Method and device for monitoring electrical energy supply network of aircraft

Abstract

The invention relates to a method, a device and a system for monitoring an electrical energy supply network of an aircraft, where the electrical energy supply network comprises a plurality of protection and distribution devices connected together by at least one communication bus. According to the invention, each protection and power distribution device:-determines its location in the network,-selects a configuration table associated with its location,-receives a state table from each other protection and power distribution device,-applies at least a portion of the state table to a work-related rule that determines whether the contactors of the protection and power distribution device have to be opened or closed,-determines whether the contactors of the protection and power distribution device have to be closed or closed. -controlling the contactors according to the results of the work-related rules,-transmitting the updated state table to each of the other protection and cut-off devices.

Description

Technical Field

[0001] The present invention relates to a method, a system and a device for monitoring an electrical power supply network of an aircraft. Background Art

[0002] In the aviation field, the supply of electrical power to various devices of an aircraft is provided by at least one electrical power supply source, preferably by a plurality of electrical power supply sources in order to mitigate any operating failures in one or more of the electrical power supply sources. Depending on the operation or failure of the supply source, contactors or loads, a centralized monitoring system is required to open or close remote contactors to reconfigure the electrical power supply network in order to isolate the operating failure and ensure the correct operation of other elements connected to the electrical power supply network.

[0003] For safety reasons, the centralized monitoring system is often duplicated.

[0004] The wiring and configuration of the various elements of the electrical power supply network fix the software loaded in the centralized monitoring system. Therefore, it is difficult to change the electrical power supply network over time. For each type or version of aircraft, it is necessary to develop a centralized monitoring system dedicated to configuring the various elements of the electrical power supply network.

[0005] In addition, maintaining an electrical power supply network controlled in a centralized manner is also complex.

[0006] There is a particular desire to provide a solution that can more flexibly manage the electrical power supply network of an aircraft over time, while being able to reduce the wiring of the various elements of the electrical power supply network. Summary of the Invention

[0007] A method for managing and monitoring an electrical power supply network of an aircraft is proposed, the electrical power supply network comprising a plurality of protection and power distribution devices connected together by at least one communication bus, characterized in that the method comprises the following steps performed by each protection and power distribution device:

[0008] - determining the position of the protection and power distribution device in the electrical power supply network of the aircraft,

[0009] - selecting, from a set of configuration tables stored in the protection and power distribution device, the configuration table associated with the position of the protection and power distribution device in the electrical power supply network of the aircraft,

[0010] - receiving a status table from each other protection and cut-off device,

[0011] - applying at least a part of the status table to operating-related rules for determining whether the contactor of the protection and cut-off device must be opened or closed,

[0012] - controlling the contactor according to the result of the operating-related rules,

[0013] - Transmit the updated status table to each other protection and disconnection device.

[0014] The present invention also relates to a protection and power distribution device included in the electrical power supply network of an aircraft, the electrical power supply network including a plurality of protection and power distribution devices connected together by at least one communication bus, characterized in that the protection and power distribution device includes:

[0015] - Means for determining the position of the protection and power distribution device in the electrical power supply network of the aircraft,

[0016] - Means for selecting, from a set of configuration tables stored in the protection and power distribution device, the configuration table associated with the position of the protection and power distribution device in the electrical power supply network of the aircraft,

[0017] - Means for receiving the status table from each other protection and disconnection device,

[0018] - Means for applying at least a part of the status table to operating-related rules for determining whether the contactor of the protection and disconnection device must be opened or closed,

[0019] - Means for controlling the contactor according to the result of the operating-related rules,

[0020] - Means for transmitting the updated status table to each other protection and disconnection device.

[0021] The present invention also relates to a protection and power distribution system included in the electrical power supply network of an aircraft, the electrical power supply network including a plurality of protection and power distribution devices, characterized in that the protection and power distribution devices are connected together by at least one communication bus, and each protection and power distribution device includes:

[0022] - Means for determining the position of the protection and power distribution device in the electrical power supply network of the aircraft,

[0023] - Means for selecting, from a set of configuration tables stored in the protection and power distribution device, the configuration table associated with the position of the protection and power distribution device in the electrical power supply network of the aircraft,

[0024] - Means for receiving the status table from each other protection and disconnection device,

[0025] - Means for applying at least a part of the status table to operating-related rules for determining whether the contactor of the protection and disconnection device must be opened or closed,

[0026] - Means for controlling the contactor according to the result of the operating-related rules,

[0027] - Means for transmitting the updated status table to each other protection and disconnection device.

[0028] Thus, the present invention enables more flexible management of the electrical power supply network of an aircraft over time, while reducing the wiring of the various components of the electrical power supply network.

[0029] In addition, the present invention simplifies the wiring of the electrical power supply network and is easy to implement by using the same type of protection and power distribution devices regardless of the location of the protection and power distribution devices in the electrical power supply network.

[0030] The monitoring of the electrical power supply network reduces the complexity of the electrical power supply network by virtue of its decentralized structure. By using a communication bus, the complexity is reduced by simplifying the wiring.

[0031] According to a specific embodiment, the method further includes the step of testing the integrity of the protection and power distribution devices, and if the integrity test is positive, performing the steps of determining, selecting, receiving, applying, controlling, and transmitting.

[0032] According to a specific embodiment, the operating rules for determining whether the contactor of the protection and cut-off device must be opened or closed also take into account: at least one current and / or voltage measured by the protection and cut-off device, and the maximum and / or minimum current and / or voltage values included in the selected configuration table.

[0033] According to a specific embodiment, the method further includes the following steps:

[0034] - Checking where the configuration table must be updated,

[0035] - Updating the configuration table before the selection.

[0036] Thus, the present invention enables any modification of the electrical power supply network of an aircraft to be adapted in a simple manner.

[0037] According to a specific embodiment, the network includes a plurality of voltage sources, a plurality of loads consuming electrical power, and a plurality of supply buses, and protection and cut-off devices are provided between each voltage source and the supply bus, protection and cut-off devices are provided between each load and the supply bus, and at least one protection and cut-off device is provided between two supply buses.

[0038] There is also proposed a program that can be stored on a medium and / or downloaded from a communication network for reading by a processor. The program includes: instructions for implementing the method as described above implemented by each protection and power distribution device when the processor executes the program. The present invention also relates to an information storage medium storing such a program. Description of the Drawings

[0039] By reading the following description of at least one exemplary embodiment, the features of the present invention mentioned above and other features will be presented more clearly. The description is made in conjunction with the accompanying drawings, in which:

[0040] Figure 1 An example of the architecture of the electrical power supply network of an aircraft is shown, in which the electrical power supply network of the aircraft is monitored in a distributed manner by a plurality of protection and distribution devices;

[0041] Figure 2 An example of the architecture of the protection and distribution device according to the present invention is shown;

[0042] Figure 3 An example of the algorithm executed by each protection and distribution device according to the present invention is shown;

[0043] Figure 4 A specific example of a simplified architecture of the electrical power supply network of an aircraft according to the present invention is shown. Detailed Embodiment

[0044] Figure 1 An example of the architecture of the electrical power supply network of an aircraft is shown, in which the electrical power supply network of the aircraft is monitored in a distributed manner by a plurality of protection and distribution devices.

[0045] In Figure 1 the example, the electrical power supply network of the aircraft includes two voltage sources So1 and So2, four loads Ch1 to Ch4, and a plurality of protection and distribution devices (protection and distribution device) CP1 to CP8, also referred to as C / P modules.

[0046] The protection and distribution devices CP1 to CP8 are connected together by two communication buses Bce1 and Bce2. The communication buses Bce1 and Bce2 are the same and the number is two in order to ensure reliability in case one of the communication buses fails.

[0047] The communication buses Bce1 and Bce2 enable data exchange between the protection and distribution devices CP1 to CP8 and are respectively connected to the communication system of the aircraft through interfaces ( Figure 1 not shown in the figure).

[0048] The protection and distribution devices CP1 to CP8 are supplied by two power sources Ali1 and Ali2.

[0049] The power sources Ali1 and Ali2 are connected to the external power source of the aircraft ( Figure 1 not shown in the figure).

[0050] In a particular embodiment, the analog interface I / Fa is connected to the communication buses Bce1 and Bce2. The analog interface I / Fa enables data to be exchanged with sensors or actuators of the aircraft.

[0051] In a particular embodiment, a discrete interface I / Fd is connected to the communication buses Bce1 and Bce2 . The discrete interface I / Fd enables data to be exchanged with control or notification elements of the aircraft.

[0052] The isolation barrier BI provides electrical isolation between the electrical energy supply network and other electrical components of the aircraft.

[0053] The protection and distribution device CP1 is connected to the voltage source So1 and connects or does not connect the positive terminal of the voltage source So1 to the positive power bus A1 according to the state of the contactor included inside it. 1+ .

[0054] L1 represents the positive terminal of the voltage source So1 and the positive power bus Al 1+ and L2 represents the connection between the negative terminal of the voltage source So1 and the negative power bus Al 1- The connection between.

[0055] The negative terminal of the voltage source So1 is connected to the negative power bus A1. 1- .

[0056] The protection and distribution device CP2 is connected to the voltage source So2 and connects or does not connect the positive terminal of the voltage source So2 to the positive power bus A1 according to the state of the contactor included therein. 2+ .

[0057] The negative terminal of the voltage source So2 is connected to the negative power bus A1. 2- .

[0058] The protection and distribution devices CP3 and CP4 make it possible to connect or not connect the positive power bus A1 according to the state of the contactors included therein. 1+ and Al 2+ .

[0059] The protection and distribution device CP5 is connected to the load Ch1, and connects or does not connect the positive terminal of the load Ch1 to the positive power bus A1 according to the state of the contactor included therein. 1+ .

[0060] The protection and distribution device CP6 is connected to the load Ch2, and connects or does not connect the positive terminal of the load Ch2 to the positive power bus A1 according to the state of the contactor included therein. 1+。

[0061] The protection and power distribution device CP7 is connected to the load Ch3, and according to the state of the contactor included therein, connects or does not connect the positive terminal of the load Ch3 to the positive power supply bus Al 2+ 。

[0062] The protection and power distribution device CP8 is connected to the load Ch4, and according to the state of the contactor included therein, connects or does not connect the positive terminal of the load Ch4 to the positive power supply bus Al 2+ 。

[0063] Figure 2 An example of the protection and power distribution device CP1 is shown.

[0064] It should be noted here that the protection and power distribution devices CP1 to CP8 have the same architecture.

[0065] The protection and power distribution device CP1 includes a microcontroller 200, a programming interface 201, a power supply module 202, an analog interface 203, a power control stage 204, a contactor 250, a communication interface 210, and an interface 206 for obtaining the state of the contactor 250.

[0066] The interface 206 for obtaining the state of the contactor 250 includes an auxiliary contactor controlled by the coil of the contactor 250 ( Figure 2 not shown in the figure). When the contactor 250 is closed, the auxiliary contactor is also closed. When the contactor 250 is opened, the auxiliary contactor is also opened. For example, when the auxiliary contactor is closed, a logic high level appears on the input terminal of the interface for obtaining the state of the contactor 250. When the auxiliary contactor is opened, a logic low level appears on the input terminal of the interface for obtaining the state of the contactor 250.

[0067] The microcontroller 200 includes a random access memory RAM ( Figure 2 not shown in the figure); a read only memory ROM or a flash memory; and at least one set of input / output terminals.

[0068] The microcontroller 200 is capable of executing instructions loaded from the ROM or from the communication buses Bce1 or Bce2 into the RAM. When the microcontroller 200 is powered on, the microcontroller 200 can read the instructions in the RAM and execute them. These instructions form a computer program that enables the microcontroller 200 to implement all or some of the behaviors of the algorithms and steps described herein.

[0069] Thus, all or some of the algorithms and steps described herein can be implemented in software form by executing a set of instructions by a programmable machine such as a DSP (“Digital Signal Processor”) or a microcontroller 200. All or some of the algorithms and steps described herein can also be implemented in hardware form by a machine or component (chip) such as an FPGA (“Field Programmable Gate Array”) or an ASIC (“Application Specific Integrated Circuit”). Accordingly, the microcontroller 200 includes electronic circuits adapted and configured to implement the behaviors, algorithms, and steps described herein.

[0070] The ROM memory includes a plurality of equations for closing and opening the contactor 250.

[0071] Each operating rule (also referred to as an operation rule) for closing or opening the contactor 250 corresponds to the distribution of protection and power distribution devices in the electrical power supply network of the aircraft. Each operating rule for closing or opening the contactor takes into account the states of at least some of the contactors included in other protection and power distribution devices in the electrical power supply network of the aircraft. Each closing operating rule is separately included in a configuration table.

[0072] The programming interface 201 enables the distribution of protection and power distribution devices to be indicated by means of programming pins, or in other words, the location of the protection and power distribution devices to be indicated.

[0073] The power supply module 202 enables the protection and power distribution devices to be powered from a power source Ali1 or Ali2.

[0074] Through the analog interface 203, the microcontroller 200 receives voltage and / or current measurement values measured through the connections L1 and L2.

[0075] The power control stage 204 enables the opening or closing of the contactor 250 to be controlled.

[0076] The interface 206 for obtaining the state of the contactor 250 enables the microcontroller 200 to know what state the contactor 250 is in.

[0077] By means of the communication interface 210, the microcontroller 200 transmits the state table of the contactor 250 to each protection and power distribution device via the communication bus Bce1 or Bce2, and receives the state table of its corresponding contactor from each protection and power distribution device via the communication bus Bce1 or Bce2.

[0078] Figure 3 An example of the algorithm executed by each protection and power distribution device according to the present invention is shown.

[0079] For example, this algorithm is executed at a period on the order of one millisecond.

[0080] This algorithm is described in an example executed by the protection and power distribution device CP1.

[0081] In step E300, the microcontroller 200 checks whether the aircraft is on the ground. The microcontroller 200 is notified of the presence of the aircraft on the ground via the communication bus Bce1 or Bce2 or via the discrete interface I / Fd.

[0082] If so, the microcontroller 200 proceeds to step E301. If not, the microcontroller 200 proceeds to step E302.

[0083] In step E301, the microcontroller tests the integrity of the operation of the protection and power distribution device.

[0084] The integrity test includes, for example, checking the consistency of the inputs and outputs of the analog acquisition chain included in the analog interface 203, the correct operation of the communication interface 210 and the communication bus, and the good access to the memory.

[0085] In step E302, the microcontroller 200 checks whether the integrity test is negative. If the integrity test is negative, the microcontroller 200 proceeds to step E312.

[0086] If the integrity test is positive, the microcontroller 200 proceeds to step E303.

[0087] In step E303, the microcontroller 200 obtains from the interface 201 a binary word indicating the allocation of the protection and power distribution device. This binary word is defined by a microswitch or a jumper or a given wiring.

[0088] In step E304, the microcontroller 200 checks whether software must be downloaded. For example, the protection and power distribution device is notified of the software download via the communication bus Bce1 or Bce2.

[0089] If positive, the microcontroller 200 proceeds to step E305. If negative, the microcontroller 200 proceeds to step E306.

[0090] In step E305, the microcontroller 200 downloads the software via the communication bus Bce1 or Bce2.

[0091] In step E306, the microcontroller 200 reads the configuration table associated with the binary word indicating the allocation of the protection and power distribution device.

[0092] The configuration table includes information indicating, for example, whether voltage measurements and / or one or more current measurements must be made, the tripping current, the maximum difference between the currents circulating in lines L1 and L2, the minimum value of the voltage measured between lines L2 and L1, the maximum value of the voltage measured between lines L1 and L2, and the operating-related rules for determining whether the contactor 250 must be opened or closed.

[0093] In the next step E307, the microcontroller 200 obtains, from the communication interface 210, the data received via the interface I / Fd on the control or notification element of the aircraft, and, for each of the other protection and power distribution devices CP2 to CP8, obtains the status table of the contactors of the protection and power distribution devices CP2 to CP8.

[0094] In the next step E308, the microcontroller 200 obtains at least one current and / or voltage measurement value from the analog interface according to the content of the configuration table.

[0095] In the next step E309, the microcontroller 200 checks whether the measurement values obtained in step E308 are compatible with the minimum and maximum values included in the configuration table.

[0096] If the obtained measurement values are compatible with the minimum and maximum values included in the configuration table, the microcontroller 200 proceeds to step E310.

[0097] If not, the microcontroller 200 proceeds to step E313.

[0098] In step E310, the microcontroller 200 uses the measured current, the tripping current, and the status tables of at least some of the protection and power distribution devices CP2 to CP8, and applies these to the operating-related rules for determining whether the contactor 250 must be opened or closed.

[0099] In step E311, the microcontroller 200 controls the power control stage 204 to apply the obtained status of the operating-related rules for determining whether the contactor 250 must be opened or closed to the contactor 250.

[0100] In step E312, the microcontroller 200 requests the transmission of the status table via the communication interface 210, where the status table is updated with the obtained status of the operating-related rules for determining whether the contactor 250 must be opened or closed.

[0101] In step E313, the microcontroller 200 deems the protection and power distribution device CP1 to be defective and updates the status table.

[0102] If the communication interface 210 is operational, at step E314, the microcontroller 200 requests the transmission of a status table via the communication interface 210, where the status table is updated with the obtained status of the work-related rules that determine whether the contactor 250 must be opened or closed.

[0103] Figure 4 A specific example of a simplified architecture of an electrical power supply network for an aircraft according to the present invention is shown.

[0104] In Figure 4 the example, only two voltage sources So 1’ and So 2’ , two loads Ch 1’ and Ch 2’ , two positive power supply buses Al 1’+ and Al 12’+ and five protection and power distribution devices CP 1’ to CP 5’ .

[0105] The protection and power distribution device CP 1’ is arranged between the voltage source So 1’ and the positive power supply bus Al 1’+ .

[0106] The protection and power distribution device CP 2’ is arranged between the voltage source So 2’ and the positive power supply bus Al 2’+ .

[0107] The protection and power distribution device CP 3’ is arranged between the positive power supply bus Al 1’+ and the load Ch 1’ .

[0108] The protection and power distribution device CP 4’ is arranged between the positive power supply bus Al 2’+ and the load Ch 2’ .

[0109] The protection and power distribution device CP 5’ is arranged between the positive power supply bus Al 1’+ and the positive power supply bus Al 2’+ .

[0110] In normal operation, the contactor of the protection and power distribution device CP 1’ is closed, the contactor of the protection and power distribution device CP 2’ is closed, the contactor of the protection and power distribution device CP 3’ is closed, the contactor of the protection and power distribution device CP 4’ is closed, while the protection and power distribution device CP5’ The contactor of

[0111] If the protection and distribution device CP 1’ has its contactor opened, the protection and distribution device CP 2’ has its contactor closed, the protection and distribution device CP 3’ has its contactor closed and the protection and distribution device CP 4’ has its contactor closed, then the result of the operating-related rules for the contactor for closing the protection and distribution device CP 5’ is to close the contactor.

[0112] If the protection and distribution device CP 1’ detects that the voltage provided by the voltage source So 1’ is lower than the maximum value, it requests to open its contactor and transmits it as an updated status table.

[0113] When the protection and distribution device CP 5’ receives the updated status table of each protection and distribution device CP 1’ CP 4’ , the protection and distribution device CP 5’ applies it to the operating-related rules for determining whether the contactor 250 must be opened or closed, controls the power stage to close the contactor and transmits the updated status table.

[0114] The present invention is described in an environment where the voltage source is DC (direct current). The present invention is also applicable when the voltage source supplies an alternating voltage.

Claims

1. A method for monitoring the electrical power supply network of an aircraft, wherein, The electrical power supply network includes a plurality of protection and distribution devices connected together by at least one communication bus, characterized in that the method includes the following steps performed by each protection and distribution device: - Determining the position of the protection and distribution device in the electrical power supply network of the aircraft, - Selecting, from a set of configuration tables stored in the protection and distribution device, the configuration table associated with the position of the protection and distribution device in the electrical power supply network of the aircraft, - Receiving a status table from each other protection and cut-off device, - Applying at least a part of the status table to operating-related rules for determining whether the contactor of the protection and cut-off device must be opened or closed, - Controlling the contactor according to the operating-related rules, - Transmitting the updated status table to each other protection and cut-off device.

2. The method according to claim 1, wherein The operating-related rules for determining whether the contactor of the protection and cut-off device must be opened or closed also take into account: at least one current and / or voltage measured by the protection and cut-off device, and the maximum and / or minimum current and / or voltage values included in the selected configuration table.

3. The method according to any one of claims 1 to 2, characterized in that, The method further includes the following steps: - Checking where the update of the configuration table must be performed, - Updating the configuration table before the selection.

4. The method according to any one of claims 1 to 3, characterized in that, The method can also include the step of testing the integrity of the protection and distribution device, and is characterized in that if the integrity test is positive, the determination, selection, reception, application, control and transmission steps are performed.

5. A protection and power distribution device included in the electrical power supply network of an aircraft, the electrical power supply network of the aircraft comprising a plurality of protection and power distribution devices connected together by at least one communication bus, characterized in that, The protection and distribution device includes: - A device for determining the position of the protection and distribution device in the electrical power supply network of the aircraft, - A device for selecting, from a set of configuration tables stored in the protection and distribution device, the configuration table associated with the position of the protection and distribution device in the electrical power supply network of the aircraft, - A device for receiving a status table from each other protection and cut-off device, - A device for applying at least a part of the status table to operating-related rules for determining whether the contactor of the protection and cut-off device must be opened or closed, - A device for controlling the contactor according to the result of the operating-related rules, - A device for transmitting the updated status table to each other protection and cut-off device.

6. A protection and power distribution system included in the electrical power supply network of an aircraft, the electrical power supply network of the aircraft including a plurality of protection and power distribution devices, characterized in that, The protection and distribution devices are connected together by at least one communication bus, and each protection and distribution device includes: - A device for determining the position of the protection and distribution device in the electrical power supply network of the aircraft, - A device for selecting, from a set of configuration tables stored in the protection and distribution device, the configuration table associated with the position of the protection and distribution device in the electrical power supply network of the aircraft, - A device for receiving a status table from each other protection and cut-off device, - A device for applying at least a part of the status table to operating-related rules for determining whether the contactor of the protection and cut-off device must be opened or closed, - A device for controlling the contactor according to the result of the operating-related rules, - A device for transmitting the updated status table to each other protection and cut-off device.

7. The system according to claim 6, wherein The network includes a plurality of voltage sources, a plurality of loads consuming electrical energy, and a plurality of power supply buses, and is characterized in that protection and cut-off devices are provided between each voltage source and the power supply bus, protection and cut-off devices are provided between each load and the power supply bus, and at least one protection and cut-off device is provided between two power supply buses.

8. A computer program product, the computer program product comprising: Instructions for implementing the method according to any one of claims 1 to 4 by the processor when the processor executes the program.

9. An information storage medium storing a computer program, the computer program comprising: Instructions for implementing the method according to any one of claims 1 to 4 by the processor when the processor reads and executes the program.

Images