Anti-misoperation control method and system for multi-redundancy automatic electric pump

Abstract

The invention belongs to an electric pump work control technology in the aviation field, and discloses an anti-error work control method and system for a multi-redundancy automatic electric pump, and the method comprises the steps: collecting an onboard state signal, a flight control system state signal and two paths of hydraulic pressure of each sub-hydraulic system in a hydraulic system in real time; according to the onboard state signal, a hydraulic pressure logic judgment instruction is output through the first control logic or an electric pump mistake proofing mechanism is started, and an electric pump connected to the sub hydraulic system is controlled to be closed through the electric pump mistake proofing mechanism; a flight control system state signal and two-way hydraulic pressure are obtained according to the pressure logic judgment instruction, and an electric pump connected to each hydraulic sub-system is automatically controlled through second control logic and an electric pump mistake proofing mechanism. Through the design of the first control logic, the second control logic and the electric pump mistake proofing mechanism, the working accuracy of the multi-redundancy automatic electric pump can be ensured, and the system safety is improved.

Description

Technical Field

[0001] The invention belongs to the field of aviation electric pump operation control technology, and relates to a method and system for preventing error operation of a redundant automatic electric pump. Background Art

[0002] The hydraulic system generally uses an electric pump controller to control the hydraulic pressure or liquid power to drive and control the aircraft's landing gear, rudder control and other components. Since the landing gear, rudder and other mechanisms are manipulated many times during flight, the automated control of the hydraulic system can reduce the pilot's workload.

[0003] However, automatic control systems are often complex and may experience abnormal situations during long-term operation. If the data source or control logic is abnormal, the electric pump will continue to be incorrectly controlled, thereby interfering with the function of the hydraulic system, causing flight safety hazards and reducing the service life of the electric pump. Summary of the invention

[0004] In order to solve the technical problems of affecting the function of the hydraulic system, causing safety hazards and reducing the service life of the electric pump due to continuous erroneous control of the electric pump after abnormal data source or control logic, the present invention discloses a method for preventing erroneous operation of a redundant automatic electric pump, the method comprising the following steps:

[0005] S4, real-time acquisition of onboard status signals, flight control system status signals and two-way hydraulic pressure of each sub-hydraulic system in the hydraulic system;

[0006] S5. Outputting a hydraulic pressure logic judgment instruction or starting an electric pump error prevention mechanism through a first control logic according to the on-board status signal, and controlling and shutting down the electric pump connected to the sub-hydraulic system through the electric pump error prevention mechanism;

[0007] S6. Acquire the flight control system status signal and the two hydraulic pressures according to the pressure logic judgment instruction, and automatically control the electric pump connected to each of the sub-hydraulic systems through the second control logic and the electric pump error prevention mechanism.

[0008] In an improved embodiment of the above-mentioned control method for preventing erroneous operation of the automatic redundancy electric pump, the control method further comprises:

[0009] S1. Setting an on-board state threshold, starting the electric pump error prevention mechanism when the on-board state signal is less than the on-board state threshold, and outputting an electric pump shutdown instruction based on the electric pump error prevention mechanism; outputting a hydraulic pressure logic judgment instruction when the on-board state signal is greater than or equal to the on-board state threshold, and constructing the first control logic;

[0010] S21, given a low-pressure threshold, obtaining the first-path hydraulic pressure according to the hydraulic pressure logic judgment instruction, comparing the first-path hydraulic pressure with the low-pressure threshold, starting the electric pump error prevention mechanism if the first-path hydraulic pressure is less than or equal to the low-pressure threshold, outputting an electric pump start instruction based on the electric pump error prevention mechanism and all the second-path hydraulic pressures; if the first-path hydraulic pressure is greater than the low-pressure threshold, outputting an on-board controlled mechanism logic judgment instruction;

[0011] S22. Acquire the flight control system status signal according to the onboard controlled mechanism logic judgment instruction, and judge whether the controlled mechanism needs pressure according to the flight control system status signal; if it is judged that there is a pressure demand, start the electric pump error prevention mechanism, and output the electric pump start instruction based on the electric pump error prevention mechanism and all the second hydraulic pressures; if it is judged that there is no pressure demand, start the electric pump error prevention mechanism, and output the electric pump stop instruction based on the electric pump error prevention mechanism, so as to construct the second control logic.

[0012] In an improved embodiment of the above-mentioned control method for preventing erroneous operation of the automatic redundancy electric pump, the control method further comprises:

[0013] S31, sequentially numbering the electric pumps connected to all the sub-hydraulic systems, and establishing an association relationship table for all the electric pumps;

[0014] S32, acquiring the current control information of the associated electric pump according to the association relationship table, and performing consistency judgment on the current control information of the associated electric pump;

[0015] S33. If the judgment result is consistent, the electric pump is controlled according to the current control information; if the judgment result is inconsistent, the control information failure result is reported to complete the construction of the electric pump error prevention mechanism.

[0016] Furthermore, the current control information includes an electric pump shutdown instruction and an electric pump startup instruction. When the current control information of each electric pump is output, a waiting timer starts. If the current control information of the associated electric pump associated with the electric pump is not received when the waiting timer time is greater than the set time, the electric pump is controlled with the previous control information of the electric pump.

[0017] Furthermore, the flight control system status signal includes a landing gear signal and a control surface status signal, the onboard status signal includes a ground speed signal, and the controlled mechanism includes a landing gear and a control surface.

[0018] Furthermore, in step S22, judging whether the controlled mechanism needs pressure according to the flight control system state signal includes:

[0019] S221, judging whether the landing gear has a pressure requirement according to the landing gear signal, and if the landing gear signal is a retracting signal or a lowering signal, judging that the landing gear has a pressure requirement;

[0020] S222, judging whether the rudder surface has a pressure demand according to the rudder surface state signal, and if the rudder surface state signal is a rudder surface position change signal, judging that the rudder surface has a pressure demand;

[0021] S223: When any one or both of the control surface and the landing gear have pressure requirements, determine whether the controlled mechanism needs pressure.

[0022] An embodiment of the present invention also provides an anti-error operation control system for a redundant automatic electric pump, the control system comprising an acquisition module, a data scheduling module and multiple electric pump control modules, each of the electric pump control modules is connected to an electric pump, the acquisition module acquires onboard status signals, flight control system status signals and two-way hydraulic pressures of each sub-hydraulic system in the hydraulic system, the output end of the acquisition module is connected to the input end of the data scheduling module; the data scheduling module is connected to all the electric pump control modules, and all the electric pump control modules are interconnected according to an association relationship table to form a logical loop.

[0023] The data scheduling module includes an error prevention mechanism module and multiple logic judgment modules. The logic judgment module of each data scheduling module is connected to the logic judgment module of the data scheduling module and the logic judgment module of the associated logic judgment module.

[0024] Furthermore, there are a plurality of the electric pump control modules, and each of the electric pump control modules is connected to one of the sub-hydraulic systems in the hydraulic system via one of the electric pumps.

[0025] Furthermore, the control system also includes a power supply module, the input end of the power supply module is connected to the onboard power supply, and the output end is connected to the acquisition module, the data scheduling module and each of the electric pump control modules, and the power supply module supplies power to the acquisition module, the data scheduling module and the electric pump control module.

[0026] Compared with the prior art, the at least one technical solution adopted in the embodiments of this specification can achieve the following beneficial effects:

[0027] 1. By automating the control of the electric pump, the pilot does not need to spend a lot of energy on controlling the electric pump during the mission execution, which significantly reduces the pilot's workload;

[0028] 2. Automatically control the electric pump according to different aircraft states to significantly reduce aircraft energy consumption and improve energy efficiency;

[0029] 3. The design of the logic to prevent the electric pump from working incorrectly is adopted. The two-way hydraulic pressure of each sub-hydraulic system is collected through different channels. The electric pump is comprehensively controlled through the two-way hydraulic pressure, and the problem of abnormal control of the electric pump caused by abnormal data source of a single control module or control module is avoided. The risk of damage to the electric pump and unstable operation of the hydraulic system, which in turn affects flight safety, is avoided, and the stability of the control system and hydraulic system is improved, and the service life of the electric pump is increased;

[0030] 4. Through the control system safety design, the single point failure of abnormal electric pump control caused by abnormal data source or control logic of a single control module is avoided, thus improving the safety of the aircraft;

[0031] 5. The electric pump error prevention logic includes a processing mechanism for communication timeout between control modules. This can ensure that the electric pump starts normally in the extreme case where the electric pump error prevention mechanism does not receive the adjacent logic judgment result, ensuring the integrity and safety of aircraft functions;

[0032] 6. It has good maintainability and can be modified and maintained accordingly at a relatively low cost (such as software upgrades, etc.) according to changes in application scenarios;

[0033] 7. The control module in the control system of the present invention can have good scalability according to the number of sub-hydraulic systems. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0035] Figure 1 A flow chart of a method for preventing error operation of a redundant automatic electric pump disclosed in an embodiment of the present invention;

[0036] Figure 2 The anti-error operation control process of the nth electric pump disclosed in the embodiment of the present invention;

[0037] Figure 3 The error-proof working control process of the electric pump associated in the association relationship table disclosed in the embodiment of the present invention;

[0038] Figure 4 The present invention discloses an operation flow of an electric pump error prevention mechanism. DETAILED DESCRIPTION

[0039] The embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0040] The following describes the implementation methods of the present application through specific specific examples, and those skilled in the art can easily understand other advantages and effects of the present application from the content disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. The present application can also be implemented or applied through other different specific implementation methods, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present application. It should be noted that the following embodiments and features of the embodiments can be combined with each other without conflict. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work belong to the scope of protection of the present application.

[0041] The embodiment of the present invention discloses a method for preventing error operation of a redundant automatic electric pump, see Figure 1 and Figure 2 As shown, the method comprises the following steps:

[0042] S4, real-time acquisition of onboard status signals, flight control system status signals and two-way hydraulic pressure of each sub-hydraulic system in the hydraulic system;

[0043] S5. Outputting a hydraulic pressure logic judgment instruction or starting an electric pump error prevention mechanism through a first control logic according to the on-board status signal, and controlling and shutting down the electric pump connected to the sub-hydraulic system through the electric pump error prevention mechanism;

[0044] S6. Acquire the flight control system status signal and the two hydraulic pressures according to the pressure logic judgment instruction, and automatically control the electric pump connected to each of the sub-hydraulic systems through the second control logic and the electric pump error prevention mechanism.

[0045] In an improved embodiment of the above-mentioned redundant automatic electric pump error-proof operation control method, see Figure 2 As shown, the control method also includes:

[0046] S1. Setting an on-board state threshold, starting the electric pump error prevention mechanism when the on-board state signal is less than the on-board state threshold, and outputting an electric pump shutdown instruction based on the electric pump error prevention mechanism; outputting a hydraulic pressure logic judgment instruction when the on-board state signal is greater than or equal to the on-board state threshold, and constructing the first control logic;

[0047] S21, given a low-pressure threshold, obtaining the first-path hydraulic pressure according to the hydraulic pressure logic judgment instruction, comparing the first-path hydraulic pressure with the low-pressure threshold, starting the electric pump error prevention mechanism if the first-path hydraulic pressure is less than or equal to the low-pressure threshold, outputting an electric pump start instruction based on the electric pump error prevention mechanism and all the second-path hydraulic pressures; if the first-path hydraulic pressure is greater than the low-pressure threshold, outputting an on-board controlled mechanism logic judgment instruction;

[0048] S22. Acquire the flight control system status signal according to the onboard controlled mechanism logic judgment instruction, and judge whether the controlled mechanism needs pressure according to the flight control system status signal; if it is judged that there is a pressure demand, start the electric pump error prevention mechanism, and output the electric pump start instruction based on the electric pump error prevention mechanism and all the second hydraulic pressures; if it is judged that there is no pressure demand, start the electric pump error prevention mechanism, and output the electric pump stop instruction based on the electric pump error prevention mechanism, so as to construct the second control logic.

[0049] In an improved embodiment of the above-mentioned redundant automatic electric pump error-proof operation control method, see Figure 2 and Figure 3 As shown, the control method also includes:

[0050] S31, sequentially numbering the electric pumps connected to all the sub-hydraulic systems, and establishing an association relationship table for all the electric pumps;

[0051] S32, acquiring the current control information of the associated electric pump according to the association relationship table, and performing consistency judgment on the current control information of the associated electric pump;

[0052] S33. If the judgment result is consistent, the electric pump is controlled according to the current control information; if the judgment result is inconsistent, the control information failure result is reported to complete the construction of the electric pump error prevention mechanism.

[0053] Furthermore, the current control information includes an electric pump shutdown instruction and an electric pump startup instruction. When the current control information of each electric pump is output, a waiting timer starts. If the current control information of the associated electric pump associated with the electric pump is not received when the waiting timer is greater than the set time, the electric pump is controlled based on the previous control information of the electric pump, that is, the judgment result of this control logic shall prevail.

[0054] Specifically, the process of preventing the electric pump from erroneous operation control is as follows Figure 4 As shown, the following process is included:

[0055] (1) Identify the predefined loop second logic unit object, define the order of electric pumps as electric pump 1, electric pump 2, electric pump 3, ..., electric pump n, and the corresponding electric pump control modules can be named control module 1, control module 2, control module 3, ..., control module n. If the current control module is m (m is less than or equal to n-1), the second logic unit object is electric pump m+1; if the current control module is m (m is equal to n), the second logic unit object is electric pump 1. The logic of the association table is shown in Table 1 below.

[0056] Table 1: Define loop control logic rules

[0057] Comprehensive control logic First control logic Second control logic Control Object AND Logic Control module 1 Control module 2 Electric pump 1 AND Logic Control module 2 Control module 3 Electric pump 2 AND Logic ... ... ... AND Logic Control module n-1 Control module Electric pump n-1 AND Logic Control module Control module 1 Electric pump

[0058] (2) starting the recognition of the control logic result of the second logic unit according to the communication protocol agreed upon within the system, and starting the timing when it is started for the first time;

[0059] (3) Determine whether the second logic unit control logic result determination signal is received, according to Figure 4 As shown, dual-channel synchronous data, when any one channel of data is received, it is determined that the start signal has been received;

[0060] (4) If the second logic unit control logic result determination signal is received, jump to (5); if the second logic unit control logic result determination signal is not received, jump to (8);

[0061] (5) Perform consistency determination based on the determination result of the control logic module: if the determination result is consistent, jump to (7); if the determination result is inconsistent, jump to (6);

[0062] (6) Start reporting of logical fault status and report inconsistent judgment conclusions;

[0063] (7) Determine whether the consistent control logic result is start: if the consistent control logic result is start, jump to start the electric pump; if the consistent control logic result is not start, jump to shut down the electric pump;

[0064] (8) Determine whether the synchronization waiting time has been exceeded: if the synchronization waiting time has been exceeded, jump to (9); if the synchronization waiting time has not been exceeded, jump to (3);

[0065] (9) Determine whether the logic of this control module is started: if the result of this control logic is started, jump to start the electric pump; if the result of this control logic is not started, jump to shut down the electric pump.

[0066] Furthermore, the flight control system status signal includes a landing gear signal and a control surface status signal, the onboard status signal includes a ground speed signal, and the controlled mechanism includes a landing gear and a control surface.

[0067] Furthermore, in step S22, judging whether the controlled mechanism needs pressure according to the flight control system state signal includes:

[0068] S221, judging whether the landing gear has a pressure requirement according to the landing gear signal, and if the landing gear signal is a retracting signal or a lowering signal, judging that the landing gear has a pressure requirement;

[0069] S222, judging whether the rudder surface has a pressure demand according to the rudder surface state signal, and if the rudder surface state signal is a rudder surface position change signal, judging that the rudder surface has a pressure demand;

[0070] S223: When any one or both of the control surface and the landing gear have pressure requirements, determine whether the controlled mechanism needs pressure.

[0071] Based on the same inventive concept, an anti-error operation control system for a redundancy automatic electric pump is also provided in an embodiment of the present invention, as described in the following embodiments. The anti-error operation control system for the redundancy automatic electric pump is used to implement the anti-error operation control method for the redundancy automatic electric pump. As used below, the term "unit" or "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceived.

[0072] In an anti-error working control system of a redundant automatic electric pump disclosed in an embodiment of the present invention, the control system includes an acquisition module, a data scheduling module and multiple electric pump control modules, each of the electric pump control modules is connected to an electric pump, the acquisition module acquires onboard status signals, flight control system status signals and two-way hydraulic pressures of each sub-hydraulic system in the hydraulic system, the output end of the acquisition module is connected to the input end of the data scheduling module; the data scheduling module is connected to all the electric pump control modules, and all the electric pump control modules are interconnected according to an association relationship table to form a logical loop.

[0073] The data scheduling module includes an error prevention mechanism module and multiple logic judgment modules. The logic judgment module of each data scheduling module is connected to the logic judgment module of the data scheduling module and the logic judgment module of the associated logic judgment module.

[0074] Specifically, there are at least two sub-hydraulic systems in the hydraulic system of the present invention, and at least two electric pump control modules, each of which is connected to one sub-hydraulic system in the hydraulic system via one electric pump. Specifically, the hydraulic system can be a complex system with double redundancy, triple redundancy, quadruple redundancy or even high redundancy (such as K redundancy), and the corresponding electric pump control modules also have 2 to K, where one redundancy can be represented by n, K≥n≥2.

[0075] Each of the electric pump control modules is connected to one of the sub-hydraulic systems in the hydraulic system via one of the electric pumps. When the hydraulic system is a triple-redundant system, there are three sub-hydraulic systems, namely, a first sub-hydraulic system, a second sub-hydraulic system and a third sub-hydraulic system. The corresponding electric pumps include a first electric pump connected to the first sub-hydraulic system, a second electric pump connected to the second sub-hydraulic system and a third electric pump connected to the third sub-hydraulic system. The corresponding hydraulic pressures include a first hydraulic pressure of the first sub-hydraulic system, a second hydraulic pressure of the second sub-hydraulic system and a third hydraulic pressure of the third sub-hydraulic system.

[0076] Furthermore, there are a plurality of the electric pump control modules, and each of the electric pump control modules is connected to one of the sub-hydraulic systems in the hydraulic system via one of the electric pumps.

[0077] Furthermore, the control system also includes a power supply module, the input end of the power supply module is connected to the onboard power supply, and the output end is connected to the acquisition module, the data scheduling module and each of the electric pump control modules, and the power supply module supplies power to the acquisition module, the data scheduling module and the electric pump control module.

[0078] 1. By automating the control of the electric pump, the pilot does not need to spend a lot of energy on controlling the electric pump during the mission execution, which significantly reduces the pilot's workload;

[0079] 2. Automatically control the electric pump according to different aircraft states to significantly reduce aircraft energy consumption and improve energy efficiency;

[0080] 3. The design of the logic to prevent the electric pump from working incorrectly is adopted. The two-way hydraulic pressure of each sub-hydraulic system is collected through different channels. The electric pump is comprehensively controlled through the two-way hydraulic pressure, and the problem of abnormal control of the electric pump caused by abnormal data source of a single control module or control module is avoided. The risk of damage to the electric pump and unstable operation of the hydraulic system, which in turn affects flight safety, is avoided, and the stability of the control system and hydraulic system is improved, and the service life of the electric pump is increased;

[0081] 4. Through the control system safety design, the single point failure of abnormal electric pump control caused by abnormal data source or control logic of a single control module is avoided, thus improving the safety of the aircraft;

[0082] 5. The electric pump error prevention logic includes a processing mechanism for communication timeout between control modules. This can ensure that the electric pump starts normally in the extreme case where the electric pump error prevention mechanism does not receive the adjacent logic judgment result, ensuring the integrity and safety of aircraft functions;

[0083] 6. It has good maintainability and can be modified and maintained accordingly at a relatively low cost (such as software upgrades, etc.) according to changes in application scenarios;

[0084] 7. The control module in the control system of the present invention can have good scalability according to the number of sub-hydraulic systems.

[0085] Obviously, those skilled in the art should understand that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the embodiments of the present invention may have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for preventing error operation of a redundant automatic electric pump, characterized in that: include: Real-time acquisition of onboard status signals, flight control system status signals and two-way hydraulic pressure of each sub-hydraulic system in the hydraulic system; According to the on-board status signal, a hydraulic pressure logic judgment instruction is output through the first control logic or an electric pump error prevention mechanism is started, and the electric pump connected to the sub-hydraulic system is controlled to be turned off through the electric pump error prevention mechanism; The flight control system status signal and the two hydraulic pressures are obtained according to the pressure logic judgment instruction, and the electric pump connected to each sub-hydraulic system is automatically controlled through the second control logic and the electric pump error prevention mechanism.

2. The method for preventing error operation of a redundant automatic electric pump according to claim 1, characterized in that: The control method further comprises: Setting an on-board state threshold, starting the electric pump error prevention mechanism when the on-board state signal is less than the on-board state threshold, and outputting an electric pump shutdown instruction based on the electric pump error prevention mechanism; outputting a hydraulic pressure logic judgment instruction when the on-board state signal is greater than or equal to the on-board state threshold, and constructing the first control logic; Given a low-pressure threshold, the hydraulic pressure of the first path is obtained according to the hydraulic pressure logic judgment instruction, the hydraulic pressure of the first path is compared with the low-pressure threshold, if the hydraulic pressure of the first path is less than or equal to the low-pressure threshold, the electric pump error prevention mechanism is started, and the electric pump start instruction is output based on the electric pump error prevention mechanism and all the hydraulic pressures of the second path; if the hydraulic pressure of the first path is greater than the low-pressure threshold, the controlled mechanism logic judgment instruction is output; The flight control system status signal is obtained according to the logic judgment instruction of the controlled mechanism on the aircraft, and whether the controlled mechanism needs pressure is judged according to the flight control system status signal; if it is judged that there is a pressure demand, the electric pump error prevention mechanism is started, and the electric pump start instruction is output based on the electric pump error prevention mechanism and all the second hydraulic pressures; if it is judged that there is no pressure demand, the electric pump error prevention mechanism is started, and the electric pump stop instruction is output based on the electric pump error prevention mechanism, so as to construct the second control logic.

3. The method for preventing error operation of a redundant automatic electric pump according to claim 1 or 2, characterized in that: The control method further comprises: Sequentially numbering the electric pumps connected to all the sub-hydraulic systems and establishing an association table of all the electric pumps; According to the association relationship table, obtaining the current control information of the associated electric pump, and performing consistency judgment on the current control information of the associated electric pump; If the judgment result is consistent, the electric pump is controlled according to the current control information; if the judgment result is inconsistent, the control information failure result is reported to complete the construction of the electric pump error prevention mechanism.

4. The method for preventing error operation of a redundant automatic electric pump according to claim 3, characterized in that: The current control information includes an electric pump shutdown instruction and an electric pump startup instruction. When the current control information of each electric pump is output, a waiting timer starts. If the current control information of the associated electric pump associated with the electric pump is not received when the waiting timer time is greater than the set time, the electric pump is controlled with the previous control information of the electric pump.

5. The method for preventing error operation of a redundant automatic electric pump according to claim 2, characterized in that: The flight control system status signal includes a landing gear signal and a control surface status signal, the onboard status signal includes a ground speed signal, and the onboard controlled mechanism includes a landing gear and a control surface.

6. The method for preventing erroneous operation of a redundant automatic electric pump according to claim 5, characterized in that: Judging whether the controlled mechanism needs pressure according to the flight control system state signal includes: Determining whether the landing gear has a pressure requirement according to the landing gear signal, and if the landing gear signal is a retracting signal or a lowering signal, determining that the landing gear has a pressure requirement; Determine whether the rudder surface has a pressure requirement according to the rudder surface state signal, and if the rudder surface state signal is a rudder surface position change signal, determine that the rudder surface has a pressure requirement; When any one or both of the control surface and the landing gear have pressure requirements, it is determined that the controlled mechanism needs pressure.

7. A control system for preventing erroneous operation of a redundant automatic electric pump, characterized in that: The control system includes a collection module, a data scheduling module and a plurality of electric pump control modules, each of which is connected to an electric pump, the collection module collects onboard status signals, flight control system status signals and two-way hydraulic pressure of each sub-hydraulic system in the hydraulic system, and the output end of the collection module is connected to the input end of the data scheduling module; the data scheduling module is connected to all the electric pump control modules, and all the electric pump control modules are interconnected according to the association relationship table to form a logical loop; The data scheduling module includes an error prevention mechanism module and multiple logic judgment modules. The logic judgment module of each data scheduling module is connected to the logic judgment module of the data scheduling module and the logic judgment module of the associated logic judgment module.

8. The redundant automatic electric pump control system according to claim 7, characterized in that: There are a plurality of the electric pump control modules, and each of the electric pump control modules is connected to one of the sub-hydraulic systems in the hydraulic system via one of the electric pumps.

9. The redundant automatic electric pump control system according to claim 7 or 8, characterized in that: The control system also includes a power supply module, the input end of the power supply module is connected to the onboard power supply, and the output end is connected to the acquisition module, the data scheduling module and each of the electric pump control modules, and the power supply module supplies power to the acquisition module, the data scheduling module and the electric pump control module.

Images