Three-redundancy display control subsystem and method based on dual-redundancy improvement

Abstract

The invention provides a three-redundancy display control subsystem and method based on dual-redundancy improvement. The three-redundancy display control subsystem comprises two display control processing computers and an emergency display control computer. Each computer can complete the main functions of picture generation, control, data communication and the like of a main display of the display control subsystem, and the emergency display control computer can provide the functions of main information display and the like under the emergency condition; the three display control processing computers perform heartbeat message mutual transmission through discrete magnitude signals to complete information display and control function switching logic under three redundancies; the display control subsystem can process data of a high-speed bus, a medium-speed bus, a low-speed bus and the like, meanwhile, redundancy switching of an internal main processing computer of the display control subsystem can be guaranteed through the logic design of heartbeat mutual transmission, and the task reliability and safety of the display control subsystem in the flight process are guaranteed.

Description

Technical Field

[0001] This application belongs to the technical field of avionics, and specifically relates to a triple-redundancy display control sub-system and method based on dual-redundancy improvement. Background Art

[0002] In the flight missions of large two-pilot or multi-pilot crews, the composition of the display terminal and the controller terminal of the display control sub-system will be more complex. In the case of high-integration data with multiple interfaces and multiple bus data, the security requirements for the display control computer are gradually increasing. Generally, aircraft are equipped with a backup instrument system, but the information provided by this system is extremely limited. When an emergency occurs, it is impossible to provide effective information, which poses new requirements for the security and mission reliability of the display control sub-system.

[0003] As the task functions and display information undertaken by the display control sub-system become more concentrated and complex, dual redundancy has become difficult to meet the requirements of mission reliability. Summary of the Invention

[0004] The purpose of this application: To provide a triple-redundancy display control sub-system and control method based on dual-redundancy improvement, which is used for the redundancy design of driving the display terminal and receiving and processing the data of the control component terminal, and the management of display logic switching.

[0005] In the first aspect, this application provides a triple-redundancy display control sub-system based on dual-redundancy improvement, which includes two display control computers and one emergency display control computer;

[0006] Among them, the display control computer is the computer that realizes the display control function under normal use, and the emergency display control computer realizes the main display control function when the two display control computers fail; the two display control computers and one emergency display control computer transmit heartbeat messages to each other through discrete signals, which is used to realize the redundancy switching function.

[0007] Preferably, the emergency display control computer includes: a main processing module, a graphics display module, a power module, and an input / output module. Compared with the display control computer, it can greatly reduce the weight of the emergency display control computer, ensure all available data required by the pilot, and improve the security and reliability at the lowest cost. At the same time, due to the light design of the emergency display control computer, the overall power of the third-redundancy emergency display control computer can be reduced by more than 70% compared with the display control computer.

[0008] Preferably, each computer can complete the functions of generating, controlling, and data communication of the main display of the display control sub-system.

[0009] Preferably, the display control computers transmit heartbeat messages to each other through discrete signals to complete the information display and control function switching logic under triple redundancy.

[0010] Preferably, the display control subsystem can process data on high-speed buses, medium-speed buses, and low-speed buses. At the same time, through the logical design of heartbeat mutual transmission, it can ensure the redundancy switching of the internal main processing computer of the display control subsystem, and ensure the task reliability and safety of the display control subsystem during flight.

[0011] In a second aspect, the present application also provides a triple-redundancy display control method based on dual-redundancy improvement, and the method includes the following steps:

[0012] S0: Build a triple-redundancy display control subsystem based on dual-redundancy improvement, including two display control processing computers and one emergency display control computer; the display control processing computer is a computer for realizing the display control function under normal use, and the emergency display control computer is for realizing the main display control function when the two display control processing computers fail; the two display control processing computers and one emergency display control computer mutually transmit heartbeat messages through discrete quantities to realize the redundancy switching function;

[0013] S1: The display control processing computer and the emergency display control computer perform internal and external data transceiver processing through high-speed buses, medium-speed buses, and low-speed buses;

[0014] S2: A single display control processing computer can drive a full set of display terminals and controller terminals. The two display control processing computers mutually transmit heartbeat messages through discrete quantities. When one fails, the other takes over all the work;

[0015] S3: When neither of the two display control processing computers reports heartbeat messages to the emergency processing base computer in S2, the emergency display control computer takes over the degraded display work and takes over all display and control messages to improve the task reliability and safety of the display control subsystem.

[0016] Preferably, in the step S2, the specific steps are as follows: The two display control processing computers mutually transmit heartbeat messages, receive the messages of all controllers and process them. When one of the display control processing computers fails or malfunctions, the heartbeat information stops being sent to the other display control processing computer, and it takes over all the controller work.

[0017] Preferably, in the step S3, the specific steps are as follows: When the heartbeat message of one of the display control processing computers stops, the emergency processing computer starts to enter the hot standby state and can enter the degraded display work at any time. When both fail, it switches to the emergency processing computer to take over all display terminals and control terminal devices.

[0018] The present application has the following technical effects:

[0019] 1. The present invention provides a design and control method for a triple-redundancy display control subsystem framework based on dual-redundancy improvement, including two display control processing computers and one emergency display control computer; each computer can complete the main functions such as the generation, control, and data communication of the main display of the display control subsystem. Among them, the emergency display control computer can provide functions such as the display of main information in case of emergency; the three display control processing computers transmit heartbeat messages to each other through discrete signals to complete the switching logic of information display and control functions under triple-redundancy. This display control subsystem can realize the data processing of high-speed buses, medium-speed buses, and low-speed buses. At the same time, through the logical design of heartbeat mutual transmission, it can ensure the redundancy switching of the internal main processing computer of the display control subsystem, and ensure the task reliability and safety of the display control subsystem during flight.

[0020] 2. The design of the triple-redundancy display control subsystem based on dual-redundancy improvement adopted by the present invention can perform redundancy control management through the heartbeat messages between two display control processing computers and one emergency processing computer, and complete the function switching of redundancy management. Ensure the task reliability and safety of the display control subsystem and the avionics system.

[0021] 3. The emergency display control computer adopted in the third redundancy design of the present invention is light in weight and low in power consumption. It can achieve the third redundancy design at a very low cost, while taking into account the improvement of safety and reliability. The weight and power consumption are only less than 30% of the display control processing computer.

[0022] 4. The present invention has the characteristics of simple architecture design, high improvement of safety and task reliability, and strong system compatibility. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 It is the architecture diagram of the display control subsystem of the present invention example;

[0024] Figure 2 It is the architecture diagram of the display control processing computer of the present invention example;

[0025] Figure 3 It is the architecture diagram of the emergency display control computer of the present invention example;

[0026] Figure 4 It is the flow chart for realizing the redundancy switching of the emergency display control computer of the present invention example. DETAILED DESCRIPTION OF THE INVENTION

[0027] The present invention provides a triple-redundancy display control sub-system and method based on dual-redundancy improvement, including two display control processing computers and one emergency display control computer; each computer can complete the main functions such as the generation, control, and data communication of the main display of the display control sub-system, and the emergency display control computer can provide functions such as the display of main information in case of emergency; the three display control processing computers transmit heartbeat messages to each other through discrete signals to complete the switching logic of information display and control functions under triple redundancy. This display control sub-system can realize the data processing of high-speed buses, medium-speed buses, low-speed buses, etc. At the same time, through the logical design of heartbeat mutual transmission, it can ensure the redundancy switching of the internal main processing computer of the display control sub-system, and ensure the task reliability and safety of the display control sub-system during flight. The present invention has the characteristics of simple architecture design, high improvement in safety and task reliability, and strong system compatibility.

[0028] The technical solution adopted by the present invention for the technical problem is: a triple-redundancy display control sub-system based on dual-redundancy improvement, including two display control processing computers and one emergency display control computer; the display control processing computer is a computer for realizing the display control function under normal use, and the emergency display control computer is for realizing the main display control function when the two display control processing computers fail; the two display control processing computers and one emergency display control computer transmit heartbeat messages to each other through discrete quantities to realize the redundancy switching function; the emergency display control computer module is minimized, and both the weight and power can be reduced to less than 30% of the display control processing computer.

[0029] The graphics generation module is the core of the display generation of the display control processing computer, and can complete functions such as the generation, switching, and display control of the display through the data and instructions of the data transceiver module and the main processing module; the map generation module is the map-aided navigation function of the display control sub-system, and when functions such as map-aided navigation are required, it generates the required map display and sends it to the graphics generation module for display; the power supply module converts the input 28V DC power supply into the power supply required inside the module and performs functions such as integration, filtering, and surge protection design.

[0030] The display control processing computer consists of a main processing module, a data transceiver module, a graphics generation module, a map generation module, a video processing module, a power supply module, a motherboard, and a chassis; the emergency display control computer consists of a main processing module, a data transceiver module, a graphics generation module, a power supply module, a motherboard, and a chassis.

[0031] In other embodiments of the present application, a control method for a triple-redundancy display control sub-system based on dual-redundancy improvement includes the following steps:

[0032] S0: Build a triple-redundancy display control subsystem based on dual-redundancy improvement, including two display control processing computers and one emergency display control computer; the display control processing computer is a computer for realizing the display control function under normal use, and the emergency display control computer is a computer for realizing the main display control function when the two display control processing computers fail; the two display control processing computers and one emergency display control computer transmit heartbeat messages to each other through discrete quantities to realize the redundancy switching function;

[0033] S1: The display and control processing computer and the emergency display and control computer perform internal and external data reception and transmission through the high-speed bus, the medium-speed bus, and the low-speed bus;

[0034] S2: A single display and control processing computer can drive a full set of display terminals and controller terminals. Two display and control processing computers exchange heartbeat messages through discrete quantities. When one fails, the other takes over all the work.

[0035] S3: When the two display and control processing computers in S2 fail to report heartbeat messages to the emergency processing base computer, the emergency display and control computer takes over the downgraded display work and all display and control messages to improve the task reliability and safety of the display control subsystem.

[0036] Furthermore, in step S2, the specific steps are: the two display and control processing computers transmit heartbeat messages to each other, and receive and process messages from all controllers. When one of the display and control processing computers fails or malfunctions, the heartbeat information stops being sent to the other display and control processing computer, which takes over the work of all controllers.

[0037] Furthermore, the step S3 comprises the following specific steps: when the heartbeat message of one of the display and control processing computers stops, the emergency processing computer starts to enter the hot standby state and can enter the degraded display work at any time. When both computers fail, the emergency processing computer takes over all display terminals and control terminal devices.

[0038] See also Figures 1-4 The implementation of the present invention includes two display and control processing computers and one emergency display and control computer; each computer can complete the main functions of the display and control subsystem main display screen generation, control and data communication, among which the emergency display and control computer can provide functions such as main information display in emergency situations; the three display and control processing computers transmit heartbeat messages to each other through discrete quantity signals to complete the information display and control function switching logic under three redundancies. The display control subsystem can realize data processing of high-speed bus, medium-speed bus and low-speed bus, and at the same time, through the logic design of heartbeat transmission, it can ensure the redundancy switching of the internal main processing computer of the display and control subsystem, and ensure the task reliability and safety of the display control subsystem during flight.

[0039] The main processing module is the core processing module of the display and control processing computer. It completes the control and other functions of display and control by processing the data from the data transceiver module;

[0040] The data transceiver module completes the collection and transmission processing of data by accessing high-speed buses, medium-speed buses, and low-speed buses.

[0041] The graphics generation module is the core for generating the screen of the display and control processing computer. It can complete functions such as screen generation, switching, and screen control through the data and instructions of the data transceiver module and the main processing module;

[0042] The map generation module provides the map-assisted navigation function for the display control subsystem. When functions such as map-assisted navigation are required, it generates the required map screen and sends it to the graphics generation module for display;

[0043] The power supply module converts the input 28V DC power supply into the power supply required inside the module and performs protection functions such as integration, filtering, and surge protection design.

[0044] The triple-redundancy display control subsystem based on dual-redundancy improvement consists of two display and control processing computers and one emergency display and control computer. Information interaction is carried out through discrete heartbeat signals to transmit their working status information.

[0045] The display and control processing computer and the emergency display and control computer receive external data and controller data through external communication interfaces (high-speed buses, medium-speed buses, low-speed buses). After being processed by the computer, the corresponding video is sent to each terminal display. At the same time, according to the internally set logical relationship, the messages sent externally are sent out to ensure that there will be no repeated control messages or other messages.

[0046] a) The two display and control processing computers transmit heartbeat messages to each other, receive and process the messages of all controllers. When one of the display and control processing computers fails or malfunctions, the heartbeat information stops being sent to the other display and control processing computer, and it takes over all the controller work.

[0047] b) When the heartbeat message of one of the display and control processing computers stops, the emergency processing computer starts and enters the hot standby state, and can enter the degraded display work at any time. When both fail, it switches to the emergency processing computer to take over all the display terminals and control terminal devices.

Claims

1. A triple-redundancy display control subsystem based on double-redundancy improvement, characterized in that: It includes two display and control processing computers and one emergency display and control computer; Among them, the display and control processing computer is the computer that realizes the display control function under normal use, and the emergency display and control computer realizes the main display control function in the event of failure of the two display and control processing computers; the two display and control processing computers and one emergency display and control computer transmit heartbeat messages to each other through discrete quantities to realize the redundancy switching function.

2. The system according to claim 1, characterized in that The emergency display and control computer includes: main processing module, graphic display module, power module, input and output module. Compared with the display and control processing computer, it can greatly reduce the weight of the emergency display and control computer, ensure that all data required by the pilot are available, and achieve safety and reliability improvement at the lowest cost. At the same time, due to the light design of the emergency display and control computer, the third-degree redundancy emergency display and control computer can reduce the power of the whole machine by more than 70% compared with the display and control processing computer.

3. The system according to claim 2, characterized in that Each computer can complete the screen generation, control and data communication functions of the main display of the display control subsystem.

4. The system according to claim 2, characterized in that The display and control processing computers transmit heartbeat messages to each other through discrete quantity signals, completing the information display and control function switching logic under three degrees of redundancy.

5. The system according to claim 2, characterized in that The display control subsystem can realize data processing of high-speed bus, medium-speed bus and low-speed bus. At the same time, through the logic design of heartbeat transmission, it can ensure the redundant switching of the internal main processing computer of the display control subsystem, thereby ensuring the mission reliability and safety of the display control subsystem during flight.

6. A triple redundancy display control method based on double redundancy improvement, characterized in that: The method comprises the following steps: S0: Build a triple-redundancy display control subsystem based on dual-redundancy improvement, including two display control processing computers and one emergency display control computer; the display control processing computer is a computer for realizing the display control function under normal use, and the emergency display control computer is a computer for realizing the main display control function when the two display control processing computers fail; the two display control processing computers and one emergency display control computer transmit heartbeat messages to each other through discrete quantities to realize the redundancy switching function; S1: The display and control processing computer and the emergency display and control computer perform internal and external data reception and transmission through the high-speed bus, the medium-speed bus, and the low-speed bus; S2: A single display and control processing computer can drive a full set of display terminals and controller terminals. Two display and control processing computers exchange heartbeat messages through discrete quantities. When one fails, the other takes over all the work. S3: When the two display and control processing computers in S2 fail to report heartbeat messages to the emergency processing base computer, the emergency display and control computer takes over the downgraded display work and all display and control messages to improve the task reliability and safety of the display control subsystem.

7. The method according to claim 6, characterized in that: In step S2, the specific steps are: the two display and control processing computers transmit heartbeat messages to each other, and receive and process messages from all controllers. When one of the display and control processing computers fails or malfunctions, the heartbeat information stops being sent to the other display and control processing computer, which takes over the work of all controllers.

8. The method according to claim 6, characterized in that: The specific steps of step S3 are as follows: when the heartbeat message of one of the display and control processing computers stops, the emergency processing computer starts to enter the hot standby state and can enter the degraded display work at any time. When both computers fail, the emergency processing computer takes over all display terminals and control terminal devices.

Images