Semi-physical fault test system and test method for aero-engine control system

Abstract

The invention belongs to the technical field of aero-engine tests, and particularly relates to a semi-physical fault test system and test method for an aero-engine control system. The test system comprises a semi-physical tester and a fault simulation device. The input end of the fault simulation device is connected with the output end of the semi-physical tester, and the output end of the fault simulation device is connected with the input end of the aero-engine control system; the fault simulation device is used for carrying out simulation of signal cable electrical faults, communication faults and fault recovery on output signals of the semi-physical tester. The system provided by the invention has various functions, can realize the contents of band resistive short circuit of any signal to a power supply, band resistive short circuit, adjustable impedance of any signal and the like, and can simulate fault modes of various signal periodic changes of input signals of an electronic controller and the like.

Description

Technical Field

[0001] The present invention belongs to the technical field of aero-engine test technology, and particularly relates to a semi-physical fault test system and a test method for an aero-engine control system. Background Art

[0002] The aero-engine control system is a key unit to ensure the normal operation of the engine, and its performance and reliability are directly related to flight safety. During actual use, faults such as sensor failure, actuator failure, and electronic device failure may occur in the control system. After the fault occurs, the impact assessment on flight safety is a major task for the aero-engine control system.

[0003] Conducting control system fault tests in the real aircraft and engine environment is not only costly but also extremely risky, and it is difficult to comprehensively cover all possible fault modes and working conditions. Currently, the existing fault simulation means have limitations and cannot accurately simulate complex actual fault situations, resulting in an incomplete and inaccurate assessment of the fault response ability of the control system and making it difficult to meet the increasing reliability requirements of aero-engines. Summary of the Invention

[0004] The present invention provides a semi-physical fault test system and a test method for an aero-engine control system. The system can implement fault modes such as open circuit, virtual short circuit, virtual open circuit, and short circuit between signals, and based on this system, a fault injection method based on a fault analysis model, safety impact, etc. is provided.

[0005] One technical solution of the present invention is as follows: A semi-physical fault test system for an aero-engine control system, characterized by comprising: a semi-physical tester and a fault simulation device; The input end of the fault simulation device is connected to the output end of the semi-physical tester, and the output end of the fault simulation device is connected to the input end of the aero-engine control system; The fault simulation device is used to simulate signal cable electrical faults, communication faults, and fault recovery for the output signal of the semi-physical tester.

[0006] Further, the fault simulation device includes: an input data connector, an output data connector, a plurality of first connecting wires, a plurality of second connecting wires, a variable resistance mechanism, a plurality of third connecting wires, two fourth connecting wires, and a controller; One end of all the first connecting wires is connected to the input data connector, the other end of all the first connecting wires is connected to the output data connector, and a first control switch is provided on each of the first connecting wires; One end of each of the second connection lines is connected to the input data connector, and the other end of each of the second connection lines is connected to one end of the variable resistance mechanism. A second control switch is provided on each of the second connection lines; One end of each of the third connection lines is connected to the other end of the variable resistance mechanism, and the other end of each of the third connection lines is connected to the output data connector. A third control switch is provided on each of the third connection lines; One end of each of the fourth connection lines is connected to the other end of the variable resistance mechanism. The other end of the first fourth connection line is connected to the working power supply and is provided with a power connection switch, and the other end of the second fourth connection line is connected to the signal ground and is provided with a ground connection switch; The variable resistance mechanism and all the first control switches, second control switches, third control switches, ground connection switches, and power connection switches are controlled by the controller.

[0007] Further, the number of the first connection lines, second connection lines, and third connection lines is the same as the number of pins in the input data connector and the output data connector.

[0008] Further, the variable resistance mechanism includes: a short - circuit line and a plurality of resistance lines. One end of the short - circuit line and all the resistance lines is connected to the other end of the second connection line, and the other end of the short - circuit line and all the resistance lines is connected to one end of the third connection line. A short - circuit switch is provided on the short - circuit line, and a resistor and a resistor control switch are provided on each of the resistance lines.

[0009] Further, both ends of the variable resistance mechanism are connected to the resistance measurement interface of the controller, and the second connection line is connected to the current measurement interface of the controller.

[0010] Further, the electrical faults of the signal cable include single - cable breakage fault, cable - combination breakage fault, single - cable ground - shorting fault, inter - cable short - circuit fault, cable virtual - short fault, and cable virtual - break fault; When simulating a single - cable breakage fault, the controller controls the variable resistance mechanism, the second control switch, the third control switch, the ground connection switch, and the power connection switch to be disconnected, controls the first control switch on one of the first connection lines to be disconnected, and the first control switches on the remaining first connection lines to be closed; When simulating a cable - combination breakage fault, the controller controls the variable resistance mechanism, the second control switch, the third control switch, the ground connection switch, and the power connection switch to be disconnected, controls the first control switches on multiple first connection lines to be disconnected, and the first control switches on the remaining first connection lines to be closed; When simulating a ground short - circuit fault of the analog cable, the controller controls the closing of the grounding switch, the first control switch, and the second control switch, controls the variable resistance mechanism to close with a non - zero resistance, and controls the third control switch and the power - connection switch to open; When simulating a short - circuit fault between cables, the controller controls the closing of the second control switch, the third control switch, and the first control switch, controls the variable resistance mechanism to close with a resistance of 0, and the grounding switch and the power - connection switch to open; When simulating a virtual short - circuit fault of the cable, the controller controls the closing of the power - connection switch, the first control switch, and the second control switch, controls the variable resistance mechanism to close with a non - zero resistance, and controls the third control switch, the signal - connection switch, and the grounding switch to open; When simulating a virtual open - circuit fault of the cable, first, the controller controls the closing of the first control switch, the second control switch, and the third control switch, and controls the grounding switch and the power - connection switch to open. Then, while controlling the variable resistance mechanism to close, the controller controls the first control switch to open. Finally, while controlling the variable resistance mechanism to open, the controller controls the first control switch to close.

[0011] Furthermore, the communication faults include communication interruption and communication loss. When simulating communication interruption, the controller controls the second control switch, the third control switch, the grounding switch, and the power - connection switch to open, controls the first control switch to close and disconnects the first control switch during the communication process; When simulating communication loss, the controller controls the second control switch, the third control switch, the grounding switch, and the power - connection switch to open, controls the first control switch to close and performs switching actions on the first control switch during the communication process.

[0012] Furthermore, the fault simulation device performing fault recovery simulation includes: after the fault simulation device simulates electrical faults and communication faults of the signal cable, the controller controls the first control switch to close, and controls the second control switch, the third control switch, the grounding switch, and the power - connection switch to open.

[0013] Another technical solution of the present invention is as follows: A semi - physical fault testing method for an aero - engine control system, using any one of the above - mentioned semi - physical fault testing systems for an aero - engine control system, includes: Connect the input data connector of the fault simulation device to the semi - physical tester, and connect the output data connector of the fault simulation device to the aero - engine control system; Establish a fault analysis model, formulate a fault simulation plan according to the fault analysis model, and establish a test script; The controller controls the switching states of the first control switch, the second control switch, the third control switch, the grounding switch, and the power connection switch according to the test script.

[0014] Further, the controller injects faults when the aero-engine is in the starting, steady-state operation, acceleration / deceleration, single-engine or twin-engine state.

[0015] The beneficial effects of the present invention are as follows: The system of the present invention has diverse functions and can achieve such contents as resistive short circuit of any signal to the power supply, resistive short circuit to the ground, adjustable self-impedance of any signal, etc., and can simulate various fault modes such as periodic changes of various signals input to the electronic controller. The present invention can achieve fault injection in multiple modes, can set different change patterns (step, periodic change), select multiple signals and set the execution time to conduct various tests such as open circuit, short circuit, resistive open circuit, resistive short circuit, etc., and can edit the signal configuration file, save and repeatedly call and automatically record the operation process and state of the system. The fault injection method of the present invention covers various fault types, such as electrical faults of signal cables, communication faults, fault recovery tests, etc., and considers different fault injection times, and can select appropriate times to inject faults according to the engine operation state and the function operation situation, providing support for system safety analysis.

[0016] The present invention uses script execution, reduces the contingency of manual operation, improves the repeatability of the test, enhances the test efficiency, and at the same time the test process is repeatable and the confidence level of the test results is high. Description of the Drawings

[0017] Figure 1 It is a schematic structural diagram of the semi-physical fault test system for the aero-engine control system in the present invention.

[0018] Figure 2 It is a flowchart of the semi-physical fault test method for the aero-engine control system in the present invention. Detailed Embodiments

[0019] In order to enable those skilled in the art to better understand the solution of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. The described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0020] In one technical solution of the present invention, Figure 1 It is a schematic structural diagram provided according to the specific structure of the semi-physical fault test system for the aero-engine control system 3 of the present invention, asFigure 1 As shown in the figure, the present invention includes: a semi-physical fault test system for an aero-engine control system 3, including: a semi-physical tester 1 and a fault simulation device 2; The input end of the fault simulation device 2 is connected to the output end of the semi-physical tester 1, and the output end of the fault simulation device 2 is connected to the input end of the aero-engine control system 3; The fault simulation device 2 is used to simulate signal cable electrical faults, communication faults, and fault recovery of the output signal of the semi-physical tester 1.

[0021] The general idea of the present invention is to add a fault simulation device between the aviation plug of the electronic controller of the aero-engine and the external signal of the semi-physical tester 1. This device can simulate various fault modes such as short circuits, open circuits, and periodic changes of the input signal to the electronic controller, and together with the semi-physical simulation tester of the aero-engine digital electronic control system, it constitutes a semi-physical test fault injection test system. It should be noted that the semi-physical tester 1 is an existing technology in this field and will not be elaborated here.

[0022] In a technical solution of the present invention, the fault simulation device 2 includes: an input data connector 21, an output data connector 22, a plurality of first connecting wires 23, a plurality of second connecting wires 24, a variable resistance mechanism 25, a plurality of third connecting wires 26, two fourth connecting wires 27, and a controller.

[0023] Among them, the controller can adopt a PLC controller, a single-chip microcomputer, an MCU, etc., and cooperate with the upper computer to realize configuration control and display.

[0024] One end of all the first connecting wires 23 is connected to the input data connector 21, and the other end of all the first connecting wires 23 is connected to the output data connector 22. A first control switch KS1 is provided on each of the first connecting wires 23.

[0025] One end of all the second connecting wires 24 is connected to the input data connector 21, and the other end of all the second connecting wires 24 is connected to one end of the variable resistance mechanism 25. A second control switch KM1 is provided on each of the second connecting wires 24. Specifically, each first connecting wire 23 corresponds to one second connecting wire 24.

[0026] One end of all the third connecting wires 26 is connected to the other end of the variable resistance mechanism 25, and the other end of all the third connecting wires 26 is connected to the output data connector 22. A third control switch KM2 is provided on each of the third connecting wires 26. Specifically, each first connecting wire 23 corresponds to one third connecting wire 26.

[0027] One end of each of the fourth connection lines 27 is connected to the other end of the variable resistance mechanism 25. The other end of the first fourth connection line 27 is connected to the working power supply and is provided with a power connection switch KN1, and the other end of the second fourth connection line 27 is connected to the signal ground and is provided with a ground connection switch KN2.

[0028] The variable resistance mechanism 25 and all of the first control switch KS1, second control switch KM1, third control switch KM2, ground connection switch KN2, and power connection switch KN1 are controlled by the controller.

[0029] In an embodiment of the present technical solution, a third fourth connection line 27 is further included. One end of the third fourth connection line 27 is connected to the other end of the variable resistance mechanism 25, the other end of the third fourth connection line 27 is connected to an external signal, and a signal connection switch KN3 is provided on the third fourth connection line 27. When necessary, the external signal can be introduced into the fault simulation device 2 to simulate the condition of an external signal short circuit.

[0030] It should be noted that the above first control switch KS1, second control switch KM1, third control switch KM2, ground connection switch KN2, and power connection switch KN1 can all be relays.

[0031] Among them, the number of the first connection line 23, second connection line 24, and third connection line 26 is the same as the number of pins in the input data connector 21 and output data connector 22. In the present invention, specifically, 128 channels of signals can be simulated, so there are 128 pins in total.

[0032] In an embodiment of the present technical solution, the variable resistance mechanism 25 includes: a short - circuit line and a plurality of resistance lines. One end of the short - circuit line and all resistance lines are connected to the other end of the second connection line 24, and the other end of the short - circuit line and all resistance lines are connected to one end of the third connection line 26. A short - circuit switch KR1 is provided on the short - circuit line, and a resistor and a resistance control switch (KR2, KR3, KR4) are provided on each resistance line. The controller changes the resistance value of the variable resistance mechanism 25 to 0 by closing the short - circuit switch KR1, and adjusts the overall resistance value of the adjustable resistance mechanism by closing resistance control switches with different resistance values. Among them, the resistor can be a resistor with a fixed resistance value or an adjustable resistor. Specifically, the range of the overall resistance value of the adjustable resistance mechanism is 0Ω to 1MΩ. It should be noted that when adjusting the resistance, the resistance change step - up time does not exceed 4ms.

[0033] In an embodiment of the present technical solution, both ends of the variable resistance mechanism 25 are connected to the resistance measurement interface of the controller, and the second connecting wire 24 is connected to the current measurement interface of the controller. The controller can measure the resistance value of the adjustable resistance mechanism through the resistance measurement interface, and measure the current in the second connecting wire 24 through the current measurement interface. When needed, it can be displayed through the display device connected to the controller. Measuring current and resistance by the controller is a conventional technical means, so it will not be elaborated here.

[0034] In an embodiment of the present technical solution, the electrical faults of the signal cable include single cable breakage fault, cable combination breakage fault, single cable ground short circuit fault, short circuit fault between cables, virtual short circuit fault of the cable and virtual breakage fault of the cable.

[0035] When simulating a single cable breakage fault, the controller controls the variable resistance mechanism, the second control switch KM1, the third control switch KM2, the grounding switch KN2, and the power connection switch KN1 to be disconnected, and controls the first control switch KS1 on one of the first connecting wires 23 to be disconnected, and the first control switches KS1 on the remaining first connecting wires 23 to be closed.

[0036] When simulating a cable combination breakage fault, the controller controls the variable resistance mechanism, the second control switch KM1, the third control switch KM2, the grounding switch KN2, and the power connection switch KN1 to be disconnected, and controls the first control switches KS1 on multiple first connecting wires 23 to be disconnected, and the first control switches KS1 on the remaining first connecting wires 23 to be closed.

[0037] When simulating a cable ground short circuit fault, the controller controls the grounding switch KN2, the first control switch KS1, and the second control switch KM1 to be closed, controls the variable resistance mechanism 25 to be closed and the resistance is not 0, and controls the third control switch KM2 and the power connection switch KN1 to be disconnected. Specifically, if it is necessary to simulate a single line ground short circuit, it is necessary to close the grounding switch KN2 and the first control switch KS1, and close the corresponding second control switch KM1 to achieve the ground short circuit.

[0038] When simulating a short circuit fault between cables, the controller controls the second control switch KM1, the third control switch KM2, and the first control switch KS1 to be closed, controls the variable resistance mechanism 25 to be closed and the resistance is 0, and the grounding switch KN2 and the power connection switch KN1 are disconnected. It should be noted that the short circuit fault can be divided into all signal short circuits and any group of signal short circuits. When it is necessary to test any group of signal short circuits, it is necessary to close the corresponding second control switch KM1 and the third control switch KM2, and the control process is implemented by the program script in the controller.

[0039] When simulating the virtual short circuit fault of the analog cable, the controller controls the power connection switch KN1, the first control switch KS1, and the second control switch KM1 to close, controls the variable resistance mechanism 25 to close and the resistance is not 0, and controls the third control switch KM2, the signal connection switch KN3, and the grounding switch KN2 to open. It should be noted that the controller can control the second control switch KM1 not to close simultaneously, formulate a periodic control plan, and realize the resistive short circuit function of any path to the positive power supply (referring to the regulated power supply and AC power supply in the subsequent equipment).

[0040] When simulating the virtual open circuit fault of the cable, first, the controller controls the first control switch KS1, the second control switch KM1, and the third control switch KM2 to close, and controls the grounding switch KN2 and the power connection switch KN1 to open. Then, while the controller controls the variable resistance mechanism 25 to close, it controls the first control switch KS1 to open. Finally, while the controller controls the variable resistance mechanism 25 to open, it controls the first control switch KS1 to close. It should be noted that during actual testing, the second control switch KM1 and the third control switch KM2 corresponding to the line to be tested need to be closed in advance, and then the variable resistance mechanism is closed and the first control switch KS1 is opened. This testing process needs to be carried out separately for each line. Closing the second control switch KM1 and the third control switch KM2 of multiple lines simultaneously will result in a short circuit fault. Through the above operations, a series resistance can be added to the signal itself to achieve a resistive open circuit of the signal.

[0041] In an embodiment of the present technical solution, the communication faults include: communication interruption and communication loss, When simulating communication interruption, the controller controls the second control switch KM1, the third control switch KM2, the grounding switch KN2, and the power connection switch KN1 to open, controls the first control switch KS1 to close and disconnects the first control switch KS1 during the communication process; When simulating communication loss, the controller controls the second control switch KM1, the third control switch KM2, the grounding switch KN2, and the power connection switch KN1 to open, controls the first control switch KS1 to close and performs a switching action on the first control switch KS1 during the communication process.

[0042] In an embodiment of the present technical solution, the fault simulation device 2 performs fault recovery simulation as follows: after the fault simulation device 2 simulates the electrical faults and communication faults of the signal cable, the controller controls the first control switch KS1 to close, and controls the second control switch KM1, the third control switch KM2, the grounding switch KN2, and the power connection switch KN1 to open.

[0043] In another technical solution of the present invention, Figure 2is a flowchart showing the specific process of the semi-physical fault testing method for the aero-engine control system 3 according to the present invention. In this technical solution, any of the above-mentioned semi-physical fault testing systems for the aero-engine control system 3 is used. For example, Figure 2 as shown, the present invention includes: S10: Connect the input data connector 21 of the fault simulation device 2 to the semi-physical tester 1, and connect the output data connector 22 of the fault simulation device 2 to the aero-engine control system 3.

[0044] First, it is necessary to formulate a dedicated fault simulation device and the cables between the electronic controller and the semi-physical tester 1 according to the pin definitions specific to the project. According to the different situations of the semi-physical tester 1, the test personnel connect the fault simulation device 2 to the middle of the electronic controller and the semi-physical tester 1 through a connecting cable. Power on the semi-physical tester 1, the fault simulation device 2, and the aero-engine control system 3, and check for abnormalities.

[0045] S20: Establish a fault analysis model, formulate a fault simulation plan according to the fault analysis model, and establish a test script.

[0046] The test personnel formulate a fault injection plan. Specifically, based on the safety impact of the system, according to the impact brought by the fault, through the analysis of the fault analysis model, key faults are found for key testing, and at the same time, targeted testing is carried out in combination with historical fault data and theoretical analysis. Combining the system operation status, a fault injection plan is designed. And a test script is established in sequence, where the test script is the program of the controller.

[0047] Among them, the fault analysis model can be a trained neural network model, and its training data is historical fault data. The specific process of establishing the fault analysis model is a conventional technical means in the art, so it will not be elaborated here.

[0048] Due to the large number of system cables, it is impossible to conduct an exhaustive test on the signal short circuit between cables, that is, the workload is huge and it has no practical significance. First, use the fault analysis model to analyze, find out the key cables and the cable combinations prone to problems for key testing, and at the same time, targeted testing is carried out in combination with historical fault data and theoretical analysis. Finally, a sampling test method is adopted to classify cables of different types and at different positions, and then a certain proportion of cables are selected from the classification for combined short circuit testing.

[0049] S30: The controller controls the switch states of the first control switch KS1, the second control switch KM1, the third control switch KM2, the grounding switch KN2, and the power connection switch KN1 according to the test script.

[0050] The controller conducts tests according to the test script, and controls the switch states of the first control switch KS1, the second control switch KM1, the third control switch KM2, the grounding switch KN2, and the power connection switch KN1 according to the program during the test.

[0051] In an embodiment of the present technical solution, the controller performs fault injection when the aero-engine is in the starting, steady-state operation, acceleration / deceleration, single-engine or twin-engine state.

[0052] The injection timing considered in the present invention refers to the selection of fault injection when the engine runs to a certain state or function. The consideration of the injection timing is usually the impact on the system safety. This method aims to find the timing that can maximize the impact of the fault, providing support for the system safety analysis. The injection timing in the engine operation state is usually considered to perform fault injection in the starting, steady-state operation, acceleration / deceleration, single-engine, twin-engine and other states. The implementation of the injection timing in the engine function operation needs to set the fault injection according to the actual function traversal.

[0053] In an embodiment of the present invention, a supporting software system can be developed and designed to implement fault injection in multiple modes. The specific program can include the following functions: it can set the change graph (including step change and periodic change), select multiple signals, set the execution time, and perform open-circuit tests in sequence rotation; it can set the change graph (including step change and periodic change), select multiple signals, set the execution time, and perform short-circuit tests in sequence rotation; it can set the change graph (including step change and periodic change), select multiple signals, set the execution time, and perform band-stop open-circuit tests in sequence rotation; it can set the change graph (including step change and periodic change), select multiple signals, set the execution time, and perform band-stop short-circuit tests in sequence rotation; it can edit the signal configuration file according to actual needs, define the signal test points and the quantity, can save and call repeatedly, and generate the signal configuration table; it can automatically record all system operation processes and states such as system startup, system calibration, and system self-check.

[0054] Finally, it should be noted that the above specific implementation manners are only used to illustrate the technical solutions of the present invention rather than to limit them. Although the present invention has been described in detail with reference to the examples, those of ordinary skill in the art should understand that the technical solutions of the present invention can be modified or equivalently replaced without departing from the spirit and scope of the technical solutions of the present invention, and they should all be covered within the scope of the claims of the present invention.

Claims

1. A semi-physical fault testing system for an aircraft engine control system, characterized in that: include: Semi-physical tester, fault simulation device; The input end of the fault simulation device is connected to the output end of the semi-physical tester, and the output end of the fault simulation device is connected to the input end of the aircraft engine control system; The fault simulation device is used to simulate signal cable electrical faults, communication faults, and fault recovery on the output signal of the semi-physical tester.

2. The semi-physical fault testing system for an aircraft engine control system according to claim 1, characterized in that: The fault simulation device comprises: an input data connector, an output data connector, a plurality of first connection wires, a plurality of second connection wires, a variable resistance mechanism, a plurality of third connection wires, two fourth connection wires and a controller; One end of all the first connection lines is connected to the input data connector, the other end of all the first connection lines is connected to the output data connector, and each of the first connection lines is provided with a first control switch; One end of all the second connection lines is connected to the input data connector, the other end of all the second connection lines is connected to one end of the variable resistance mechanism, and each of the second connection lines is provided with a second control switch; One end of all the third connection lines is connected to the other end of the variable resistance mechanism, the other end of all the third connection lines is connected to the output data connector, and each of the third connection lines is provided with a third control switch; One end of all the fourth connection lines is connected to the other end of the variable resistor mechanism, the other end of the first fourth connection line is connected to the working power supply and is provided with a power switch, and the other end of the second fourth connection line is connected to the signal ground and is provided with a ground switch; The variable resistance mechanism and all the first control switches, the second control switches, the third control switches, the grounding switches, and the power supply switches are controlled by the controller.

3. The semi-physical fault testing system for an aircraft engine control system as claimed in claim 2, characterized in that: The number of the first connecting wires, the second connecting wires and the third connecting wires is the same as the number of pins in the input data connector and the output data connector.

4. The semi-physical fault testing system for an aircraft engine control system as claimed in claim 2, characterized in that: The variable resistance mechanism includes: a short-circuit circuit and a plurality of resistance circuits, one end of the short-circuit circuit and all the resistance circuits are connected to the other end of the second connecting line, the other end of the short-circuit circuit and all the resistance circuits are connected to one end of the third connecting line, a short-circuit switch is arranged on the short-circuit circuit, and each of the resistance circuits is arranged with a resistor and a resistance control switch.

5. The semi-physical fault testing system for an aircraft engine control system as claimed in claim 2, characterized in that: The two ends of the variable resistance mechanism are connected to the resistance measurement interface of the controller, and the second connecting line is connected to the current measurement interface of the controller.

6. The semi-physical fault testing system for an aircraft engine control system as claimed in claim 2, characterized in that: The signal cable electrical faults include single cable disconnection fault, cable combination disconnection fault, single cable short-to-ground fault, cable short-circuit fault, cable virtual short fault and cable virtual disconnection fault; When simulating a single cable disconnection fault, the controller controls the variable resistor mechanism, the second control switch, the third control switch, the grounding switch, and the power switch to be disconnected, controls the first control switch on one of the first connection lines to be disconnected, and controls the first control switches on the remaining first connection lines to be closed; When simulating a cable combination disconnection fault, the controller controls the variable resistor mechanism, the second control switch, the third control switch, the grounding switch, and the power switch to be disconnected, controls the first control switches on the plurality of first connection lines to be disconnected, and the first control switches on the remaining first connection lines to be closed; When simulating a cable short-circuit fault, the controller controls the grounding switch, the first control switch, and the second control switch to close, controls the variable resistor mechanism to close and the resistance is not 0, and controls the third control switch and the power switch to open; When simulating a short circuit fault between cables, the controller controls the second control switch, the third control switch, and the first control switch to close, controls the variable resistor mechanism to close and the resistance to be 0, and the grounding switch and the power switch to open; When simulating a virtual short fault of the cable, the controller controls the power switch, the first control switch, and the second control switch to be closed, controls the variable resistor mechanism to be closed and the resistance is not 0, and controls the third control switch, the signal switch, and the grounding switch to be opened; When simulating a virtual cable break fault, first, the controller controls the first control switch, the second control switch, and the third control switch to close, and controls the grounding switch and the power switch to open. Then, the controller controls the first control switch to open while controlling the variable resistor mechanism to close. Finally, the controller controls the first control switch to close while controlling the variable resistor mechanism to open.

7. The semi-physical fault testing system for an aircraft engine control system as claimed in claim 2, characterized in that: The communication failure includes: communication interruption and communication loss, When simulating communication interruption, the controller controls the second control switch, the third control switch, the grounding switch, and the power switch to be disconnected, controls the first control switch to be closed, and disconnects the first control switch during communication; When the simulated communication is lost, the controller controls the second control switch, the third control switch, the grounding switch, and the power switch to be disconnected, controls the first control switch to be closed, and performs a switching action on the first control switch during the communication process.

8. The semi-physical fault testing system for an aircraft engine control system as claimed in claim 2, characterized in that: The fault simulation device performs fault recovery simulation including: after the fault simulation device simulates electrical faults and communication faults of the signal cable, the controller controls the first control switch to close, and controls the second control switch, the third control switch, the grounding switch, and the power switch to open.

9. A semi-physical fault testing method for an aircraft engine control system, characterized in that: The semi-physical fault testing system for an aircraft engine control system according to any one of claims 2 to 6 comprises: Connecting the input data connector of the fault simulation device to the semi-physical tester, and connecting the output data connector of the fault simulation device to the aircraft engine control system; Establish a fault analysis model, formulate a fault simulation plan based on the fault analysis model, and establish a test script; The controller controls the switch states of the first control switch, the second control switch, the third control switch, the ground switch, and the power switch according to the test script.

10. The semi-physical fault testing method for an aircraft engine control system according to claim 9, characterized in that: The controller performs fault injection when the aircraft engine is in starting, steady-state operation, acceleration and deceleration, single-engine or dual-engine state.

Images