Dual-tri-redundancy redundancy management method

Abstract

The invention provides a dual-tri-redundancy redundancy management method, and relates to the technical field of engine control, and the method comprises the steps: 1, enabling a command monitoring channel of an engine comprehensive processing control box to carry out the intersection of collected FCC data; 2, voting the FCC data of the main control channel, and judging the validity of a voting result; 3, the FCC data of the standby control channel are voted, the validity of a voting result is judged, if the voting result is valid, the voting result is an FCC voting value, if the voting result is invalid, a safety value is output to serve as the FCC voting value, the engine comprehensive processing control box is in a dual-redundancy mode, and the FCC is in a three-redundancy mode. Two FCC data are introduced through a main channel and a standby channel of the control box respectively, consistency judgment and voting are carried out, the utilization efficiency of an interface is improved, and meanwhile the usability of an engine control system is improved to the maximum extent.

Description

Technical Field

[0001] The invention relates to the technical field of engine control, and in particular provides a double-triple redundancy management method. Background Art

[0002] In the engine control system, since the main flight control computer (FCC) is in the "master-master-master" mode and the engine integrated processing control box (hereinafter referred to as the control box) is in the "master-standby" mode, during the data selection and voting process, if the three FCCs are introduced into the master and standby channels of the control box respectively, it will cause low interface utilization efficiency. Summary of the invention

[0003] The purpose of the present application is to solve the problem of interconnection between a dual-redundancy control box and a triple-redundancy FCC, and to provide a dual-triple redundancy management method that can improve the utilization efficiency of the control box interface.

[0004] In order to achieve the above-mentioned purpose, the present invention adopts the following technical scheme: a double-triple redundancy redundancy management method, comprising the following steps: step one, the engine comprehensive processing control box instructs the monitoring channel to cross the collected FCC data; step two, the FCC data of the main control channel after the above-mentioned cross processing is voted, and the validity of the voting result is judged. If the voting result is valid, the voting result is the FCC voting value, and if the voting result is invalid, step three is performed; step three, the FCC data of the standby control channel after the cross processing in step one is voted, and the validity of the voting result is judged. If the voting result is valid, the voting result is the FCC voting value, and if the voting result is invalid, a safe value is output as the FCC voting value. The engine comprehensive processing control box is in a double redundancy mode, and the FCC is in a triple redundancy mode.

[0005] The double-triple redundancy redundancy management method provided by the present invention also has such a technical feature that in step 1, the control box command channel and the monitoring channel obtain FCC1, FCC2, and FCC3 data through internal crossover.

[0006] The double-triple redundancy redundancy management method provided by the present invention also has the following technical features: in the voting step of step 2, it includes:

[0007] Step 2.1, determine the validity of the control box main control channel interface;

[0008] Step 2.2, perform consistency check on FCC1 and FCC2 data;

[0009] Step 2.3, select the FCC voting value.

[0010] The double-triple redundancy redundancy management method provided by the present invention also has such a technical feature that the step 2.1 comprises:

[0011] Step 2.1.1, the control box main control channel command channel and monitoring channel compare and monitor the two sets of FCC1 data received. If they are consistent, the FCC1 data directly collected by the command channel is used as the valid value. If they are inconsistent, the control box main control channel command channel and monitoring channel use the FCC1 safety value as the FCC data voting value;

[0012] Step 2.1.2, the control box main control channel command channel and monitoring channel compare and monitor the two sets of FCC2 data received. When they are consistent, the FCC2 data directly collected by the command channel is used as the valid value. When they are inconsistent, the control box main control channel command channel and monitoring channel use the FCC2 safety value as the FCC data voting value.

[0013] The double-triple redundancy redundancy management method provided by the present invention also has such a technical feature that the step 2.2 comprises:

[0014] Step 2.2.1, perform mutual comparison monitoring of bus data sent by FCC1 and FCC2, if they are inconsistent, the fault counter is increased by 1, otherwise, the fault counter is decreased by 1;

[0015] Step 2.2.2, when the fault counter reaches 60, the FCC data are set to be inconsistent, otherwise the FCC data are consistent.

[0016] The double-triple redundancy redundancy management method provided by the present invention also has such a technical feature that the step 2.3 comprises:

[0017] When both FCC1 and FCC2 are valid and the signals are consistent, the data of FCC1 is selected as the voting value; otherwise, proceed to step three.

[0018] The double-triple redundancy redundancy management method provided by the present invention also has such a technical feature that the step three comprises the following steps:

[0019] Step 3.1, judging the validity of the control box standby channel interface;

[0020] Step 3.2, perform consistency judgment on FCC2 and FCC3 data;

[0021] Step 3.3, select the FCC data voting value.

[0022] The double-triple redundancy redundancy management method provided by the present invention also has the following technical features: step 3.1 comprises:

[0023] Step 3.1.1, the control box standby channel command channel and monitoring channel compare and monitor the two sets of FCC2 data received. If they are consistent, the FCC2 data directly collected by the command channel is used as the valid value. If they are inconsistent, the control box main channel command channel and monitoring channel use the FCC2 safety value as the FCC data voting value;

[0024] Step 3.2.2, the control box main control channel command channel and monitoring channel compare and monitor the two sets of FCC3 data received. When they are consistent, the FCC3 data directly collected by the command channel is used as the valid value. When they are inconsistent, the control box main control channel command channel and monitoring channel use the FCC3 safety value as the FCC data voting value.

[0025] The double-triple redundancy redundancy management method provided by the present invention also has such a technical feature that the step 3.2 comprises:

[0026] Step 3.2.1, when the bus data sent by FCC2 and FCC3 are inconsistent in the mutual comparison monitoring, the fault counter is increased by 1, otherwise, the fault counter is decreased by 1;

[0027] Step 3.2.2, when the fault counter reaches 60, the FCC data are set to be inconsistent, otherwise the FCC data are consistent.

[0028] The double-triple redundancy redundancy management method provided by the present invention also has such a technical feature that the step 3.3 comprises:

[0029] When both FCC2 and FCC3 are valid and the signals are consistent, the data of FCC3 is selected as the voting value; otherwise, the FCC3 safety value is output as the voting value.

[0030] Beneficial Effects

[0031] The double-triple redundancy redundancy management method proposed in the present invention introduces two FCC data respectively through the main / backup channels of the control box, makes consistency judgment and performs voting, thereby improving the interface utilization efficiency and maximizing the availability of the engine control system. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0033] Figure 1 The redundancy management block diagram of the double-triple redundancy provided by the present invention;

[0034] Figure 2 A block diagram for judging the out-of-tolerance of FCC1 and FCC2 data provided by an embodiment of the present invention;

[0035] Figure 3 This is a block diagram of FCC2 and FCC3 data out-of-tolerance judgment provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0036] The present application is further described in detail below in conjunction with the accompanying drawings and examples, but it should be noted that these implementation methods are not limitations of the present application, and equivalent changes or substitutions in functions, methods, or structures made by ordinary technicians in the field based on these implementation methods are all within the scope of protection of the present application.

[0037] In the description of the embodiments of the present application, it should be understood that the terms "center", "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating the orientation or position relationship, are based on the orientation or position relationship shown in the accompanying drawings, and are only for the convenience of describing the creation of the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the creation of the present application.

[0038] In addition, the terms "first", "second", "third", etc. are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first", "second", etc. may explicitly or implicitly include one or more of the features. In the description of the invention of this application, unless otherwise specified, the meaning of "plurality" is two or more.

[0039] The terms "installed", "connected" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the invention of this application can be understood by specific circumstances.

[0040] like Figure 1-3 As shown, the embodiment of the present application provides a double-triple redundancy redundancy management method, comprising the following steps:

[0041] Step 1: The engine integrated processing control box instructs the monitoring channel to cross-reference the collected FCC data;

[0042] Step 2: Voting on the FCC data of the master control channel after the above cross processing, and judging the validity of the voting result. If the voting result is valid, the voting result is the FCC voting value. If the voting result is invalid, proceed to step 3.

[0043] Step 3: vote on the FCC data of the backup control channel after the cross processing in step 1, and judge the validity of the voting result. If the voting result is valid, the voting result is the FCC voting value. If the voting result is invalid, the safety value is output as the FCC voting value.

[0044] The engine integrated processing control box is in dual-redundancy mode, and the FCC is in triple-redundancy mode.

[0045] In some embodiments, in step 1, the control box command channel and the monitoring channel obtain FCC1, FCC2, and FCC3 data through internal crosstalk.

[0046] In some embodiments, the voting step in step 2 includes:

[0047] Step 2.1, determine the validity of the control box main control channel interface;

[0048] Step 2.2, perform consistency check on FCC1 and FCC2 data;

[0049] Step 2.3, select the FCC voting value.

[0050] In some embodiments, the step 2.1 includes:

[0051] Step 2.1.1, the control box main control channel command channel and monitoring channel compare and monitor the two sets of FCC1 data received. If they are consistent, the FCC1 data directly collected by the command channel is used as the valid value. If they are inconsistent, the control box main control channel command channel and monitoring channel use the FCC1 safety value as the FCC data voting value;

[0052] Step 2.1.2, the control box main control channel command channel and monitoring channel compare and monitor the two sets of FCC2 data received. When they are consistent, the FCC2 data directly collected by the command channel is used as the valid value. When they are inconsistent, the control box main control channel command channel and monitoring channel use the FCC2 safety value as the FCC data voting value.

[0053] In some embodiments, the step 2.2 includes:

[0054] Step 2.2.1, perform mutual comparison monitoring of bus data sent by FCC1 and FCC2, if they are inconsistent, the fault counter is increased by 1, otherwise, the fault counter is decreased by 1;

[0055] Step 2.2.2, when the fault counter reaches 60, the FCC data are set to be inconsistent, otherwise the FCC data are consistent.

[0056] In some embodiments, the step 2.3 includes:

[0057] When both FCC1 and FCC2 are valid and the signals are consistent, the data of FCC1 is selected as the voting value; otherwise, proceed to step three.

[0058] In some embodiments, the step three includes the following steps:

[0059] Step 3.1, judging the validity of the control box standby channel interface;

[0060] Step 3.2, perform consistency judgment on FCC2 and FCC3 data;

[0061] Step 3.3, select the FCC data voting value.

[0062] In some embodiments, the step 3.1 includes:

[0063] Step 3.1.1, the control box standby channel command channel and monitoring channel compare and monitor the two sets of FCC2 data received. If they are consistent, the FCC2 data directly collected by the command channel is used as the valid value. If they are inconsistent, the control box main channel command channel and monitoring channel use the FCC2 safety value as the FCC data voting value;

[0064] Step 3.2.2, the control box main control channel command channel and monitoring channel compare and monitor the two sets of FCC3 data received. When they are consistent, the FCC3 data directly collected by the command channel is used as the valid value. When they are inconsistent, the control box main control channel command channel and monitoring channel use the FCC3 safety value as the FCC data voting value.

[0065] In some embodiments, the step 3.2 includes:

[0066] Step 3.2.1, when the bus data sent by FCC2 and FCC3 are inconsistent in the mutual comparison monitoring, the fault counter is increased by 1, otherwise, the fault counter is decreased by 1;

[0067] Step 3.2.2, when the fault counter reaches 60, the FCC data are set to be inconsistent, otherwise the FCC data are consistent.

[0068] In some embodiments, the step 3.3 includes:

[0069] When both FCC2 and FCC3 are valid and the signals are consistent, the data of FCC3 is selected as the voting value; otherwise, the FCC3 safety value is output as the voting value.

[0070] The above is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present application shall be included in the protection scope of the present application. The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and variations can be made without departing from the technical principles of the present application, and these improvements and variations should also be regarded as the protection scope of the present application.

Claims

1. A double-triple redundancy redundancy management method, characterized in that: The steps include: Step 1: The engine integrated processing control box instructs the monitoring channel to cross-reference the collected FCC data; Step 2: Voting on the FCC data of the master control channel after the above cross processing, and judging the validity of the voting result. If the voting result is valid, the voting result is the FCC voting value. If the voting result is invalid, proceed to step 3. Step 3: vote on the FCC data of the backup control channel after the cross processing in step 1, and judge the validity of the voting result. If the voting result is valid, the voting result is the FCC voting value. If the voting result is invalid, the safety value is output as the FCC voting value. The engine integrated processing control box is in dual-redundancy mode, and the FCC is in triple-redundancy mode.

2. The double-triple redundancy redundancy management method according to claim 1, characterized in that: In the step 1, the control box command channel and the monitoring channel obtain FCC1, FCC2, and FCC3 data through internal crosstalk.

3. The double-triple redundancy redundancy management method according to claim 1, characterized in that: The voting step in step 2 includes: Step 2.1, determine the validity of the control box main control channel interface; Step 2.2, perform consistency check on FCC1 and FCC2 data; Step 2.3, select the FCC voting value.

4. The double-triple redundancy redundancy management method according to claim 3, characterized in that: The step 2.1 includes: Step 2.1.1, the control box main control channel command channel and monitoring channel compare and monitor the two sets of FCC1 data received. If they are consistent, the FCC1 data directly collected by the command channel is used as the valid value. If they are inconsistent, the control box main control channel command channel and monitoring channel use the FCC1 safety value as the FCC data voting value; Step 2.1.2, the control box main control channel command channel and monitoring channel compare and monitor the two sets of FCC2 data received. When they are consistent, the FCC2 data directly collected by the command channel is used as the valid value. When they are inconsistent, the control box main control channel command channel and monitoring channel use the FCC2 safety value as the FCC data voting value.

5. The double-triple redundancy redundancy management method according to claim 3, characterized in that: The step 2.2 includes: Step 2.2.1, perform mutual comparison monitoring of bus data sent by FCC1 and FCC2, if they are inconsistent, the fault counter is increased by 1, otherwise, the fault counter is decreased by 1; Step 2.2.2, when the fault counter reaches 60, the FCC data are set to be inconsistent, otherwise the FCC data are consistent.

6. The double-triple redundancy redundancy management method according to claim 3, characterized in that: The step 2.3 includes: When both FCC1 and FCC2 are valid and the signals are consistent, the data of FCC1 is selected as the voting value; otherwise, proceed to step three.

7. The double-triple redundancy redundancy management method according to claim 1, characterized in that: The step three comprises the following steps: Step 3.1, judging the validity of the control box standby channel interface; Step 3.2, perform consistency judgment on FCC2 and FCC3 data; Step 3.3, select the FCC data voting value.

8. The double-triple redundancy redundancy management method according to claim 7, characterized in that: The step 3.1 includes: Step 3.1.1, the control box standby channel command channel and monitoring channel compare and monitor the two sets of FCC2 data received. If they are consistent, the FCC2 data directly collected by the command channel is used as the valid value. If they are inconsistent, the control box main channel command channel and monitoring channel use the FCC2 safety value as the FCC data voting value; Step 3.2.2, the control box main control channel command channel and monitoring channel compare and monitor the two sets of FCC3 data received. When they are consistent, the FCC3 data directly collected by the command channel is used as the valid value. When they are inconsistent, the control box main control channel command channel and monitoring channel use the FCC3 safety value as the FCC data voting value.

9. The double-triple redundancy redundancy management method according to claim 7, characterized in that: The step 3.2 includes: Step 3.2.1, when the bus data sent by FCC2 and FCC3 are inconsistent in the mutual comparison monitoring, the fault counter is increased by 1, otherwise, the fault counter is decreased by 1; Step 3.2.2, when the fault counter reaches 60, the FCC data are set to be inconsistent, otherwise the FCC data are consistent.

10. The double-triple redundancy redundancy management method according to claim 7, characterized in that: The step 3.3 includes: When both FCC2 and FCC3 are valid and the signals are consistent, the data of FCC3 is selected as the voting value; otherwise, the FCC3 safety value is output as the voting value.

Images