Multi-redundancy control method and system for electric pump and transmission system

Abstract

The invention belongs to the field of electromechanical control, and discloses a redundancy control method and system for an electric pump and a transmission system.The redundancy control method comprises the steps that onboard state signals, flight control system state signals and first hydraulic pressure and second hydraulic pressure of each hydraulic sub-system in a hydraulic system are collected in real time; an electric pump closing instruction and a hydraulic pressure logic judgment instruction are output through an on-board state threshold value and first electric pump control logic according to the on-board state signal, and the electric pump is closed according to the electric pump closing instruction; and a flight control system state signal, the first hydraulic pressure and the second hydraulic pressure are obtained, and each electric pump is automatically controlled through a low-pressure threshold value and a pressure safety threshold value by adopting second electric pump control logic, a hydraulic pipeline protection mechanism and an electric pump protection mechanism. According to the invention, the starting of each electric pump can be automatically controlled, a hydraulic passage can be protected, and the flight safety is ensured.

Description

Technical Field

[0001] The present invention belongs to the field of electromechanical control, and relates to the technical field of electric pump and transmission system control, and in particular to a redundancy control method and system for an electric pump and transmission system. Background Art

[0002] The electric pump in the aircraft system is used to provide hydraulic or liquid power to the transmission system to further drive and control the operation of various mechanisms on the aircraft, such as the landing gear and rudder control. In order to ensure the safety of the aircraft, the transmission system, such as the hydraulic system, usually adopts double redundancy or higher redundancy for automatic control.

[0003] The automation control system has a complex architecture. When the automation control system itself is abnormal, it may cause various unpredictable failures and risks. For example, when the data source is abnormal or the electric pump control logic is abnormal, it may cause the electric pump to be turned on or off incorrectly continuously. The electric pump further provides incorrect hydraulic power to the hydraulic system, causing the hydraulic system to be over-pressurized and damaged, or under-pressurized and affecting the normal operation of the mechanism. Furthermore, when all electric pumps are started synchronously, it is often easy to have excessive transient current, resulting in unstable power supply or damage to the electric pump, which will also affect flight safety. Summary of the invention

[0004] In order to solve the technical problems that the electric pump and transmission system are easily damaged by overpressure of the hydraulic system or underpressure affects the normal operation of the mechanism due to the control by the traditional automatic control method, and affects the flight safety, the present invention discloses a redundancy control method for the electric pump and transmission system, and the redundancy control method comprises the following steps:

[0005] S4, collecting in real time the onboard status signal, the flight control system status signal and the current hydraulic pressure of each sub-hydraulic system in the hydraulic system, wherein the current hydraulic pressure includes a first hydraulic pressure and a second hydraulic pressure;

[0006] S5, according to the onboard status signal, outputting an electric pump shutdown instruction and a hydraulic pressure logic judgment instruction through an onboard status threshold and a first electric pump control logic, and shutting down the electric pump connected to the sub-hydraulic system according to the electric pump shutdown instruction;

[0007] S6. Acquire the flight control system status signal, the first hydraulic pressure and the second hydraulic pressure according to the hydraulic pressure logic judgment instruction, and automatically control the electric pump connected to each of the sub-hydraulic systems by using the second electric pump control logic, the hydraulic pipeline protection mechanism and the electric pump protection mechanism through the low pressure threshold and the pressure safety threshold.

[0008] Furthermore, the redundancy control method further comprises:

[0009] S1. Set the on-board status threshold. When the on-board status signal is less than the on-board status threshold, output the electric pump shutdown instruction. When the on-board status signal is greater than or equal to the on-board status threshold, output the hydraulic pressure logic judgment instruction to construct the first electric pump control logic.

[0010] Furthermore, the redundancy control method further comprises:

[0011] S21, given the low pressure threshold and the pressure safety threshold, obtain the first hydraulic pressure according to the hydraulic pressure logic judgment instruction, and compare the first hydraulic pressure and the low pressure threshold; if the first hydraulic pressure is less than or equal to the low pressure threshold, output a hydraulic pipeline protection start instruction; according to the hydraulic pipeline protection start instruction, judge and output a start flag or a start termination flag for the electric pump through the second hydraulic pressure, the pressure safety threshold and the hydraulic pipeline protection mechanism, output a start electric pump protection instruction according to the start flag, and control the start time of the electric pump through the electric pump protection mechanism according to the electric pump protection instruction; report an alarm message according to the start termination flag; if the first hydraulic pressure is greater than the low pressure threshold, output a controlled mechanism logic judgment instruction on the machine;

[0012] S22. Acquire the flight control system status signal according to the onboard controlled mechanism logic judgment instruction, judge whether the controlled mechanism needs pressure according to the flight control system status signal, output a start hydraulic pipeline protection instruction if it is judged that there is a pressure demand, start the electric pump according to the start hydraulic pipeline protection instruction through the second hydraulic pressure, the pressure safety threshold and the hydraulic pipeline protection mechanism, judge and output a start flag or a stop start flag, output a start electric pump protection instruction according to the start flag, control the start time of the electric pump through the electric pump protection mechanism according to the electric pump protection instruction; report alarm information according to the stop start flag, and construct the second electric pump control logic.

[0013] Furthermore, the redundancy control method further comprises:

[0014] S31. Obtain the second hydraulic pressure according to the hydraulic pipeline protection start instruction, compare the second hydraulic pressure with the pressure safety threshold, and if the second hydraulic pressure is greater than or equal to the pressure safety threshold, output the electric pump shutdown instruction, the start termination flag and the overpressure alarm signal to the second electric pump control logic; if the second hydraulic pressure is less than the pressure safety threshold, output the start flag and the electric pump protection start instruction to the second electric pump control logic to construct the hydraulic pipeline protection mechanism.

[0015] Furthermore, in the above step S31, the timing starts after the hydraulic pipeline protection start instruction is output. When the second electric pump control logic does not receive the electric pump prohibition start flag or the electric pump start flag output by the hydraulic pipeline protection mechanism within a set time period, the timeout emergency mechanism is started, and the electric pump start instruction output by the second electric pump control logic is used to control the start of the electric pump according to the timeout emergency mechanism.

[0016] Furthermore, the redundancy control method further comprises:

[0017] S32, defining a priority order for starting the electric pumps connected to all the sub-hydraulic systems, giving a data waiting time corresponding to each priority level in the priority order, and identifying the priority level of the electric pumps connected to the sub-hydraulic systems corresponding to the hydraulic pressure according to the priority order;

[0018] The counting is started according to the start signal of the priority level before the priority level and the priority level start counter. When the count value reaches the data waiting time corresponding to the priority level and the start signal of the priority level before the priority level is received, the electric pump start instruction is output to construct the electric pump protection mechanism.

[0019] Furthermore, the onboard control signal includes a landing gear signal and a control surface status signal, the onboard status signal includes a ground speed signal, and the controlled mechanism includes a landing gear and a control surface.

[0020] Furthermore, in the above step S21 and step S22, judging whether the controlled mechanism needs pressure according to the flight control system state signal includes:

[0021] Determining whether the landing gear has a pressure requirement according to the landing gear signal, and if the landing gear signal is a retraction signal or a landing signal, determining that the landing gear has a pressure requirement;

[0022] Determine whether the rudder surface has a pressure requirement according to the rudder surface state signal, and if the rudder surface state signal is a rudder surface position change signal, determine that the rudder surface has a pressure requirement;

[0023] When any one or both of the control surface and the landing gear have pressure requirements, it is determined that the controlled mechanism needs pressure.

[0024] The embodiment of the present invention further provides a redundancy control system for an electric pump and a transmission system, the redundancy control system comprises an acquisition module, a data scheduling module, a monitoring module and a plurality of electric pump control modules, the electric pump control module comprises a first logic judgment module, a second logic judgment module and an electric pump protection module, all of the electric pump control modules are sequentially connected to form a closed loop control architecture;

[0025] Each of the electric pump control modules is respectively connected to an electric pump, the output end of the acquisition module is connected to the input ends of the data scheduling module and the monitoring module, and the data scheduling module and the monitoring module are both connected to each of the electric pump control modules.

[0026] Furthermore, the hydraulic system has at least two sub-hydraulic systems, each of the sub-hydraulic systems is provided with an electric pump control module, and the acquisition module is connected to the hydraulic pipelines of the sub-hydraulic systems via two acquisition pathways.

[0027] Compared with the prior art, the at least one technical solution adopted in the embodiments of this specification can achieve the following beneficial effects:

[0028] 1. By automating the electric pump on the hydraulic pipeline, the pilot does not need to spend a lot of energy on controlling the electric pump during the mission execution, which significantly reduces the pilot's workload;

[0029] 2. By using the electric pump control mechanism to automatically control the opening and closing of the electric pump according to different aircraft states, the situation of turning on the electric pump throughout the whole process is avoided, which significantly reduces the energy consumption of the aircraft and improves the energy utilization efficiency. At the same time, by designing the electric pump protection logic, the start-up sequence of the electric pump when it is needed on the aircraft is optimized, avoiding the problems of reducing the aircraft power supply and damaging the electric pump caused by starting the electric pump at the same time, thereby improving the aircraft power supply safety and the service life of the electric pump.

[0030] 3. Two-level protection is designed for the hydraulic transmission system. The monitoring module is designed to continuously and independently monitor the status of each hydraulic pipeline. When the safety risk of excessive pressure in the hydraulic pipeline occurs, the overpressure alarm information can be output to the electric pump control module. When the internal fault of the electric pump control module is caused by the data source or logic abnormality, the electric pump can be shut down in time. Otherwise, if a more serious situation occurs, such as a hardware failure of the control module drive, the monitoring module can directly shut down the corresponding electric pump as the second line of defense to enhance the protection effect;

[0031] 4. The design of the control system for multiple electric pump control modules can achieve independent and accurate control of each electric pump to avoid single point failure caused by control module failure, with high security and improved flight safety;

[0032] 5. A timeout emergency mechanism is designed based on the hydraulic pipeline protection mechanism. In the extreme case that the electric pump control module fails to receive the indication signal from the monitoring module, the electric pump can be started normally to ensure the integrity and safety of the aircraft functions. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0034] Figure 1 A flowchart of a redundancy control method for an electric pump and a transmission system disclosed in an embodiment of the present invention;

[0035] Figure 2 It is an execution flow chart of the redundancy control method for an electric pump and a transmission system disclosed in an embodiment of the present invention;

[0036] Figure 3 It is an execution flow chart of the hydraulic pipeline protection mechanism and the electric pump protection mechanism disclosed in the embodiment of the present invention;

[0037] Figure 4 The operating process of the hydraulic pipeline protection mechanism disclosed in the embodiment of the present invention;

[0038] Figure 5 It is a structural diagram of a redundancy control system for an electric pump and a transmission system disclosed in an embodiment of the present invention;

[0039] Figure 6 A diagram showing the relationship between the monitoring module and the electric pump control module disclosed in an embodiment of the present invention;

[0040] Among them, 101 is a collection module; 102 is a data scheduling module; 103 is a monitoring module; 104 is an electric pump control module; 105 is a power supply module. DETAILED DESCRIPTION

[0041] The embodiments of the present application are described in detail below with reference to the accompanying drawings.

[0042] The following describes the implementation methods of the present application through specific specific examples, and those skilled in the art can easily understand other advantages and effects of the present application from the content disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. The present application can also be implemented or applied through other different specific implementation methods, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present application. It should be noted that the following embodiments and the features of the embodiments can be combined with each other in the absence of conflict. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work belong to the scope of protection of the present application.

[0043] The present invention discloses a redundancy control method for an electric pump and a transmission system, see Figure 1 and Figure 2 As shown, the redundancy control method comprises the following steps:

[0044] S4, collecting in real time the onboard status signal, the flight control system status signal and the current hydraulic pressure of each sub-hydraulic system in the hydraulic system, wherein the current hydraulic pressure includes a first hydraulic pressure and a second hydraulic pressure;

[0045] S5, according to the onboard status signal, outputting an electric pump shutdown instruction and a hydraulic pressure logic judgment instruction through an onboard status threshold and a first electric pump control logic, and shutting down the electric pump connected to the sub-hydraulic system according to the electric pump shutdown instruction;

[0046] S6. Acquire the flight control system status signal, the first hydraulic pressure and the second hydraulic pressure according to the hydraulic pressure logic judgment instruction, and automatically control the electric pump connected to each of the sub-hydraulic systems by using the second electric pump control logic, the hydraulic pipeline protection mechanism and the electric pump protection mechanism through the low pressure threshold and the pressure safety threshold.

[0047] Further, see Figure 2 As shown, the redundancy control method further includes:

[0048] S1. Constructing the first electric pump control logic, including: setting the on-board status threshold, when the on-board status signal is less than the on-board status threshold, outputting an electric pump shutdown instruction, and when the on-board status signal is greater than or equal to the on-board status threshold, outputting a hydraulic pressure logic judgment instruction.

[0049] Further, see Figure 2 As shown, the redundancy control method further includes:

[0050] S2, constructing the second electric pump control logic, including:

[0051] S21, given the low pressure threshold and the pressure safety threshold, obtaining the first hydraulic pressure according to the hydraulic pressure logic judgment instruction, and comparing the first hydraulic pressure with the low pressure threshold;

[0052] S211, if the first hydraulic pressure is less than or equal to the low pressure threshold, outputting a command to start hydraulic pipeline protection;

[0053] S212, according to the hydraulic pipeline protection start instruction, the electric pump is started and judged by the second hydraulic pressure, the pressure safety threshold and the hydraulic pipeline protection mechanism to output a start mark or a start termination mark;

[0054] S2121, outputting a start-up electric pump protection instruction according to the start-up flag, and controlling the start-up time of the electric pump through the electric pump protection mechanism according to the electric pump protection instruction;

[0055] S2122, reporting an alarm message according to the termination start mark; if the first hydraulic pressure is greater than the low pressure threshold, outputting a logic judgment instruction of the controlled mechanism on the machine;

[0056] S22, acquiring the flight control system status signal according to the onboard controlled mechanism logic judgment instruction, and judging whether the controlled mechanism needs pressure according to the flight control system status signal;

[0057] S221, if it is determined that there is a pressure demand, a hydraulic pipeline protection start instruction is output, and according to the hydraulic pipeline protection start instruction, the electric pump is started and judged by the second hydraulic pressure, the pressure safety threshold and the hydraulic pipeline protection mechanism, and a start flag or a start termination flag is output;

[0058] S222, outputting a start electric pump protection instruction according to the start mark, controlling the start time of the electric pump through the electric pump protection mechanism according to the electric pump protection instruction; and reporting alarm information according to the end start mark.

[0059] Further, see Figure 3 and Figure 4 As shown, the redundancy control method further includes:

[0060] S31, acquiring the second hydraulic pressure according to the hydraulic pipeline protection start instruction, and comparing the second hydraulic pressure with the pressure safety threshold:

[0061] S311, if the second hydraulic pressure is greater than or equal to the pressure safety threshold, outputting an electric pump shutdown instruction, a start termination flag and an overpressure alarm signal to the second electric pump control logic;

[0062] S312: If the second hydraulic pressure is less than the pressure safety threshold, output a start flag and an electric pump protection start instruction to the second electric pump control logic.

[0063] Furthermore, in the above step S31, the timing starts after the hydraulic pipeline protection start instruction is output. When the second electric pump control logic does not receive the electric pump prohibition start flag or the electric pump start flag output by the hydraulic pipeline protection mechanism within a set time period, the timeout emergency mechanism is started, and the electric pump start instruction output by the second electric pump control logic is used to control the start of the electric pump according to the timeout emergency mechanism.

[0064] Further, see Figure 3 As shown, the redundancy control method further includes:

[0065] S32, defining a priority order for starting the electric pumps connected to all the sub-hydraulic systems, giving a data waiting time corresponding to each priority level in the priority order, and identifying the priority level of the electric pumps connected to the sub-hydraulic systems corresponding to the hydraulic pressure according to the priority order;

[0066] The counting is started according to the start signal of the priority level before the priority level and the priority level start counter. When the count value reaches the data waiting time corresponding to the priority level and the start signal of the priority level before the priority level is received, the electric pump start instruction is output to construct the electric pump protection mechanism.

[0067] Furthermore, the onboard control signal includes a landing gear signal and a control surface status signal, the onboard status signal includes a ground speed signal, and the controlled mechanism includes a landing gear and a control surface.

[0068] Furthermore, in the above step S21 and step S22, judging whether the controlled mechanism needs pressure according to the flight control system state signal includes:

[0069] Determining whether the landing gear has a pressure requirement according to the landing gear signal, and if the landing gear signal is a retraction signal or a landing signal, determining that the landing gear has a pressure requirement;

[0070] Determine whether the rudder surface has a pressure requirement according to the rudder surface state signal, and if the rudder surface state signal is a rudder surface position change signal, determine that the rudder surface has a pressure requirement;

[0071] When any one or both of the control surface and the landing gear have pressure requirements, it is determined that the controlled mechanism needs pressure.

[0072] Based on the same inventive concept, a redundancy control system for an electric pump and a transmission system is also provided in an embodiment of the present invention, as described in the following embodiments. The redundancy control system for an electric pump and a transmission system is used to implement the above-mentioned redundancy control method for an electric pump and a transmission system. As used below, the term "unit" or "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceived.

[0073] Among them, see Figure 5 and Figure 6 As shown, the redundancy control system includes an acquisition module 101, a data scheduling module 102, a monitoring module 103 and multiple electric pump control modules 104. The electric pump control module 104 includes a first logic judgment module, a second logic judgment module and an electric pump protection module. All the electric pump control modules 104 are connected in sequence to form a closed-loop control architecture.

[0074] Each of the electric pump control modules 104 is respectively connected to an electric pump, the output end of the acquisition module 101 is connected to the input ends of the data scheduling module 102 and the monitoring module 103 , and the data scheduling module 102 and the monitoring module 103 are both connected to each of the electric pump control modules 104 .

[0075] Furthermore, the hydraulic system has at least two sub-hydraulic systems, each of the sub-hydraulic systems is provided with an electric pump control module 104, and the acquisition module 101 is connected to the hydraulic pipelines of the sub-hydraulic system via two acquisition paths.

[0076] Further, see Figure 5 As shown, the protection system also includes a power supply module 105, the input end of the power supply module 105 is connected to the onboard power supply, and the output end is connected to the acquisition module 101, the data scheduling module 102, the monitoring module 103 and each of the electric pump control modules 104, and the power supply module 105 supplies power to the acquisition module 101, the data scheduling module 102, the monitoring module 103 and the electric pump control module 104.

[0077] 1. By automating the electric pump on the hydraulic pipeline, the pilot does not need to spend a lot of energy on controlling the electric pump during the mission execution, which significantly reduces the pilot's workload;

[0078] 2. By using the electric pump control mechanism to automatically control the opening and closing of the electric pump according to different aircraft states, the situation of turning on the electric pump throughout the whole process is avoided, which significantly reduces the energy consumption of the aircraft and improves the energy utilization efficiency. At the same time, by designing the electric pump protection logic, the start-up sequence of the electric pump when it is needed on the aircraft is optimized, avoiding the problems of reducing the aircraft power supply and damaging the electric pump caused by starting the electric pumps at the same time, thereby improving the aircraft power supply safety and the service life of the electric pump;

[0079] 3. Two-level protection is designed for the hydraulic transmission system. The monitoring module is designed to continuously and independently monitor the status of each hydraulic pipeline. When the safety risk of excessive pressure in the hydraulic pipeline occurs, the overpressure alarm information can be output to the electric pump control module. When the internal fault of the electric pump control module is caused by the data source or logic abnormality, the electric pump can be shut down in time. Otherwise, if a more serious situation occurs, such as a hardware failure of the control module drive, the monitoring module can directly shut down the corresponding electric pump as the second line of defense to enhance the protection effect;

[0080] 4. The design of the control system for multiple electric pump control modules can achieve independent and accurate control of each electric pump to avoid single point failure caused by control module failure, with high security and improved flight safety;

[0081] 5. A timeout emergency mechanism is designed based on the hydraulic pipeline protection mechanism. In the extreme case that the electric pump control module fails to receive the indication signal from the monitoring module, the electric pump can be started normally to ensure the integrity and safety of the aircraft functions.

[0082] In this embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, any of the above-mentioned redundancy control methods for an electric pump and a transmission system is implemented.

[0083] Specifically, the computer device may be a computer terminal, a server or a similar computing device.

[0084] In this embodiment, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program for executing any of the above-mentioned redundancy control methods for an electric pump and a transmission system.

[0085] Specifically, computer-readable storage media include permanent and non-permanent, removable and non-removable media that can store information by any method or technology. Information can be computer-readable instructions, data structures, program modules or other data. Examples of computer-readable storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable storage media does not include transitory media such as modulated data signals and carrier waves.

[0086] Obviously, those skilled in the art should understand that the modules or steps of the above-mentioned embodiments of the present invention can be implemented by a general computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, and optionally, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order from that here, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. In this way, the embodiments of the present invention are not limited to any specific combination of hardware and software.

[0087] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the embodiments of the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A redundancy control method for an electric pump and a transmission system, characterized in that: The redundancy control method comprises: Real-time acquisition of onboard status signals, flight control system status signals, and current hydraulic pressure of each sub-hydraulic system in the hydraulic system, wherein the current hydraulic pressure includes a first hydraulic pressure and a second hydraulic pressure; According to the onboard status signal, an electric pump shut-down instruction and a hydraulic pressure logic judgment instruction are output through an onboard status threshold and a first electric pump control logic, and the electric pump connected to the sub-hydraulic system is shut down according to the electric pump shut-down instruction; The flight control system status signal, the first hydraulic pressure and the second hydraulic pressure are obtained according to the hydraulic pressure logic judgment instruction, and the electric pump connected to each sub-hydraulic system is automatically controlled by using the second electric pump control logic, the hydraulic pipeline protection mechanism and the electric pump protection mechanism through the low pressure threshold and the pressure safety threshold.

2. The redundancy control method for an electric pump and a transmission system according to claim 1, characterized in that: The redundancy control method further comprises: The on-board status threshold is set. When the on-board status signal is less than the on-board status threshold, an electric pump shutdown instruction is output. When the on-board status signal is greater than or equal to the on-board status threshold, a hydraulic pressure logic judgment instruction is output to construct the first electric pump control logic.

3. The redundancy control method for an electric pump and a transmission system according to claim 2, characterized in that: The redundancy control method further comprises: Given the low pressure threshold and the pressure safety threshold, the first hydraulic pressure is obtained according to the hydraulic pressure logic judgment instruction, and the first hydraulic pressure and the low pressure threshold are compared; if the first hydraulic pressure is less than or equal to the low pressure threshold, a hydraulic pipeline protection start instruction is output; according to the hydraulic pipeline protection start instruction, the electric pump is started and judged to output a start flag or a start termination flag through the second hydraulic pressure, the pressure safety threshold and the hydraulic pipeline protection mechanism, and a start electric pump protection instruction is output according to the start flag, and the start time of the electric pump is controlled through the electric pump protection mechanism according to the electric pump protection instruction; an alarm message is reported according to the start termination flag; if the first hydraulic pressure is greater than the low pressure threshold, an on-board controlled mechanism logic judgment instruction is output; The flight control system status signal is obtained according to the onboard controlled mechanism logic judgment instruction, and whether the controlled mechanism needs pressure is judged according to the flight control system status signal; if it is judged that there is a pressure demand, a hydraulic pipeline protection start instruction is output; according to the hydraulic pipeline protection start instruction, the electric pump is started through the second hydraulic pressure, the pressure safety threshold and the hydraulic pipeline protection mechanism to judge and output a start flag or a start termination flag; according to the start flag, an electric pump protection start instruction is output; according to the electric pump protection instruction, the start time of the electric pump is controlled through the electric pump protection mechanism; according to the electric pump protection instruction, an alarm message is reported, and the second electric pump control logic is constructed.

4. The redundancy control method for an electric pump and a transmission system according to claim 2, characterized in that: The redundancy control method further comprises: The second hydraulic pressure is obtained according to the hydraulic pipeline protection start instruction, and the second hydraulic pressure is compared with the pressure safety threshold. If the second hydraulic pressure is greater than or equal to the pressure safety threshold, the electric pump shutdown instruction, the start termination flag and the overpressure alarm signal are output to the second electric pump control logic; if the second hydraulic pressure is less than the pressure safety threshold, the start flag and the electric pump protection start instruction are output to the second electric pump control logic to construct the hydraulic pipeline protection mechanism.

5. The redundancy control method for an electric pump and a transmission system according to claim 4, characterized in that: The timing starts after the hydraulic pipeline protection start instruction is output. When the second electric pump control logic does not receive the electric pump start prohibition flag or the electric pump start flag output by the hydraulic pipeline protection mechanism within a set time period, the timeout emergency mechanism is started. According to the timeout emergency mechanism, the electric pump start instruction output by the second electric pump control logic is used to control the start of the electric pump.

6. The redundancy control method for an electric pump and a transmission system according to claim 4, characterized in that: The redundancy control method further comprises: defining a priority order for starting the electric pumps connected to all the sub-hydraulic systems, giving a data waiting time corresponding to each priority level in the priority order, and identifying the priority level of the electric pumps connected to the sub-hydraulic systems corresponding to the hydraulic pressure according to the priority order; The counting is started according to the start signal of the priority level before the priority level and the priority level start counter. When the count value reaches the data waiting time corresponding to the priority level and the start signal of the priority level before the priority level is received, the electric pump start instruction is output to construct the electric pump protection mechanism.

7. The redundancy control method for an electric pump and a transmission system according to any one of claims 3 to 6, characterized in that: The onboard control signal includes a landing gear signal and a control surface status signal, the onboard status signal includes a ground speed signal, and the controlled mechanism includes a landing gear and a control surface.

8. The redundancy control method for an electric pump and a transmission system according to claim 7, characterized in that: Judging whether the controlled mechanism needs pressure according to the flight control system state signal includes: Determining whether the landing gear has a pressure requirement according to the landing gear signal, and if the landing gear signal is a retraction signal or a landing signal, determining that the landing gear has a pressure requirement; Determine whether the rudder surface has a pressure requirement according to the rudder surface state signal, and if the rudder surface state signal is a rudder surface position change signal, determine that the rudder surface has a pressure requirement; When any one or both of the control surface and the landing gear have pressure requirements, it is determined that the controlled mechanism needs pressure.

9. A redundancy control system for an electric pump and transmission system, characterized in that: The redundancy control system includes an acquisition module, a data scheduling module, a monitoring module and a plurality of electric pump control modules, wherein the electric pump control module includes a first logic judgment module, a second logic judgment module and an electric pump protection module; All the electric pump control modules are connected in sequence to form a closed-loop control architecture, each of the electric pump control modules is connected to an electric pump, the output end of the acquisition module is connected to the input end of the data scheduling module and the monitoring module, and the data scheduling module and the monitoring module are both connected to each of the electric pump control modules.

10. The redundancy control system for an electric pump and transmission system according to claim 9, characterized in that: The hydraulic system has at least two sub-hydraulic systems, each of which is provided with an electric pump control module, and the acquisition module is connected to the hydraulic pipeline of the sub-hydraulic system via two acquisition passages.

Images