limit judgment detections; If the first engine speed outputs a first over-speed protection stop command after the judgment, the high-side switch action is triggered; If the second engine speed outputs the second over-speed protection stop command after the judgment, the low-side switch action is triggered; When both the high-side switch and the low-side switch are triggered, the aircraft engine is controlled to stop.

8. The single event effect detection and protection method for an aircraft engine overspeed protection system according to claim 1, characterized in that: The aircraft engine overspeed protection system comprises two channels with mutual redundancy backup, and each channel is equipped with an independent overspeed protection processing unit and an electronic controller.

9. A single event effect detection and protection device for an aircraft engine overspeed protection system, characterized in that: Includes several overspeed protection processing units and engine electronic controller: The overspeed protection processing unit performs multiple independent high limit judgment detections on the engine speed to judge whether the engine speed is greater than the preset overspeed limit value, obtains the logical judgment value of each engine speed, and performs voting processing on the logical judgment values ​​of the multiple engine speeds; If the logic judgment value of the preset number of paths is a valid value, an over-speed protection stop command is output; if the logic judgment values ​​of the engine speeds of all paths are the same, it is determined that the over-speed protection processing unit has no single particle effect, otherwise it is determined that the over-speed protection processing unit has a single particle effect, and a single particle effect fault signal is sent to the engine electronic controller; The engine electronic controller sends a reset signal to the over-speed protection processing unit according to the received single event effect fault signal, and performs a reset operation on the over-speed protection processing unit.

10. The single event effect detection and protection device of the aircraft engine overspeed protection system according to claim 9, characterized in that: The over-speed protection processing unit stores the preset over-speed limit value of each channel in partitions according to physical addresses at certain intervals.

11. The single event effect detection and protection device of the aircraft engine overspeed protection system according to claim 9, characterized in that: The over-speed protection processing unit performs three independent high-limit value judgments and detections on the engine speed; The three-way transmitter speed logic judgment values ​​are voted on to select two from three. If two or three of the logic judgment values ​​are valid, an over-speed protection stop command is output.

12. The single event effect detection and protection device of the aircraft engine overspeed protection system according to claim 9, characterized in that: The over-speed protection processing unit performs a power-on self-check, and if a self-check error occurs, a single event effect fault signal is sent to the engine electronic controller.

13. The single event effect detection and protection device of the aircraft engine overspeed protection system according to claim 9, characterized in that: The engine electronic controller calculates the health status of the channel after receiving the single event effect fault signal; The aircraft engine overspeed protection system switches to the channel with the best health status to operate according to the health status of each channel.

14. The single event effect detection and protection device for an aircraft engine overspeed protection system according to claim 9, characterized in that: The engine speed includes a first engine speed and a second engine speed: The first engine speed and the second engine speed are respectively subjected to multiple independent high limit judgment detections; If the first engine speed outputs a first over-speed protection stop command after the judgment, the high-side switch action is triggered; If the second engine speed outputs the second over-speed protection stop command after the judgment, the low-side switch action is triggered; When both the high-side switch and the low-side switch are triggered, the aircraft engine is controlled to stop.

15. The single event effect detection and protection device of the aircraft engine overspeed protection system according to claim 9, characterized in that: The aircraft engine overspeed protection system comprises two channels with mutual redundancy backup, and each channel is equipped with an independent overspeed protection processing unit and an electronic controller.

Images