Dynamic redundancy channel management method for avionics system

Abstract

The invention provides a dynamic redundancy channel management method for an avionics system, and relates to the technical field of avionics, and the method comprises the steps: a, setting a main channel in a dual-redundancy channel to be empty after equipment is powered on or reset; b, two paths of heartbeat information in the redundancy channel 1 and two paths of heartbeat information in the redundancy channel 2 are received according to a set period, the operation state of the corresponding redundancy channel is judged according to the heartbeat information, and abnormal count values are set for the redundancy channel 1 and the redundancy channel 2 respectively; c, performing arbitration according to the operation states of the redundancy channel 1 and the redundancy channel 2 and the abnormal count value of each channel, and determining the redundancy channel 1 or the redundancy channel 2 as a main channel; and d, repeatedly executing the step b and the step c according to a set period. The method is applied to display equipment of an aviation electromechanical system, a main channel can be quickly decided after a product is powered on, a response can be made in time when the main channel breaks down, a redundancy management decision is made, and the flight safety is improved.

Description

Technical Field

[0001] The present invention relates to the field of avionics technology, and in particular to a dynamic redundancy channel management method for an avionics system. Background Art

[0002] At present, in the field of avionics, the cockpits of domestic aircraft are gradually shifting from the electromechanical instrument cockpit stage to the integrated glass cockpit stage and the intelligent cockpit stage. The display equipment in the cockpit is highly comprehensive and highly integrated, and plays an increasingly important role in the avionics system. This puts higher requirements on the reliability of display equipment, and the dual-redundancy design of display equipment has emerged. However, the existing dual-redundancy channel management technology has relatively complex implementation logic, relatively long decision-making cycle, and relatively low execution efficiency. It fails to make redundancy switching decisions in time when a dual-redundancy main channel failure occurs, and it is difficult to meet the high real-time and high reliability requirements of cockpit display equipment. Summary of the invention

[0003] In view of this, an embodiment of the present application provides a dynamic redundancy channel management method for an avionics system, which is applied to an avionics system display device. The method can quickly determine the main channel after the product is powered on, and can respond in time when the main channel fails, make redundancy management decisions, and improve flight safety.

[0004] The embodiment of the present application provides the following technical solution: a dynamic redundancy channel management method for an avionics system, comprising:

[0005] Step a: After the device is powered on or reset, the main channel in the dual-redundancy channel is set to empty;

[0006] Step b, receiving two-way heartbeat information in redundancy channel 1 and two-way heartbeat information in redundancy channel 2 respectively according to a set period, judging the running state of the corresponding redundancy channel according to the heartbeat information, and setting abnormal count values ​​for the redundancy channel 1 and the redundancy channel 2 respectively;

[0007] Step c, arbitrating according to the operating status of the redundancy channel 1 and the redundancy channel 2, and the abnormal count value of each channel, and determining the redundancy channel 1 or the redundancy channel 2 as the main channel;

[0008] Step d: Repeat steps b and c according to the set cycle.

[0009] According to an embodiment of the present application, step c includes:

[0010] If the operation status of the redundancy channel 1 is normal, and the current main channel is the redundancy channel 1, no redundancy channel management decision is made;

[0011] If the operation status of the redundancy channel 1 is normal and the current main channel is empty, then the redundancy channel 1 is set as the main channel;

[0012] If the operating states of the redundancy channel 1 and the redundancy channel 2 are both normal, and the current main channel is the redundancy channel 2, no redundancy channel management decision is made.

[0013] According to an embodiment of the present application, step c also includes:

[0014] If the operation status of the redundancy channel 1 is normal, the operation status of the redundancy channel 2 is abnormal, and the current main channel is the redundancy channel 2, the abnormal count value of the redundancy channel 2 is greater than 3, and at the same time, it is not the first time to set the redundancy channel 1 as the main channel, then no redundancy channel management decision is made;

[0015] If the operation status of the redundancy channel 1 is normal, the operation status of the redundancy channel 2 is abnormal, and the current main channel is the redundancy channel 2, and the abnormal count value of the redundancy channel 2 is less than or equal to 3, no redundancy channel management decision is made;

[0016] If the operating status of the redundancy channel 1 is normal, the operating status of the redundancy channel 2 is abnormal, and the current main channel is the redundancy channel 2, the abnormal count value of the redundancy channel 2 is greater than 3, and at the same time, it is the first time to set the redundancy channel 1 as the main channel, then the redundancy channel 1 is set as the main channel.

[0017] According to an embodiment of the present application, step c also includes:

[0018] If the operation status of the redundancy channel 1 is abnormal, the operation status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 1, the abnormal count value of the redundancy channel 1 is greater than 3, and at the same time, it is not the first time to set the redundancy channel 2 as the main channel, then no redundancy channel management decision is made;

[0019] If the operation status of the redundancy channel 1 is abnormal, the operation status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 1, and the abnormal count value of the redundancy channel 1 is less than or equal to 3, no redundancy channel management decision is made;

[0020] If the operating status of the redundancy channel 1 is abnormal, the operating status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 1, the abnormal count value of the redundancy channel 1 is greater than 3, and at the same time, it is the first time to set the redundancy channel 2 as the main channel, then the redundancy channel 2 is set as the main channel.

[0021] According to an embodiment of the present application, step c also includes:

[0022] If the operation status of the redundancy channel 1 is abnormal, if the operation status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 2, no redundancy channel management decision is made;

[0023] If the operation status of the redundancy channel 1 is abnormal, if the operation status of the redundancy channel 2 is normal, and the current main channel is empty, the redundancy channel 2 is set as the main channel.

[0024] According to an embodiment of the present application, step c also includes:

[0025] If the operating status of the redundancy channel 1 and the redundancy channel 2 are both abnormal, no redundancy channel management decision is made.

[0026] Compared with the prior art, the beneficial effects that can be achieved by at least one of the above technical solutions adopted in the embodiments of this specification include at least: the embodiments of the present invention provide a simple and timely redundancy management solution for display devices with dynamic redundancy design in aircraft avionics systems, which can quickly determine the main channel after the product is powered on, and can respond in time when the main channel fails, quickly make redundancy management decisions, improve the reliability of display devices, improve redundancy management efficiency, and meet the high real-time requirements of highly intelligent display devices. In addition, the present invention has simple logic, fast decision response, convenient implementation, strong portability, and saves manpower development costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0028] Figure 1 is a schematic diagram of the architecture of a dynamic redundancy channel management method for an avionics system according to an embodiment of the present invention;

[0029] Figure 2 It is a schematic flow chart of a dynamic redundancy channel management method for an avionics system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0030] The embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0031] The following describes the implementation methods of the present application through specific examples, and those skilled in the art can easily understand other advantages and effects of the present application from the contents disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. The present application can also be implemented or applied through other different specific implementation methods, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present application. It should be noted that, in the absence of conflict, the following embodiments and the features in the embodiments can be combined with each other. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work belong to the scope of protection of the present application.

[0032] like Figure 1-Figure 2 As shown, an embodiment of the present invention provides a dynamic redundancy channel management method for an avionics system, comprising:

[0033] Step a: After the device is powered on or reset, the main channel in the dual-redundancy channel is set to empty;

[0034] Step b, receiving two-way heartbeat information in redundancy channel 1 and two-way heartbeat information in redundancy channel 2 respectively according to a set period, judging the running state of the corresponding redundancy channel according to the heartbeat information, and setting abnormal count values ​​for the redundancy channel 1 and the redundancy channel 2 respectively;

[0035] Step c, arbitrating according to the operating status of the redundancy channel 1 and the redundancy channel 2, and the abnormal count value of each channel, and determining the redundancy channel 1 or the redundancy channel 2 as the main channel;

[0036] Step d: Repeat steps b and c according to the set cycle.

[0037] The setting cycle in the embodiment of the present invention is 20 milliseconds. The embodiment of the present invention provides a method for quickly determining a main channel for dual redundant channels after the product is powered on, and can promptly and correctly make a redundancy switching decision when the main channel fails, meeting the high real-time requirements of highly intelligent display devices.

[0038] Step c in the embodiment of the present invention specifically includes the following situations:

[0039] (1) If the operating status of the redundancy channel 1 is normal and the current main channel is the redundancy channel 1, no redundancy channel management decision is made; (2) If the operating status of the redundancy channel 1 is normal and the current main channel is empty, redundancy channel 1 is set as the main channel; (3) If the operating status of the redundancy channel 1 and the redundancy channel 2 are both normal and the current main channel is the redundancy channel 2, no redundancy channel management decision is made. (4) If the operating status of the redundancy channel 1 is normal, the operating status of the redundancy channel 2 is abnormal, and the current main channel is the redundancy channel 2, the abnormal count value of the redundancy channel 2 is greater than 3, and at the same time, it is not the first time that the redundancy channel 1 is set as the main channel, then no redundancy channel management decision is made; (5) If the operating status of the redundancy channel 1 is normal, the operating status of the redundancy channel 2 is abnormal, and the current main channel is the redundancy channel 2, the abnormal count value of the redundancy channel 2 is less than or equal to 3, then no redundancy channel management decision is made; (6) If the operating status of the redundancy channel 1 is normal, the operating status of the redundancy channel 2 is abnormal, and the current main channel is the redundancy channel 2, the abnormal count value of the redundancy channel 2 is greater than 3, and at the same time, it is the first time that the redundancy channel 1 is set as the main channel, then the redundancy channel 1 is set as the main channel. (7) If the operating status of the redundancy channel 1 is abnormal, the operating status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 1, the abnormal count value of the redundancy channel 1 is greater than 3, and at the same time, it is not the first time to set the redundancy channel 2 as the main channel, then no redundancy channel management decision is made; (8) If the operating status of the redundancy channel 1 is abnormal, the operating status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 1, the abnormal count value of the redundancy channel 1 is less than or equal to 3, then no redundancy channel management decision is made; (9) If the operating status of the redundancy channel 1 is abnormal, the operating status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 1, the abnormal count value of the redundancy channel 1 is greater than 3, and at the same time, it is the first time to set the redundancy channel 2 as the main channel, then the redundancy channel 2 is set as the main channel. (10) If the operation status of the redundancy channel 1 is abnormal, if the operation status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 2, then no redundancy channel management decision is made; (11) If the operation status of the redundancy channel 1 is abnormal, if the operation status of the redundancy channel 2 is normal, and the current main channel is empty, then redundancy channel 2 is set as the main channel. (12) If the operation status of both the redundancy channel 1 and the redundancy channel 2 is abnormal, then no redundancy channel management decision is made.

[0040] The present invention is further described below in conjunction with the accompanying drawings and embodiments.

[0041] The elements involved in this embodiment that need to be planned in advance are as follows: Figure 1The three elements shown are: 2 external heartbeats in redundancy channel 1, 2 external heartbeats in redundancy channel 2, and main channel settings. The 2 external heartbeats in redundancy channel 1 and the 2 external heartbeats in redundancy channel 2 flow from the outside to the method of this embodiment, and the main channel setting element flows out from the method of this embodiment to the outside.

[0042] like Figure 2 As shown, the device operation of this embodiment includes the following steps:

[0043] Step 201: The device is powered on or reset, and the program starts running;

[0044] Step 202: The main channel in the dual redundancy is set to be empty;

[0045] Step 203: receiving two heartbeat signals A1 and A2 in channel 1;

[0046] Step 204: Determine whether the two heartbeat signals in step 203 exist. If either A1 or A2 exists, it is deemed to exist. If it exists, execute step 205. If not, execute step 206.

[0047] Step 205: Set channel 1 to be normal and clear the abnormal count of channel 1;

[0048] Step 206: The number of abnormalities of channel 1 increases by 1;

[0049] Step 207: receiving two heartbeat signals B1 and B2 in channel 2;

[0050] Step 208: Determine whether the two heartbeat signals in step 207 exist. If either B1 or B2 exists, it is deemed to exist. If it exists, execute step 209. If not, execute step 210.

[0051] Step 209: Set channel 2 to be normal and clear the abnormal count of channel 2;

[0052] Step 210: The number of abnormalities of channel 2 increases by 1;

[0053] Step 211: Determine whether channel 1 is normal; if channel 1 is normal, execute step 212; otherwise, execute step 218;

[0054] Step 212: determine whether the main channel is channel 1; if the main channel is channel 1, execute step 203; if the main channel is not channel 1, execute step 213;

[0055] Step 213: Determine whether the main channel is channel 2; if the main channel is channel 2, execute step 215; if the main channel is not channel 2, execute step 214;

[0056] Step 214: Determine whether the current power-on or reset sets channel 1 as the primary channel for the first time; if the current power-on or reset sets channel 1 as the primary channel for the first time, execute step 217; otherwise, execute step 203;

[0057] Step 215: Determine whether channel 2 is normal; if channel 2 is normal, execute step 203; otherwise, execute step 216;

[0058] Step 216: Determine whether the number of abnormalities of channel 2 is greater than 3; if the number of abnormalities of channel 2 is greater than 3, execute step 214; otherwise, execute step 203;

[0059] Step 217: Set channel 1 as the main channel;

[0060] Step 218: Determine whether channel 2 is normal; if channel 2 is normal, execute step 219; otherwise, execute step 203;

[0061] Step 219: Determine whether the main channel is channel 1; if the main channel is channel 1, execute step 220; otherwise, execute step 221;

[0062] Step 220: Determine whether the number of abnormalities of channel 1 is greater than 3; if the number of abnormalities of channel 1 is greater than 3, execute step 222; otherwise, execute step 203;

[0063] Step 221: determine whether the main channel is channel 2; if the main channel is channel 2, execute step 203; otherwise, execute step 222;

[0064] Step 222: Determine whether the current power-on or reset sets channel 2 as the primary channel for the first time; if the current power-on or reset sets channel 2 as the primary channel for the first time, execute step 223; otherwise, execute step 203;

[0065] Step 223: Set channel 2 as the main channel.

[0066] The embodiment of the present invention provides a redundancy management solution with strong simplicity and timely execution for a display device with dynamic redundancy design in an aircraft avionics system. The solution can improve the reliability of the display device and the efficiency of redundancy management. It has a simple architecture, fast decision response, convenient implementation, strong portability, and meets the high real-time requirements of highly intelligent display devices.

[0067] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A dynamic redundancy channel management method for an avionics system, characterized in that: include: Step a: After the device is powered on or reset, the main channel in the dual-redundancy channel is set to empty; Step b, receiving two-way heartbeat information in redundancy channel 1 and two-way heartbeat information in redundancy channel 2 respectively according to a set period, judging the running state of the corresponding redundancy channel according to the heartbeat information, and setting abnormal count values ​​for the redundancy channel 1 and the redundancy channel 2 respectively; Step c, arbitrating according to the operating status of the redundancy channel 1 and the redundancy channel 2, and the abnormal count value of each channel, and determining the redundancy channel 1 or the redundancy channel 2 as the main channel; Step d: Repeat steps b and c according to the set cycle.

2. The method for dynamic redundancy channel management for an avionics system according to claim 1, characterized in that: Step c includes: If the operation status of the redundancy channel 1 is normal, and the current main channel is the redundancy channel 1, no redundancy channel management decision is made; If the operation status of the redundancy channel 1 is normal and the current main channel is empty, then the redundancy channel 1 is set as the main channel; If the operating states of the redundancy channel 1 and the redundancy channel 2 are both normal, and the current main channel is the redundancy channel 2, no redundancy channel management decision is made.

3. The method for dynamic redundancy channel management for an avionics system according to claim 1, characterized in that: Step c also includes: If the operation status of the redundancy channel 1 is normal, the operation status of the redundancy channel 2 is abnormal, and the current main channel is the redundancy channel 2, the abnormal count value of the redundancy channel 2 is greater than 3, and at the same time, it is not the first time to set the redundancy channel 1 as the main channel, then no redundancy channel management decision is made; If the operation status of the redundancy channel 1 is normal, the operation status of the redundancy channel 2 is abnormal, and the current main channel is the redundancy channel 2, and the abnormal count value of the redundancy channel 2 is less than or equal to 3, no redundancy channel management decision is made; If the operating status of the redundancy channel 1 is normal, the operating status of the redundancy channel 2 is abnormal, and the current main channel is the redundancy channel 2, the abnormal count value of the redundancy channel 2 is greater than 3, and at the same time, it is the first time to set the redundancy channel 1 as the main channel, then the redundancy channel 1 is set as the main channel.

4. The method for dynamic redundancy channel management for an avionics system according to claim 1, characterized in that: Step c also includes: If the operation status of the redundancy channel 1 is abnormal, the operation status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 1, the abnormal count value of the redundancy channel 1 is greater than 3, and at the same time, it is not the first time to set the redundancy channel 2 as the main channel, then no redundancy channel management decision is made; If the operation status of the redundancy channel 1 is abnormal, the operation status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 1, and the abnormal count value of the redundancy channel 1 is less than or equal to 3, no redundancy channel management decision is made; If the operating status of the redundancy channel 1 is abnormal, the operating status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 1, the abnormal count value of the redundancy channel 1 is greater than 3, and at the same time, it is the first time to set the redundancy channel 2 as the main channel, then the redundancy channel 2 is set as the main channel.

5. The method for dynamic redundancy channel management for avionics system according to claim 1, characterized in that: Step c also includes: If the operation status of the redundancy channel 1 is abnormal, if the operation status of the redundancy channel 2 is normal, and the current main channel is the redundancy channel 2, no redundancy channel management decision is made; If the operation status of the redundancy channel 1 is abnormal, if the operation status of the redundancy channel 2 is normal, and the current main channel is empty, the redundancy channel 2 is set as the main channel.

6. The method for dynamic redundancy channel management for avionics system according to claim 1, characterized in that: Step c also includes: If the operating status of the redundancy channel 1 and the redundancy channel 2 are both abnormal, no redundancy channel management decision is made.

Images