Redundancy control method and system for an electric pump and transmission system

Abstract

The application belongs to the field of electromechanical control, and discloses a redundancy control method and system for an electric pump and a transmission system, which comprises the following steps: collecting machine state signals, flight control system state signals, and first and second hydraulic pressures of each sub-hydraulic system in a hydraulic system in real time; outputting an electric pump shutdown instruction and a hydraulic pressure logic judgment instruction according to the machine state signals through a machine state threshold and a first electric pump control logic; shutting down the electric pump according to the electric pump shutdown instruction; obtaining the flight control system state signals, the first and second hydraulic pressures, and automatically controlling each electric pump through a low pressure threshold and a pressure safety threshold, a second electric pump control logic, a hydraulic pipeline protection mechanism, and an electric pump protection mechanism. The application can automatically control the opening of each electric pump, and can also protect the hydraulic passage, thereby ensuring flight safety.

Description

TECHNICAL FIELD

[0001] The present application belongs to the field of electromechanical control, and relates to the technical field of electric pump and transmission system control, in particular to a redundancy control method and system for electric pump and transmission system. BACKGROUND

[0002] The electric pump in the aircraft system is used to provide hydraulic or liquid power to the transmission system to further drive and control various mechanisms such as landing gear, rudder control, etc. on the aircraft. Generally, in order to ensure the safety of the aircraft, the transmission system such as the hydraulic system usually adopts double redundancy or higher redundancy for automatic control.

[0003] The architecture of the automatic control system is complex, and when the automatic control system itself is abnormal, it may cause various unpredictable failures and risks, for example, when the data source is abnormal or the electric pump control logic is abnormal, it may cause continuous error to open or close the electric pump, the electric pump further provides error hydraulic power to the hydraulic system, causing the hydraulic system to be damaged by overpressure or the mechanism to be affected by underpressure. Furthermore, when all electric pumps are started synchronously, it is easy to cause excessive transient current, which causes unstable power supply on the aircraft or damage to the electric pump, which also affects flight safety. SUMMARY

[0004] In order to solve the technical problems that the electric pump and transmission system controlled by the traditional automatic control method are prone to cause the hydraulic system to be damaged by overpressure or the mechanism to be affected by underpressure, and affect flight safety, etc., the present application discloses a redundancy control method for electric pump and transmission system, which comprises the following steps:

[0005] S4, real-time acquisition of on-board state signals, flight control system state signals and current hydraulic pressures of each sub-hydraulic system in the hydraulic system, wherein the current hydraulic pressures include first hydraulic pressure and second hydraulic pressure;

[0006] S5, according to the on-board state signals, outputting electric pump shutdown instructions and hydraulic pressure logic judgment instructions through on-board state threshold and first electric pump control logic, and shutting down the electric pump connected to the sub-hydraulic system according to the electric pump shutdown instructions;

[0007] S6, according to the hydraulic pressure logic judgment instructions, acquiring the flight control system state signals, the first hydraulic pressure and the second hydraulic pressure, and automatically controlling the electric pump connected to each sub-hydraulic system through the low pressure threshold and the pressure safety threshold, the second electric pump control logic, the hydraulic pipeline protection mechanism and the electric pump protection mechanism.

[0008] Further, the redundancy control method further comprises:

[0009] S1, setting the on-machine state threshold, when the on-machine state signal is less than the on-machine state threshold, outputting an electric pump shutdown instruction, and when the on-machine state signal is greater than or equal to the on-machine state threshold, outputting a hydraulic pressure logic judgment instruction, and constructing the first electric pump control logic.

[0010] Further, the redundancy control method further comprises:

[0011] S21, given the low pressure threshold and the pressure safety threshold, acquiring the first hydraulic pressure according to the hydraulic pressure logic judgment instruction, comparing the first hydraulic pressure with the low pressure threshold, if the first hydraulic pressure is less than or equal to the low pressure threshold, outputting a start hydraulic line protection instruction, and according to the start hydraulic line protection instruction, outputting a start flag or a termination start flag for the electric pump through the second hydraulic pressure, the pressure safety threshold and the hydraulic line protection mechanism, outputting a start electric pump protection instruction according to the start flag, controlling the electric pump start time through the electric pump protection mechanism according to the electric pump protection instruction, and reporting an alarm information according to the termination start flag, if the first hydraulic pressure is greater than the low pressure threshold, outputting an on-machine controlled mechanism logic judgment instruction;

[0012] S22, acquiring the flight control system state signal according to the on-machine controlled mechanism logic judgment instruction, judging whether the controlled mechanism needs pressure according to the flight control system state signal, if it is judged that pressure is needed, outputting a start hydraulic line protection instruction, and according to the start hydraulic line protection instruction, outputting a start flag or a termination start flag for the electric pump through the second hydraulic pressure, the pressure safety threshold and the hydraulic line protection mechanism, outputting a start electric pump protection instruction according to the start flag, controlling the electric pump start time through the electric pump protection mechanism according to the electric pump protection instruction, and reporting an alarm information according to the termination start flag, and constructing the second electric pump control logic.

[0013] Further, the redundancy control method further comprises:

[0014] S31, acquiring the second hydraulic pressure according to the start hydraulic line protection instruction, comparing the second hydraulic pressure with the pressure safety threshold, if the second hydraulic pressure is greater than or equal to the pressure safety threshold, outputting a shutdown electric pump instruction, a termination start flag and an overpressure alarm signal to the second electric pump control logic, if the second hydraulic pressure is less than the pressure safety threshold, outputting a start flag and a start electric pump protection instruction to the second electric pump control logic, and constructing the hydraulic line protection mechanism.

[0015] Furthermore, in step S31 above, after the hydraulic pipeline protection command is output, a timer is started. If the second electric pump control logic does not receive the electric pump prohibition flag or the electric pump start flag output by the hydraulic pipeline protection mechanism within a set time period, the timeout emergency mechanism is activated, and the electric pump is controlled to start according to the electric pump start command output by the second electric pump control logic based on the timeout emergency mechanism.

[0016] Furthermore, the redundancy control method also includes:

[0017] S32. Define the priority order for starting the electric pumps connected to all the sub-hydraulic systems, give the data waiting time corresponding to each priority level in the priority order, and identify the priority level of the electric pumps connected to the sub-hydraulic system corresponding to the hydraulic pressure according to the priority order;

[0018] The electric pump protection mechanism is constructed by starting the count based on the start signal of the next higher priority level and the start counter of the priority level. When the count value reaches the data waiting time corresponding to the priority level and the start signal of the next higher priority level is received, the electric pump start command is output.

[0019] Furthermore, the onboard control signals include landing gear signals and control surface status signals, the onboard status signals include ground speed signals, and the controlled mechanisms include landing gear and control surfaces.

[0020] Further, in steps S21 and S22 above, determining whether the controlled mechanism requires pressure based on the flight control system status signal includes:

[0021] The landing gear signal is used to determine whether the landing gear has a pressure requirement. If the landing gear signal is a retraction signal or a landing signal, it is determined that the landing gear has a pressure requirement.

[0022] The system determines whether the system has a pressure requirement based on the system status signal. If the system status signal is a signal to change the system position, it is determined that the system has a pressure requirement.

[0023] When any one or both of the control surfaces and the landing gear have a pressure requirement, it is determined that the controlled mechanism needs pressure.

[0024] This invention also provides a redundancy control system for electric pumps and transmission systems. The redundancy control system includes an acquisition module, a data scheduling module, a monitoring module, and multiple electric pump control modules. Each electric pump control module includes a first logic judgment module, a second logic judgment module, and an electric pump protection module. All the electric pump control modules are connected in sequence to form a closed-loop control architecture.

[0025] Each of the electric pump control modules is connected to an electric pump. The output of the acquisition module is connected to the input of the data scheduling module and the monitoring module. Both the data scheduling module and the monitoring module are connected to each of the electric pump control modules.

[0026] Furthermore, the hydraulic system has at least two sub-hydraulic systems, each of which is equipped with an electric pump control module. The acquisition module is connected to the hydraulic pipeline of the sub-hydraulic system via two acquisition channels.

[0027] Compared with the prior art, the beneficial effects that at least one technical solution adopted in the embodiments of this specification can achieve include at least:

[0028] 1. By automating the control of the electric pump on the hydraulic line, the pilot does not need to spend a lot of energy on controlling the electric pump during the mission, which significantly reduces the pilot's workload.

[0029] 2. By employing an electric pump control mechanism based on different aircraft conditions to automatically control the on / off state of the electric pumps, the system avoids situations where the electric pumps are constantly running, significantly reducing aircraft energy consumption and improving energy efficiency. Simultaneously, by designing electric pump protection logic, the system optimizes the starting sequence of the electric pumps when needed on board, preventing simultaneous activation of electric pumps and avoiding issues such as reduced aircraft power supply and electric pump damage. This enhances aircraft power supply safety and extends the service life of the electric pumps.

[0030] 3. The hydraulic transmission system is designed with two levels of protection. The monitoring module continuously and independently monitors the status of each hydraulic pipeline. When the pressure of the hydraulic pipeline is too high, it can output an overpressure alarm to the electric pump control module. When the internal fault of the electric pump control module is caused by data source or logic abnormality, the electric pump can be shut down in time. Otherwise, if a more serious situation occurs, such as a hardware failure of the control module driver, the monitoring module can act as a second line of defense to directly shut down the corresponding electric pump, thereby enhancing the protection effect.

[0031] 4. The design of the control system for multiple electric pump control modules enables independent and precise control of each electric pump, avoiding single-point failures caused by control module failures, thus providing high safety and improving flight safety.

[0032] 5. An overtime emergency mechanism was designed based on the hydraulic pipeline protection mechanism. In extreme cases where the electric pump control module fails to receive the indication signal from the monitoring module, the electric pump can be started normally, ensuring the integrity and safety of the aircraft functions. Attached Figure Description

[0033] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0034] Figure 1 This is a flowchart of a redundancy control method for an electric pump and transmission system disclosed in an embodiment of the present invention.

[0035] Figure 2 This is an execution flowchart of the redundancy control method for electric pumps and transmission systems disclosed in an embodiment of the present invention;

[0036] Figure 3 This is an execution flowchart of the hydraulic pipeline protection mechanism and the electric pump protection mechanism disclosed in the embodiments of the present invention;

[0037] Figure 4 The operation flow of the hydraulic pipeline protection mechanism disclosed in the embodiments of the present invention is as follows;

[0038] Figure 5 This is an architecture diagram of a redundancy control system for an electric pump and transmission system disclosed in an embodiment of the present invention;

[0039] Figure 6 This is a diagram showing the relationship between the monitoring module and the electric pump control module disclosed in an embodiment of the present invention.

[0040] Among them, 101 is the data acquisition module; 102 is the data scheduling module; 103 is the monitoring module; 104 is the electric pump control module; and 105 is the power supply module. Detailed Implementation

[0041] The embodiments of this application will now be described in detail with reference to the accompanying drawings.

[0042] The following specific examples illustrate the implementation of this application. Those skilled in the art can easily understand other advantages and effects of this application from the content disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. This application can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this application. It should be noted that, in the absence of conflict, the following embodiments and features of the embodiments can be combined with each other. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0043] This invention discloses a redundancy control method for electric pumps and transmission systems, see [link to relevant documentation]. Figure 1 and Figure 2 As shown, the redundancy control method includes the following steps:

[0044] S4. Real-time acquisition of onboard status signals, flight control system status signals, and current hydraulic pressure of each sub-hydraulic system in the hydraulic system, wherein the current hydraulic pressure includes a first hydraulic pressure and a second hydraulic pressure;

[0045] S5. Based on the machine status signal, output an electric pump shutdown command and a hydraulic pressure logic judgment command through the machine status threshold and the first electric pump control logic, and shut down the electric pump connected to the sub-hydraulic system according to the electric pump shutdown command.

[0046] S6. Based on the hydraulic pressure logic judgment instruction, obtain the flight control system status signal, the first hydraulic pressure and the second hydraulic pressure, and automatically control the electric pump connected to each of the sub-hydraulic systems by using the second electric pump control logic, hydraulic pipeline protection mechanism and electric pump protection mechanism through the low pressure threshold and pressure safety threshold.

[0047] Further, see Figure 2 As shown, the redundancy control method further includes:

[0048] S1. Construct the first electric pump control logic, including: setting the machine status threshold; when the machine status signal is less than the machine status threshold, outputting an electric pump shutdown command; when the machine status signal is greater than or equal to the machine status threshold, outputting a hydraulic pressure logic judgment command.

[0049] Further, see Figure 2 As shown, the redundancy control method further includes:

[0050] S2. Construct the control logic for the second electric pump, including:

[0051] S21. Given the low pressure threshold and the pressure safety threshold, obtain the first hydraulic pressure according to the hydraulic pressure logic judgment instruction, and compare the first hydraulic pressure with the low pressure threshold;

[0052] S211. If the first hydraulic pressure is less than or equal to the low pressure threshold, output a command to start hydraulic pipeline protection.

[0053] S212. Based on the hydraulic pipeline protection start command, the electric pump is started by the second hydraulic pressure, the pressure safety threshold and the hydraulic pipeline protection mechanism, and a start flag or a stop start flag is output.

[0054] S2121. Output a start electric pump protection command according to the start flag, and control the start time of the electric pump according to the electric pump protection mechanism based on the electric pump protection command.

[0055] S2122. Report alarm information based on the termination start flag; if the first hydraulic pressure is greater than the low pressure threshold, output a logic judgment instruction for the controlled mechanism on the machine.

[0056] S22. Obtain the flight control system status signal according to the logic judgment instruction of the onboard controlled mechanism, and determine whether the controlled mechanism needs pressure based on the flight control system status signal;

[0057] S221. If it is determined that there is a pressure demand, output a hydraulic pipeline protection start command. Based on the hydraulic pipeline protection start command, the electric pump is started by judging the second hydraulic pressure, the pressure safety threshold and the hydraulic pipeline protection mechanism, and outputting a start flag or a stop start flag.

[0058] S222. Output a start electric pump protection command according to the start flag, control the start time of the electric pump through the electric pump protection mechanism according to the electric pump protection command, and report alarm information according to the stop start flag.

[0059] Further, see Figure 3 and Figure 4 As shown, the redundancy control method further includes:

[0060] S31. Obtain the second hydraulic pressure according to the hydraulic pipeline protection activation command, and compare the second hydraulic pressure with the pressure safety threshold:

[0061] S311. If the second hydraulic pressure is greater than or equal to the pressure safety threshold, output a shutdown command for the electric pump, a termination start flag and an overpressure alarm signal to the second electric pump control logic.

[0062] S312. If the second hydraulic pressure is less than the pressure safety threshold, output a start flag and a start electric pump protection command to the second electric pump control logic.

[0063] Furthermore, in step S31 above, after the hydraulic pipeline protection command is output, a timer is started. If the second electric pump control logic does not receive the electric pump prohibition flag or the electric pump start flag output by the hydraulic pipeline protection mechanism within a set time period, the timeout emergency mechanism is activated, and the electric pump is controlled to start according to the electric pump start command output by the second electric pump control logic based on the timeout emergency mechanism.

[0064] Further, see Figure 3 As shown, the redundancy control method further includes:

[0065] S32. Define the priority order for starting the electric pumps connected to all the sub-hydraulic systems, give the data waiting time corresponding to each priority level in the priority order, and identify the priority level of the electric pumps connected to the sub-hydraulic system corresponding to the hydraulic pressure according to the priority order;

[0066] The electric pump protection mechanism is constructed by starting the count based on the start signal of the next higher priority level and the start counter of the priority level. When the count value reaches the data waiting time corresponding to the priority level and the start signal of the next higher priority level is received, the electric pump start command is output.

[0067] Furthermore, the onboard control signals include landing gear signals and control surface status signals, the onboard status signals include ground speed signals, and the controlled mechanisms include landing gear and control surfaces.

[0068] Further, in steps S21 and S22 above, determining whether the controlled mechanism requires pressure based on the flight control system status signal includes:

[0069] The landing gear signal is used to determine whether the landing gear has a pressure requirement. If the landing gear signal is a retraction signal or a landing signal, it is determined that the landing gear has a pressure requirement.

[0070] The system determines whether the system has a pressure requirement based on the system status signal. If the system status signal is a signal to change the system position, it is determined that the system has a pressure requirement.

[0071] When any one or both of the control surfaces and the landing gear have a pressure requirement, it is determined that the controlled mechanism needs pressure.

[0072] Based on the same inventive concept, this invention also provides a redundancy control system for an electric pump and transmission system, as described in the following embodiments. The redundancy control system for the electric pump and transmission system is used to implement the aforementioned redundancy control method for the electric pump and transmission system. As used below, the terms "unit" or "module" can refer to a combination of software and / or hardware that performs a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated.

[0073] Among them, see Figure 5 and Figure 6 As shown, the redundancy control system includes an acquisition module 101, a data scheduling module 102, a monitoring module 103, and multiple electric pump control modules 104. Each electric pump control module 104 includes a first logic judgment module, a second logic judgment module, and an electric pump protection module. All the electric pump control modules 104 are connected in sequence to form a closed-loop control architecture.

[0074] Each of the electric pump control modules 104 is connected to an electric pump. The output of the acquisition module 101 is connected to the input of the data scheduling module 102 and the monitoring module 103. Both the data scheduling module 102 and the monitoring module 103 are connected to each of the electric pump control modules 104.

[0075] Furthermore, the hydraulic system has at least two sub-hydraulic systems, each of which is equipped with an electric pump control module 104, and the acquisition module 101 is connected to the hydraulic pipeline of the sub-hydraulic system via two acquisition channels.

[0076] Further, see Figure 5 As shown, the protection system also includes a power supply module 105. The input terminal of the power supply module 105 is connected to the on-board power supply, and the output terminal is connected to the acquisition module 101, the data scheduling module 102, the monitoring module 103 and each of the electric pump control modules 104. The power supply module 105 supplies power to the acquisition module 101, the data scheduling module 102, the monitoring module 103 and the electric pump control module 104.

[0077] 1. By automating the control of the electric pump on the hydraulic line, the pilot does not need to spend a lot of energy on controlling the electric pump during the mission, which significantly reduces the pilot's workload.

[0078] 2. By adopting an electric pump control mechanism based on different aircraft conditions to automatically control the opening and closing of the electric pump, the situation of keeping the electric pump running throughout the entire process is avoided, significantly reducing aircraft energy consumption and improving energy utilization efficiency. At the same time, by designing electric pump protection logic, the starting sequence of the electric pump when it is needed on the aircraft is optimized, avoiding problems such as reduced aircraft power supply and electric pump damage caused by starting electric pumps simultaneously, thus improving aircraft power supply safety and the service life of the electric pump.

[0079] 3. The hydraulic transmission system is designed with two levels of protection. The monitoring module continuously and independently monitors the status of each hydraulic pipeline. When the pressure of the hydraulic pipeline is too high, it can output an overpressure alarm to the electric pump control module. When the internal fault of the electric pump control module is caused by data source or logic abnormality, the electric pump can be shut down in time. Otherwise, if a more serious situation occurs, such as a hardware failure of the control module driver, the monitoring module can act as a second line of defense to directly shut down the corresponding electric pump, thereby enhancing the protection effect.

[0080] 4. The design of the control system for multiple electric pump control modules enables independent and precise control of each electric pump, avoiding single-point failures caused by control module failures, thus providing high safety and improving flight safety.

[0081] 5. An overtime emergency mechanism was designed based on the hydraulic pipeline protection mechanism. In extreme cases where the electric pump control module fails to receive the indication signal from the monitoring module, the electric pump can be started normally, ensuring the integrity and safety of the aircraft functions.

[0082] In this embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements any of the above-described redundancy control methods for electric pumps and transmission systems.

[0083] Specifically, the computer device can be a computer terminal, a server, or a similar computing device.

[0084] In this embodiment, a computer-readable storage medium is provided, which stores a computer program that executes any of the above-described redundancy control methods for electric pumps and transmission systems.

[0085] Specifically, computer-readable storage media include both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer-readable storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transfer medium that can be used to store information accessible by a computing device. As defined herein, computer-readable storage media do not include transient computer-readable media, such as modulated data signals and carrier waves.

[0086] Obviously, those skilled in the art should understand that the modules or steps of the above-described embodiments of the present invention can be implemented using general-purpose computing devices. They can be centralized on a single computing device or distributed across a network of multiple computing devices. Optionally, they can be implemented using computer-executable program code, thereby storing them in a storage device for execution by a computing device. In some cases, the steps shown or described can be performed in a different order than those presented here, or they can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, the embodiments of the present invention are not limited to any particular hardware and software combination.

[0087] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, various modifications and variations can be made to the embodiments of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A redundancy control method for electric pumps and transmission systems, characterized in that, The redundancy control method includes: Real-time acquisition of onboard status signals, flight control system status signals, and current hydraulic pressure of each sub-hydraulic system in the hydraulic system, wherein the current hydraulic pressure includes a first hydraulic pressure and a second hydraulic pressure; Based on the machine status signal, the machine status threshold and the first electric pump control logic output an electric pump shutdown command and a hydraulic pressure logic judgment command, and shut down the electric pump connected to the sub-hydraulic system according to the electric pump shutdown command; Based on the hydraulic pressure logic judgment command, the flight control system status signal, the first hydraulic pressure, and the second hydraulic pressure are obtained. Through the low pressure threshold and the pressure safety threshold, the electric pump connected to each of the sub-hydraulic systems is automatically controlled using the second electric pump control logic, the hydraulic pipeline protection mechanism, and the electric pump protection mechanism.

2. The redundancy control method for electric pumps and transmission systems according to claim 1, characterized in that, The redundancy control method further includes: Set the machine status threshold. When the machine status signal is less than the machine status threshold, output an electric pump shutdown command. When the machine status signal is greater than or equal to the machine status threshold, output a hydraulic pressure logic judgment command to construct the first electric pump control logic.

3. The redundancy control method for electric pumps and transmission systems according to claim 2, characterized in that, The redundancy control method further includes: Given the low-pressure threshold and the pressure safety threshold, the first hydraulic pressure is obtained according to the hydraulic pressure logic judgment instruction, and the first hydraulic pressure is compared with the low-pressure threshold; if the first hydraulic pressure is less than or equal to the low-pressure threshold, a hydraulic pipeline protection start instruction is output; according to the hydraulic pipeline protection start instruction, the electric pump is judged for start by the second hydraulic pressure, the pressure safety threshold, and the hydraulic pipeline protection mechanism, and a start flag or a stop start flag is output; according to the start flag, an electric pump protection start instruction is output; according to the electric pump protection instruction, the electric pump start time is controlled by the electric pump protection mechanism; an alarm information is reported according to the stop start flag; if the first hydraulic pressure is greater than the low-pressure threshold, a controlled mechanism logic judgment instruction is output. The flight control system status signal is obtained according to the logic judgment instruction of the onboard controlled mechanism. Based on the flight control system status signal, it is determined whether the controlled mechanism needs pressure. If pressure is required, a hydraulic pipeline protection start command is output. Based on the hydraulic pipeline protection start command, the electric pump is started by judging the second hydraulic pressure, the pressure safety threshold, and the hydraulic pipeline protection mechanism, and a start flag or a stop start flag is output. Based on the start flag, an electric pump protection start command is output. Based on the electric pump protection command, the electric pump start time is controlled by the electric pump protection mechanism. Based on the stop start flag, an alarm information is reported, and the second electric pump control logic is constructed.

4. The redundancy control method for electric pumps and transmission systems according to claim 3, characterized in that, The redundancy control method further includes: The second hydraulic pressure is obtained according to the hydraulic pipeline protection start command. The second hydraulic pressure is compared with the pressure safety threshold. If the second hydraulic pressure is greater than or equal to the pressure safety threshold, the electric pump stop command, the start termination flag and the overpressure alarm signal are output to the second electric pump control logic. If the second hydraulic pressure is less than the pressure safety threshold, the start flag and the electric pump protection start command are output to the second electric pump control logic to construct the hydraulic pipeline protection mechanism.

5. The redundancy control method for electric pumps and transmission systems according to claim 4, characterized in that, After the hydraulic pipeline protection command is output, a timer is started. If the second electric pump control logic does not receive the electric pump prohibition flag or the electric pump start flag output by the hydraulic pipeline protection mechanism within a set time period, the timeout emergency mechanism is activated. According to the timeout emergency mechanism, the electric pump is controlled to start using the electric pump start command output by the second electric pump control logic.

6. The redundancy control method for electric pumps and transmission systems according to claim 4, characterized in that, The redundancy control method further includes: Define the priority order for starting the electric pumps connected to all the sub-hydraulic systems, give the data waiting time corresponding to each priority level in the priority order, and identify the priority level of the electric pumps connected to the sub-hydraulic system corresponding to the hydraulic pressure according to the priority order; The electric pump protection mechanism is constructed by starting the count based on the start signal of the next higher priority level and the start counter of the priority level. When the count value reaches the data waiting time corresponding to the priority level and the start signal of the next higher priority level is received, the electric pump start command is output.

7. The redundancy control method for electric pumps and transmission systems according to any one of claims 3 to 6, characterized in that, The flight control system status signals include landing gear signals and control surface status signals, the onboard status signals include ground speed signals, and the controlled mechanisms include landing gear and control surfaces.

8. The redundancy control method for electric pumps and transmission systems according to claim 7, characterized in that, Determining whether the controlled mechanism requires pressure based on the flight control system status signal includes: The landing gear signal is used to determine whether the landing gear has a pressure requirement. If the landing gear signal is a retraction signal or a landing signal, it is determined that the landing gear has a pressure requirement. The system determines whether the system has a pressure requirement based on the system status signal. If the system status signal is a signal to change the system position, it is determined that the system has a pressure requirement. When any one or both of the control surfaces and the landing gear have a pressure requirement, it is determined that the controlled mechanism needs pressure.

9. A redundancy control system for an electric pump and transmission system, used to execute the redundancy control method according to any one of claims 1 to 8, characterized in that, The redundancy control system includes an acquisition module, a data scheduling module, a monitoring module, and multiple electric pump control modules. The electric pump control module includes a first logic judgment module, a second logic judgment module, and an electric pump protection module. All the electric pump control modules are connected in sequence to form a closed-loop control architecture. Each electric pump control module is connected to one electric pump. The output of the acquisition module is connected to the input of the data scheduling module and the monitoring module. The data scheduling module and the monitoring module are both connected to each electric pump control module.

10. The redundancy control system for an electric pump and transmission system according to claim 9, characterized in that, The hydraulic system has at least two sub-hydraulic systems, each of which is equipped with an electric pump control module. The acquisition module is connected to the hydraulic pipeline of the sub-hydraulic system via two acquisition channels.

Images