Method and system for preventing erroneous operation of a multi-redundant electric motor pump

Abstract

The present application belongs to the field of electric pump working control technology in aviation, and discloses a kind of error-proof working control method and system of multiple redundancy automatic electric pump, the method comprises: real-time acquisition on-board state signal, flight control system state signal and two-way hydraulic pressure of each sub-hydraulic system in hydraulic system;According to on-board state signal, output hydraulic pressure logical judgment instruction or start electric pump error-proof mechanism through first control logic, control the electric pump connected on the sub-hydraulic system to be closed through electric pump error-proof mechanism;According to pressure logical judgment instruction, obtain flight control system state signal and two-way hydraulic pressure, and automatically control the electric pump connected on each sub-hydraulic system through second control logic and electric pump error-proof mechanism respectively.The present application can ensure the accuracy of multiple redundancy automatic electric pump working through the design of first control logic, second control logic and electric pump error-proof mechanism, and improve system safety.

Description

TECHNICAL FIELD

[0001] The present application belongs to the technical field of electric pump working control in aviation, and relates to an error-proof working control method and system for a multi-redundancy automatic electric pump. BACKGROUND

[0002] A hydraulic system generally controls the size or power of a liquid through an electric pump controller to drive and control components such as landing gears and rudder surfaces of an aircraft. Since the landing gears and rudder surfaces are manipulated multiple times during flight, automatic control of the hydraulic system can reduce the workload of the pilot.

[0003] However, the automatic control system is often complex, and abnormal situations may occur during long-term operation. If the data source or control logic is abnormal, the electric pump will be continuously controlled incorrectly, thereby interfering with the function of the hydraulic system, causing safety hazards, and reducing the service life of the electric pump. SUMMARY

[0004] To solve the technical problems of affecting the function of the hydraulic system, causing safety hazards, and reducing the service life of the electric pump due to continuous incorrect control of the electric pump after the data source or control logic is abnormal, the present application discloses an error-proof working control method for a multi-redundancy automatic electric pump, which comprises the following steps:

[0005] S4, real-time acquisition of an on-board state signal, a flight control system state signal, and two-way hydraulic pressure of each sub-hydraulic system in the hydraulic system;

[0006] S5, output of a hydraulic pressure logic judgment instruction or starting of an electric pump error-proof mechanism according to the on-board state signal through a first control logic, and control of the electric pump connected to the sub-hydraulic system to be closed through the electric pump error-proof mechanism;

[0007] S6, acquisition of the flight control system state signal and the two-way hydraulic pressure according to the pressure logic judgment instruction, and automatic control of the electric pump connected to each sub-hydraulic system through a second control logic and the electric pump error-proof mechanism, respectively.

[0008] In an improved embodiment of the error-proof working control method for the multi-redundancy automatic electric pump, the control method further comprises:

[0009] S1, setting of an on-board state threshold value, starting of an electric pump error-proof mechanism when the on-board state signal is less than the on-board state threshold value, and output of an electric pump closing instruction based on the electric pump error-proof mechanism; and output of a hydraulic pressure logic judgment instruction when the on-board state signal is greater than or equal to the on-board state threshold value, and construction of the first control logic;

[0010] S21, given a low pressure threshold, according to the hydraulic pressure logic judgment instruction to obtain the first road hydraulic pressure, the first road hydraulic pressure and the low pressure threshold are compared, if the first road hydraulic pressure is less than or equal to the low pressure threshold, the electric pump error prevention mechanism is started, and the electric pump opening instruction is output based on the electric pump error prevention mechanism and all second road hydraulic pressure; if the first road hydraulic pressure is greater than the low pressure threshold, the on-machine controlled mechanism logic judgment instruction is output;

[0011] S22, according to the on-machine controlled mechanism logic judgment instruction, the flight control system state signal is obtained, and it is judged whether the controlled mechanism needs pressure according to the flight control system state signal; if it is judged that there is pressure demand, the electric pump error prevention mechanism is started, and the electric pump opening instruction is output based on the electric pump error prevention mechanism and all second road hydraulic pressure; if it is judged that there is no pressure demand, the electric pump error prevention mechanism is started, and the electric pump closing instruction is output based on the electric pump error prevention mechanism, and the second control logic is constructed.

[0012] In an improved embodiment of the above-mentioned multiple degree automatic electric pump error prevention working control method, the control method further comprises:

[0013] S31, all the electric pumps connected on the sub-hydraulic system are numbered in sequence, and the association relationship table of all the electric pumps is established;

[0014] S32, according to the association relationship table, the current control information of the associated electric pump is obtained, and the consistency of the current control information of the associated electric pump is judged;

[0015] S33, if the judgment result is consistent, the electric pump is controlled according to the current control information; if the judgment result is inconsistent, the control information fault result is reported, and the construction of the electric pump error prevention mechanism is completed.

[0016] Further, the current control information includes electric pump closing instruction and electric pump opening instruction, when the current control information of each electric pump is output, the waiting timing starts, if the waiting timing time is greater than the set time, the current control information of the associated electric pump associated with the electric pump is not received, and the electric pump control is performed with the front control information of the electric pump.

[0017] Further, the flight control system state signal includes landing gear signal and rudder surface state signal, the on-machine state signal includes ground speed signal, and the controlled mechanism includes landing gear and rudder surface.

[0018] Further, in step S22, it is judged whether the controlled mechanism needs pressure according to the flight control system state signal, comprising:

[0019] S221, judging whether the landing gear has pressure demand according to the landing gear signal, if the landing gear signal is a retracting signal or a lowering signal, judging that the landing gear has pressure demand;

[0020] S222, judging whether the control surface has pressure demand according to the control surface state signal, if the control surface state signal is a control surface position changing signal, judging that the control surface has pressure demand;

[0021] S223, judging that the controlled mechanism needs pressure when any one or both of the control surface and the landing gear has pressure demand.

[0022] The embodiment of the present application also provides an error-proof working control system of a multi-redundancy automatic electric pump, the control system comprising an acquisition module, a data scheduling module and a plurality of electric pump control modules, each of the electric pump control modules being connected with an electric pump, the acquisition module acquiring an on-board state signal, a flight control system state signal and two-way hydraulic pressure of each sub-hydraulic system in a hydraulic system, and an output end of the acquisition module being connected with an input end of the data scheduling module; the data scheduling module being connected with all the electric pump control modules, and all the electric pump control modules being interconnected to form a logic loop according to an association table.

[0023] The data scheduling module comprises an error-proof mechanism module and a plurality of logic judgment modules, and the logic judgment module of each data scheduling module is connected with the logic judgment module of the data scheduling module and the logic judgment module associated with the logic judgment module.

[0024] Further, the electric pump control modules are a plurality of, each of the electric pump control modules being connected with an electric pump and a sub-hydraulic system in the hydraulic system.

[0025] Still further, the control system further comprises a power module, an input end of the power module being connected with an on-board power supply, and output ends of the power module being connected with the acquisition module, the data scheduling module and each electric pump control module, and the power module supplying power for the acquisition module, the data scheduling module and the electric pump control modules.

[0026] Compared with the prior art, the above at least one technical solution adopted by the embodiment of the present application can achieve at least the following beneficial effects:

[0027] 1. By automatically controlling the electric pump, the pilot does not need to spend a lot of energy on controlling the electric pump related work during the task execution process, and the pilot's work load is significantly reduced;

[0028] 2. By automatically controlling the electric pump according to different aircraft states, the energy consumption of the aircraft is significantly reduced, and the energy utilization efficiency is improved;

[0029] 3. By designing an error prevention logic of the electric pump, two hydraulic pressures of each sub-hydraulic system are collected through different channels, the electric pump is comprehensively controlled through the two hydraulic pressures, and the problem of abnormal control of the electric pump caused by abnormal data source or control module of a single control module is avoided, the risk of damage to the electric pump, unstable operation of the hydraulic system, and further influence on flight safety is avoided, the stability of the control system and the hydraulic system is improved, and the service life of the electric pump is increased;

[0030] 4. By the safety design of the control system, the single point failure of the electric pump control caused by the abnormal data source or control logic of a single control module is avoided, and the safety of the aircraft is improved;

[0031] 5. The error prevention logic of the electric pump includes a communication timeout processing mechanism between control modules, which can ensure the normal start of the electric pump in the extreme case that the error prevention mechanism of the electric pump does not receive the adjacent logic judgment result, and ensure the completeness and safety of the aircraft function;

[0032] 6. It has good maintainability, and can be modified and maintained according to the change of the application scene with small cost (such as software upgrade, etc.);

[0033] 7. The control module in the control system of the present application can have good expansibility according to the number of sub-hydraulic systems. BRIEF DESCRIPTION OF DRAWINGS

[0034] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed in the embodiments will be briefly introduced as follows. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0035] Figure 1 Flow chart of the error prevention control method of the multiple-redundancy automatic electric pump disclosed in the embodiments of the present application;

[0036] Figure 2 Error prevention control flow of the nth electric pump disclosed in the embodiments of the present application;

[0037] Figure 3 Error prevention control flow of the associated electric pump in the association table disclosed in the embodiments of the present application;

[0038] Figure 4 Running flow of the error prevention mechanism of the electric pump disclosed in the embodiments of the present application. Detailed Implementation

[0039] The embodiments of this application will now be described in detail with reference to the accompanying drawings.

[0040] The following specific examples illustrate the implementation of this application. Those skilled in the art can easily understand other advantages and effects of this application from the content disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. This application can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this application. It should be noted that, in the absence of conflict, the following embodiments and features of the embodiments can be combined with each other. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0041] This invention discloses a method for preventing erroneous operation control of a redundant automatic electric pump, see [link to relevant documentation]. Figure 1 and Figure 2 As shown, the method includes the following steps:

[0042] S4. Real-time acquisition of onboard status signals, flight control system status signals, and two hydraulic pressures of each sub-hydraulic system in the hydraulic system;

[0043] S5. Based on the machine status signal, output a hydraulic pressure logic judgment command or activate the electric pump error prevention mechanism through the first control logic, and control the electric pump connected to the sub-hydraulic system to shut down through the electric pump error prevention mechanism.

[0044] S6. Based on the pressure logic judgment command, obtain the flight control system status signal and the two hydraulic pressures, and automatically control the electric pumps connected to each of the sub-hydraulic systems through the second control logic and the electric pump error prevention mechanism.

[0045] In an improved embodiment of the above-described error-proof operation control method for redundant automatic electric pumps, see [link to relevant documentation]. Figure 2 As shown, the control method further includes:

[0046] S1. Set an on-machine status threshold. When the on-machine status signal is less than the on-machine status threshold, activate the electric pump error prevention mechanism and output an electric pump shutdown command based on the electric pump error prevention mechanism. When the on-machine status signal is greater than or equal to the on-machine status threshold, output a hydraulic pressure logic judgment command and construct the first control logic.

[0047] S21, given a low pressure threshold, according to the hydraulic pressure logic judgment instruction to obtain the first road hydraulic pressure, the first road hydraulic pressure and the low pressure threshold are compared, if the first road hydraulic pressure is less than or equal to the low pressure threshold, the electric pump error prevention mechanism is started, and the electric pump opening instruction is output based on the electric pump error prevention mechanism and all second road hydraulic pressure; If the first road hydraulic pressure is greater than the low pressure threshold, the on-machine controlled mechanism logic judgment instruction is output.

[0048] S22, according to the on-machine controlled mechanism logic judgment instruction, the flight control system state signal is obtained, and it is judged whether the controlled mechanism needs pressure according to the flight control system state signal; If it is judged that there is pressure demand, the electric pump error prevention mechanism is started, and the electric pump opening instruction is output based on the electric pump error prevention mechanism and all second road hydraulic pressure; If it is judged that there is no pressure demand, the electric pump error prevention mechanism is started, and the electric pump closing instruction is output based on the electric pump error prevention mechanism, and the second control logic is constructed.

[0049] In an improved embodiment of the above-mentioned multiple degree of automatic electric pump error prevention working control method, referring to Figure 2 and Figure 3 , the control method further comprises:

[0050] S31, all the electric pumps connected on the sub-hydraulic system are numbered in order, and the association relationship table of all the electric pumps is established;

[0051] S32, according to the association relationship table, the current control information of the associated electric pump is obtained, and the consistency of the current control information of the associated electric pump is judged;

[0052] S33, if the judgment result is consistent, the electric pump is controlled according to the current control information; If the judgment result is inconsistent, the control information fault result is reported, and the construction of the electric pump error prevention mechanism is completed.

[0053] Further, the current control information includes electric pump closing instruction and electric pump opening instruction, when outputting the current control information of each electric pump, start waiting timing, if the waiting timing time is greater than the set time, and the current control information of the associated electric pump associated with the electric pump is not received, the electric pump control is carried out with the front control information of the electric pump, that is, the control logic judgment result is used as the criterion.

[0054] Specifically, the process of electric pump error prevention working control refers to Figure 4 , which includes the following processes:

[0055] (1) Identify the pre-defined second loop logic unit object, define the order of the electric pump as electric pump 1, electric pump 2, electric pump 3, …, electric pump n, and the corresponding electric pump control module can be named as control module 1, control module 2, control module 3, …, control module n. If the control module is m (m is less than or equal to n-1), the second logic unit object is electric pump m+1; if the control module is m (m is equal to n), the second logic unit object is electric pump 1, and the logic of the association table is as shown in Table 1

[0056] Table 1: Definition of cyclic control logic rules

[0057] Comprehensive control logic First control logic Second control logic Control object AND logic Control module 1 Control module 2 Electric pump 1 AND logic Control module 2 Control module 3 Electric pump 2 AND logic ... ... ... AND logic Control module n-1 Control module n Electric pump n-1 AND logic Control module n Control module 1 Electric pump n

[0058] (2) According to the communication protocol agreed within the system, start the identification of the second logic unit control logic result, and start timing at the first start;

[0059] (3) Determine whether the second logic unit control logic result determination signal is received, according to Figure 4 As shown, double-channel synchronous data, receiving any one way data, is determined as receiving the start signal;

[0060] (4) If the second logic unit control logic result determination signal is received, jump to (5); if the second logic unit control logic result determination signal is not received, jump to (8);

[0061] (5) Consistency determination is made in combination with the determination result of the control logic module: if the determination result is consistent, jump to (7); if the determination result is inconsistent, jump to (6);

[0062] (6) Start the logic fault state reporting, and report the inconsistent determination conclusion;

[0063] (7) Determine whether the consistent control logic result is start: if the consistent control logic result is start, jump to start the electric pump; if the consistent control logic result is not start, jump to close the electric pump;

[0064] (8) Determine whether the synchronization waiting time is exceeded: if the synchronization waiting time is exceeded, jump to (9); if the synchronization waiting time is not exceeded, jump to (3);

[0065] (9) Determine whether the control logic of the control module is start: if the control logic result is start, jump to start the electric pump; if the control logic result is not start, jump to close the electric pump.

[0066] Further, the flight control system state signals include landing gear signals and control surface state signals, the on-board state signals include ground speed signals, and the controlled mechanisms include landing gears and control surfaces.

[0067] Further, in step S22, determining whether the controlled mechanisms need pressure according to the flight control system state signals includes:

[0068] S221, determining whether the landing gears need pressure according to the landing gear signals, if the landing gear signals are stowed signals or lowered signals, determining that the landing gears need pressure;

[0069] S222, determining whether the control surfaces need pressure according to the control surface state signals, if the control surface state signals are control surface position changing signals, determining that the control surfaces need pressure;

[0070] S223, determining that the controlled mechanisms need pressure when any one or both of the control surfaces and the landing gears need pressure.

[0071] Based on the same inventive concept, the embodiments of the present application also provide a redundant automatic electric pump error-proof working control system, as described in the following embodiments. The redundant automatic electric pump error-proof working control system is used to implement the redundant automatic electric pump error-proof working control method. The terms "unit" or "module" used below can be a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, hardware or a combination of software and hardware is also possible and contemplated.

[0072] In the redundant automatic electric pump error-proof working control system disclosed by the embodiments of the present application, the control system includes a collection module, a data scheduling module, and a plurality of electric pump control modules. Each of the electric pump control modules is connected with an electric pump. The collection module collects on-board state signals, flight control system state signals, and two-way hydraulic pressure of each sub-hydraulic system in the hydraulic system. The output end of the collection module is connected with the input end of the data scheduling module. The data scheduling module is connected with all the electric pump control modules. All the electric pump control modules are interconnected to form a logical loop according to an association table.

[0073] The data scheduling module includes an error-proof mechanism module and a plurality of logical judgment modules. Each of the logical judgment modules of the data scheduling module is connected with the logical judgment module of the data scheduling module and the logical judgment module associated with the logical judgment module.

[0074] Specifically, the hydraulic system of the present application has at least two sub hydraulic systems, and the electric pump control module has at least two, each of which is connected to one of the sub hydraulic systems in the hydraulic system through one electric pump. Specifically, the hydraulic system can be a complex system with two, three, four or even high redundancy (such as K redundancy), and the corresponding electric pump control module has 2 to K, where one redundancy can be represented by n, and K ≥ n ≥ 2.

[0075] Each of the electric pump control modules is connected to one of the sub hydraulic systems in the hydraulic system through one electric pump. When the hydraulic system is a three-redundancy system, there are three sub hydraulic systems, i.e. a first sub hydraulic system, a second sub hydraulic system and a third sub hydraulic system, and the corresponding electric pumps include a first electric pump connected to the first sub hydraulic system, a second electric pump connected to the second sub hydraulic system and a third electric pump connected to the third sub hydraulic system. The corresponding hydraulic pressures include a first hydraulic pressure of the first sub hydraulic system, a second hydraulic pressure of the second sub hydraulic system and a third hydraulic pressure of the third sub hydraulic system.

[0076] Further, the electric pump control module has a plurality of electric pump control modules, each of which is connected to one of the sub hydraulic systems in the hydraulic system through one electric pump.

[0077] Further, the control system further comprises a power module, the input end of the power module is connected to the on-board power supply, and the output end is connected to the acquisition module, the data scheduling module and each electric pump control module, and the power module supplies power to the acquisition module, the data scheduling module and the electric pump control module.

[0078] 1. By automatically controlling the electric pump, the pilot does not need to spend a lot of effort on controlling the electric pump during the task execution process, which significantly reduces the pilot's workload;

[0079] 2. By automatically controlling the electric pump according to different aircraft states, the aircraft energy consumption is significantly reduced, and the energy utilization efficiency is improved;

[0080] 3. By designing a logic to prevent the electric pump from working incorrectly, two hydraulic pressures of each sub hydraulic system are collected through different channels, the electric pump is comprehensively controlled by the two hydraulic pressures, and the problem of abnormal electric pump control caused by abnormal data source or control module of a single control module is avoided, which avoids the risk of damaging the electric pump, unstable hydraulic system and affecting flight safety, improves the stability of the control system and the hydraulic system, and increases the service life of the electric pump;

[0081] 4. By controlling system safety design, the single point failure caused by the data source or control logic exception of single control module is avoided, and the safety of the airplane is improved;

[0082] 5. The error logic of the electric pump contains the processing mechanism of communication timeout between control modules, which can ensure the normal start of the electric pump in the extreme case that the error prevention mechanism of the electric pump does not receive the adjacent logic judgment result, and ensure the integrity and safety of the airplane function;

[0083] 6. The control system has good maintainability, and corresponding modification and maintenance can be carried out with small cost (such as software upgrade) according to the change of application scene;

[0084] 7. The control system of the application has good expansibility according to the number of sub-hydraulic systems.

[0085] Obviously, those skilled in the art should understand that the above only describes the preferred embodiments of the application, and is not used to limit the application. For those skilled in the art, the application embodiments can have various changes and changes. Any modification, equivalent replacement, improvement, etc. within the spirit and principle of the application shall be included in the protection scope of the application.

Claims

1. A method for preventing erroneous operation control of a redundant automatic electric pump, characterized in that, include: Real-time acquisition of onboard status signals, flight control system status signals, and two hydraulic pressures of each sub-hydraulic system in the hydraulic system; Based on the machine status signal, the first control logic outputs a hydraulic pressure logic judgment command or activates the electric pump error prevention mechanism, and the electric pump connected to the sub-hydraulic system is shut down through the electric pump error prevention mechanism. Based on the hydraulic pressure logic judgment command, the flight control system status signal and the two hydraulic pressures are obtained, and the electric pumps connected to each of the sub-hydraulic systems are automatically controlled through the second control logic and the electric pump error prevention mechanism.

2. The method for preventing erroneous operation of a redundant automatic electric pump according to claim 1, characterized in that, The control method further includes: Set an on-machine status threshold. When the on-machine status signal is less than the on-machine status threshold, activate the electric pump error prevention mechanism and output an electric pump shutdown command based on the electric pump error prevention mechanism. When the on-machine status signal is greater than or equal to the on-machine status threshold, output a hydraulic pressure logic judgment command and construct the first control logic. Given a low-pressure threshold, the hydraulic pressure of the first channel is obtained according to the hydraulic pressure logic judgment instruction. The hydraulic pressure of the first channel is compared with the low-pressure threshold. If the hydraulic pressure of the first channel is less than or equal to the low-pressure threshold, the electric pump error prevention mechanism is activated. Based on the electric pump error prevention mechanism and all the hydraulic pressures of the second channel, an electric pump start instruction is output. If the hydraulic pressure of the first channel is greater than the low-pressure threshold, a logic judgment instruction for the controlled mechanism on the machine is output. The flight control system status signal is obtained according to the logic judgment instruction of the onboard controlled mechanism. Based on the flight control system status signal, it is determined whether the controlled mechanism needs pressure. If it is determined that there is a pressure requirement, the electric pump error prevention mechanism is activated. Based on the electric pump error prevention mechanism and all the second hydraulic pressure, an electric pump start command is output. If it is determined that there is no pressure requirement, the electric pump error prevention mechanism is activated. Based on the electric pump error prevention mechanism, an electric pump stop command is output, and the second control logic is constructed.

3. The method for preventing erroneous operation control of a redundant automatic electric pump according to claim 1 or 2, characterized in that, The control method further includes: Number the electric pumps connected to all the sub-hydraulic systems sequentially and establish an association table for all the electric pumps; Based on the association table, obtain the current control information of the associated electric pumps, and perform a consistency judgment on the current control information of the associated electric pumps; If the judgment result is consistent, the electric pump is controlled according to the current control information; if the judgment result is inconsistent, the control information fault result is reported, and the construction of the electric pump error prevention mechanism is completed.

4. The method for preventing erroneous operation of a redundant automatic electric pump according to claim 3, characterized in that, The current control information includes electric pump shutdown command and electric pump start command. When the current control information of each electric pump is output, a waiting timer is started. If the current control information of the associated electric pump is not received when the waiting timer exceeds a set time, the electric pump is controlled using the current control information of that electric pump.

5. The method for preventing erroneous operation of a redundant automatic electric pump according to claim 2, characterized in that, The flight control system status signals include landing gear signals and control surface status signals, the onboard status signals include ground speed signals, and the controlled mechanisms include landing gear and control surfaces.

6. The method for preventing erroneous operation of a redundant automatic electric pump according to claim 5, characterized in that, Determining whether the controlled mechanism requires pressure based on the flight control system status signal includes: The landing gear signal is used to determine whether the landing gear has a pressure requirement. If the landing gear signal is a retraction signal or a lowering signal, it is determined that the landing gear has a pressure requirement. The system determines whether the system has a pressure requirement based on the system status signal. If the system status signal is a signal to change the system position, it is determined that the system has a pressure requirement. When any one or both of the control surfaces and the landing gear have a pressure requirement, it is determined that the controlled mechanism needs pressure.

7. A fault-prevention control system for a redundant automatic electric pump, used to execute the fault-prevention control method according to any one of claims 1 to 6, characterized in that, The control system includes a data acquisition module, a data scheduling module, and multiple electric pump control modules. Each electric pump control module is connected to an electric pump. The data acquisition module acquires on-board status signals, flight control system status signals, and two hydraulic pressures from each sub-hydraulic system in the hydraulic system. The output of the data acquisition module is connected to the input of the data scheduling module. The data scheduling module is connected to all the electric pump control modules, and all the electric pump control modules are interconnected according to an association table to form a logical loop. The data scheduling module includes an error prevention mechanism module and multiple logical judgment modules.

8. The error-proof operating control system for the redundant automatic electric pump according to claim 7, characterized in that, There are multiple electric pump control modules, and each electric pump control module is connected to a sub-hydraulic system in the hydraulic system via an electric pump.

9. The error-proof operating control system for a redundant automatic electric pump according to claim 7 or 8, characterized in that, The control system also includes a power supply module. The input terminal of the power supply module is connected to the on-board power supply, and the output terminal is connected to the acquisition module, the data scheduling module and each of the electric pump control modules. The power supply module supplies power to the acquisition module, the data scheduling module and the electric pump control module.

Images