Three-redundancy aircraft management system digital simulation platform

Abstract

The invention discloses a three-redundancy aircraft management system digital simulation platform, and belongs to the technical field of computers, the three-redundancy aircraft management system digital simulation platform comprises a flight management computer, a simulation computer and a simulation management computer, the flight management computer comprises a flight management module, and the flight management module runs aircraft management software and sends flight control instruction data to a simulation module of the simulation computer; the simulation module is used for receiving a flight management instruction, executing a simulation operation task and simulating real-time data communication interaction between each airborne device and a flight management computer; and the simulation management upper computer comprises a simulation management module, and the simulation management module runs simulation management software, sends a simulation process control instruction and a data injection instruction to the simulation module, receives return data of each airborne device simulated by the simulation computer, and monitors and displays the return data on a simulation management interface. According to the method, the function and logic of the three-redundancy flight management software system can be comprehensively tested through data injection simulation faults without depending on flight management computer hardware and a simulation hardware environment and an operation system of the flight management computer hardware.

Description

Technical Field

[0001] The present invention relates to the field of simulation design of aircraft control management systems, and in particular to a digital simulation platform for a triple-redundant aircraft management system. Background Art

[0002] The aircraft management system is a crucial component of avionics equipment, controlling the entire flight process and placing extremely high demands on reliability and fault tolerance. To enhance system safety and reliability, large military and civilian aircraft often utilize redundant aircraft management systems.

[0003] The triple-redundant aircraft management computer has three built-in processors and three control input and output channels. Each processor runs the flight control application software independently. Through the reasonable configuration of the internal functional boards and the synchronous transmission of cross-link data of the FPGA circuit, it can realize the information processing, redundancy voting, aircraft control management, command output, channel monitoring and other functions of the triple-redundant control channel.

[0004] The flight control system simulation platform is a crucial environment for verifying the correctness and rationality of the overall design, navigation, guidance, and control law development of the aircraft management system. Currently, the hardware-in-the-loop (HIL) simulation system commonly used in laboratories features an avionics interface compatible with the flight control computer. It can simulate the aircraft's kinematic and dynamic characteristics, as well as the functional characteristics of other onboard equipment, and interact with the flight control computer in real time, thereby verifying the functionality and logic of the aircraft management system's hardware and software designs. However, because the signal channel fault logic and data cross-transmission logic of the triple-redundant flight control system are implemented by internal hardware modules such as the bus interface boards and circuits within the flight control computer, the simulation system only interacts with the flight control system above the flight control computer backplane connector level. This makes it impossible to test key functions of the triple-redundant flight control software, such as redundancy management and signal voting, through numerical fault injection simulation. This presents certain limitations. Furthermore, the HIL simulation system platform relies on the flight control computer hardware and its corresponding simulation hardware environment and operating system, resulting in high costs and lack of cross-platform support.

[0005] Patent CN101482753A discloses a redundant flight control computer real-time simulation device and system. Specifically, it discloses a simulation system consisting of a real-time simulation target machine and a development and monitoring host. A redundant flight control computer model is built using MATLAB / Simulink, compiled into C code, and then imported into a simulation target machine running the VxWorks real-time operating system. This system can simulate functions such as signal voting, cross-transmission, and redundant channel synchronization in the redundant flight control computer. However, this device only simulates the functional characteristics of the redundant flight control computer system and does not form a closed-loop communication simulation system with airborne equipment. It cannot simulate faults to test the performance of the flight control subsystem. Furthermore, it has specific standard requirements for the processor, avionics interface, and operating system, making it unsuitable for universal application. Summary of the Invention

[0006] The present invention aims to solve the problems that the current flight control system simulation platform must rely on flight control computer hardware and the simulation hardware environment and operating system adapted thereto, resulting in limitations in key function testing, high cost, and lack of cross-platform capabilities. A triple-redundant aircraft management system digital simulation platform is proposed, which can not only simulate the aircraft dynamic characteristics, kinematic characteristics, and functional characteristics of onboard equipment, but also simulate the internal signal channel management, data cross-transmission, hardware logic and device status of the triple-redundant flight control computer, and comprehensively test the functions and logic of the triple-redundant aircraft management software system by injecting data to simulate faults.

[0007] In order to achieve the above-mentioned object of the invention, the technical solution of the present invention is as follows: A digital simulation platform for a triple-redundant aircraft management system comprises a flight control computer, a simulation computer and a simulation management computer. The simulation computer establishes communication connections with the flight control computer and the simulation management computer respectively via UDP. The flight control computer comprises a flight control module, which runs aircraft management software and sends flight control instruction data to a simulation module of the simulation computer. The simulation module is used to receive flight control instructions, perform simulation calculation tasks, and simulate real-time communication and interaction between various airborne equipment and the flight control computer data. The simulation management host computer comprises a simulation management module, which runs simulation management software, sends simulation process control instructions and data injection instructions to the simulation module, and simultaneously receives feedback data from various airborne equipment simulated by the simulation computer, and monitors and displays the data on a simulation management interface.

[0008] Furthermore, the flight control module includes three task threads, runs three aircraft management application software, and simulates three channels of a triple-redundant flight control computer.

[0009] Furthermore, the simulation module includes a cross-transmission submodule; the cross-transmission submodule is used to receive control instruction data from the three channels of the flight control computer, cross-transmit the data of each channel to the remaining two channels, and realize synchronization of the three channel data; at the same time, an effective data source is selected for the data of the three channels of the flight control computer, and the selected flight control instruction data is used as the input source of the simulation operation.

[0010] Furthermore, the cross transmission submodule selects valid data sources according to the following principle: first select according to channel validity, then select according to channel priority; when the validity of multiple signal channels is valid, select according to priority.

[0011] Furthermore, the simulation module also includes a simulation operation submodule, which includes a simulation model unit, a data injection unit, a data transceiver unit and a channel management unit; the simulation model unit runs the aircraft dynamics model, kinematic model, airborne sensor model and electromechanical / power model to simulate the dynamic characteristics of the aircraft and each airborne equipment; the data injection unit injects the corresponding simulation equipment data parameters according to the control instructions of the simulation management host computer, and then sends them to the simulation management module and the channel management unit of the flight control module; the data transceiver unit is responsible for receiving simulation management instructions and flight control instruction data and sending simulation data; the channel management unit communicates point-to-point with the three channel interfaces of the flight control module to set the channel hardware status logic data set and the equipment signal status data set.

[0012] Furthermore, the data transceiver unit includes a data receiving subunit and a data sending subunit. The data receiving subunit receives and parses the control instructions of the upper computer simulation management and flight control software, and transmits them to the simulation model unit for calculation; the data sending subunit sends the device simulation data after data injection to the simulation management module and the simulation module, and encapsulates the frame header, heartbeat word, and check word of each device simulation data and sends it to the three channels of the flight control computer.

[0013] Furthermore, the channel management unit has three UDP communication interfaces, which communicate point-to-point with the three channel interfaces of the flight control module respectively; the communication data of each channel includes: flight control instructions and airborne equipment simulation report data, and the other two channels cross-transmit data, simulated channel hardware status logic and equipment signal status.

[0014] Furthermore, the channel hardware status logic includes CPU validity, watchdog status, power status, signal channel status and fault logic; the device signal status includes the heartbeat fault status, check word status, fault status, amplitude threshold and device validity status of each onboard device.

[0015] Furthermore, the channel management unit simulates the hardware and software logic of the channel / device by injecting data from the simulation management host computer, changing the elements of the hardware fault logic data set and the device status data set.

[0016] Furthermore, the channel management unit performs a channel signal redundancy voting closed-loop simulation test by sending a channel / device logic state data set to the flight control computer.

[0017] In summary, the present invention has the following advantages: 1. The triple-redundant aircraft management software digital simulation platform proposed in this invention simulates the cross-transmission of data across the three control channels within the flight control computer, the logical state of channel failures, and the device signal status. It uses UDP communication to simulate and replace the avionics interface type of the triple-redundant flight control computer. The simulation test does not rely on the onboard flight control computer hardware and the required avionics signal interface, and the simulation system can be based on a variety of operating systems.

[0018] 2. The present invention simulates the data injection of the management host computer and sets the simulation data and signal channel logic of the airborne equipment, so as to test the redundancy management, signal voting, self-detection and other functional logics of the triple-redundant flight control software. The test function of the flight control software system is more comprehensive, the cost is low, and the transplantation is convenient. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 This is a diagram of the composition of the digital simulation platform in Example 1 of the present invention.

[0020] Figure 2 This is a diagram of the operation architecture of the digital simulation platform in Example 1 of the present invention.

[0021] Figure 3 This is a diagram showing the cross-transmission relationship between the signal channel and the data channel in Example 1 of the present invention.

[0022] Figure 4 This is a diagram of the channel signal status and device status data structure in Example 1 of the present invention.

[0023] Figure 5 This is a flowchart of the simulation task execution in Example 1 of the present invention. DETAILED DESCRIPTION

[0024] In order to more clearly illustrate the present invention, the present invention is further described below in conjunction with preferred embodiments and drawings. Those skilled in the art should understand that the following specific description is illustrative rather than restrictive and should not be used to limit the scope of protection of the present invention.

[0025] Example 1 The present invention provides a digital simulation platform for a triple-redundant aircraft management system, the hardware system of which is composed of Figure 1 As shown in Figure 1, it consists of three computers, which serve as flight control computer, simulation computer and simulation management host computer respectively. Its software architecture is as follows: Figure 2 As shown, it includes flight control module, simulation module and simulation management module.

[0026] The flight control computer in this solution, namely the aircraft management computer, has functional logic that is completely consistent with the finished flight control computer installed in the real machine. It controls the aircraft management system (including the sensor system, electromechanical / power system, servo actuator system, etc.) and is the object of test of the simulation test system.

[0027] The flight control computer and the simulation computer communicate via UDP. The flight control module, based on the flight control computer hardware, activates three task threads and simultaneously runs three aircraft management application software programs, simulating the three channels of a triple-redundant flight control computer. In this invention, the flight control computer and the simulation computer utilize the UDP network communication protocol. By encapsulating a frame identification code, heartbeat code, and checksum code in data packets, it is possible to distinguish and simulate communications between different onboard devices (sensors, servo actuators) and the flight control computer.

[0028] The simulation module, based on simulation computer hardware and running real-time simulation software, receives flight control commands and simulates the aircraft's motion characteristics and onboard equipment for calculations. In this invention, the simulation module simulates the characteristics of all onboard components (including sensor systems, electromechanical / power systems, and servo actuator systems) that communicate with the flight control computer, as well as the aircraft's kinematic and dynamic characteristics. It also calculates the status of the aircraft and various onboard equipment in real time based on the flight control computer's control commands, ensuring real-time simulation testing.

[0029] The simulation management host computer is connected to the simulation computer through UDP communication. The simulation management module runs the simulation management software based on the simulation management computer hardware and performs the following functions: sending simulation process control instructions (simulation start / stop / initialization and other control instructions) and data injection instructions to the simulation module; at the same time, receiving and analyzing the airborne equipment simulation calculation data simulated by the simulation module, and monitoring and displaying it in real time on the simulation management interface.

[0030] In this embodiment, the simulation module includes a cross-transmission submodule and a simulation operation submodule. The cross-transmission submodule receives control command data from three channels A, B, and C of the flight control computer, cross-transmits the data from each channel to the remaining two channels, achieving data synchronization across the three channels. It also selects valid data sources for the data from the three channels of the flight control computer and uses the selected flight control command data as the input source for the simulation operation.

[0031] Preferably, the principle of data source screening is: first select according to channel validity, then select according to channel priority. When multiple signal channels are valid, selection is made according to priority, and the channel priority is: A>B>C.

[0032] Specifically, the simulation operation submodule includes a simulation model unit, a data injection unit, a data transceiver unit and a channel management unit.

[0033] Among them, the simulation model unit is used to run the aircraft dynamics model, kinematic model, airborne sensor model (atmospheric data sensor, heading sensor, etc.) and electromechanical / power model, and solve the aircraft's real-time motion parameters and airborne equipment parameters.

[0034] The data injection unit is used to inject the corresponding simulation device data parameters according to the control instructions of the simulation management host computer, and send them to the channel management unit of the simulation management module and the flight control module through the data sending unit.

[0035] The data transceiver unit, comprised of a data receiving subunit and a data sending subunit, is responsible for receiving simulation management commands and flight control command data, and for sending simulation data. The data receiving subunit is responsible for receiving and parsing control commands from the host computer's simulation management and flight control software, and then transmitting them to the simulation model unit for computation. The data sending subunit transmits the injected device simulation data to the simulation management module and the simulation module's channel management unit. Furthermore, the data from each device is encapsulated with a frame header, heartbeat word, and checksum before sending it to the three channels of the flight control computer.

[0036] The channel management unit has three UDP communication interfaces, each for point-to-point communication with the three channel interfaces of the flight control module. Communication data for each channel includes flight control commands and simulated airborne equipment reporting data; cross-transmission data from the remaining two channels; and simulated channel hardware logic and equipment signal status.

[0037] The channel management unit can set the channel hardware status logic data set and the device signal status data set. Among them, the channel hardware status logic refers to the hardware fault logic of the three signal channels A, B, and C that communicate between the flight control module and the simulation module, including CPU validity, watchdog status, power status, monitoring status, fault logic, etc. The device signal status refers to the validity status of each airborne device, including device validity, heartbeat fault status, check word status, self-detection status, fault logic, fault threshold, device valid channel and other related logics. Specifically, by establishing a data set for the channel hardware status logic and the device signal status, the following can be obtained: Figure 4 The data structure shown.

[0038] Furthermore, by injecting data from the simulation management host computer, elements of the channel hardware status logic data set and the device status data set of the channel management unit can be changed to simulate the software and hardware logic of the channel / device.

[0039] Furthermore, the channel management unit can perform a channel signal redundancy voting closed-loop simulation test by sending the channel hardware status logic data set and the device status data set to the flight control computer.

[0040] In the above cross transmission submodule, each interface supports X and Y two-way input / output, and cross-transmits the simulation data of this channel to the other two channels, that is, channel A data is forwarded to channels B and C, channel B data is forwarded to channels A and C, and channel C data is forwarded to channels A and B. The data channel transmission logic is as follows: Figure 3 shown.

[0041] The following describes the scheduling execution process of the simulation module. Figure 5 As shown, it can open 2 tasks at the same time.

[0042] Task 1: Data reception and cross transmission.

[0043] Data Receiving: Receives command data from the flight control module's A, B, and C channels. The data source is selected based on channel availability and priority, and then transmitted to Task 2 for simulation. The data source selection method is: first based on channel availability, then based on channel priority, with channel priority being A > B > C.

[0044] Cross transmission: Cross-transmit the simulation data of each channel to the remaining two channels.

[0045] Task 2: Simulation operation. The specific steps are as follows: a. System initialization; b. Receive and parse the instructions of the simulation management software (control instructions, data injection device ID, parameter index, injection value, etc.); c. Receive the selected valid flight control data source instruction and parse the data; d. Electromechanical / power system simulation calculation; aircraft dynamics and kinematics simulation calculation; airborne sensor simulation calculation; e. Inject simulation data of corresponding equipment according to simulation management instructions; f. Simulate data encapsulation, verification and sending; g. Channel hardware status logic and device signal validity status data transmission.

[0046] The test object of the present invention is a triple-redundant flight management software system. The simulation computer simulates the following contents: 1) Aircraft dynamic and kinematic characteristics; 2) The functional characteristics of the onboard equipment (sensors, electromechanical / power systems, servo-actuation systems) that communicate with the flight control computer; 3) Cross-transmission logic for the three control output channels of the triple-redundant flight control computer; 4) Hardware fault status logic output by the triple-redundant flight tube computer hardware driver layer; This verifies and tests the functional logic of the software design, control law design, control strategy design, signal voting, and channel redundancy selection design of the triple-redundant aircraft management system.

[0047] The above description is only a preferred embodiment of the present invention and does not limit the present invention in any form. Any simple modification or equivalent change made to the above embodiment based on the technical essence of the present invention shall fall within the scope of protection of the present invention.

Claims

1. A triple-redundant aircraft management system digital simulation platform, comprising a flight control computer, a simulation computer, and a simulation management computer, wherein the simulation computer establishes communication connections with the flight control computer and the simulation management computer respectively via UDP, characterized in that: The flight control computer includes a flight control module, which runs aircraft management software and sends flight control instruction data to the simulation module of the simulation computer; the simulation module is used to receive flight control instructions, perform simulation calculation tasks, and simulate real-time communication and interaction between each airborne equipment and the flight control computer data; the simulation management host computer includes a simulation management module, which runs simulation management software, sends simulation process control instructions and data injection instructions to the simulation module, and at the same time receives the report data of each airborne equipment simulated by the simulation computer, and monitors and displays it on the simulation management interface.

2. A triple-redundant aircraft management system digital simulation platform according to claim 1, characterized in that: The flight control module includes three task threads, which respectively run three aircraft management application software to simulate the three channels of the triple-redundant flight control computer.

3. A triple-redundant aircraft management system digital simulation platform as claimed in claim 2, characterized in that: The simulation module includes a cross-transmission submodule, which is used to receive control instruction data from the three channels of the flight control computer, cross-transmit the data of each channel to the remaining two channels, and realize the synchronization of the three channel data; at the same time, an effective data source is selected for the data of the three channels of the flight control computer, and the selected flight control instruction data is used as the input source of the simulation operation.

4. A triple-redundant aircraft management system digital simulation platform as claimed in claim 3, characterized in that: The simulation module includes a simulation operation submodule, which includes a simulation model unit, a data injection unit, a data transceiver unit and a channel management unit; the simulation model unit runs the aircraft dynamics model, kinematic model, airborne sensor model and electromechanical / power model to simulate the dynamic characteristics of the aircraft and various airborne equipment; the data injection unit injects the corresponding simulation equipment data parameters according to the control instructions of the simulation management computer, and then sends them to the simulation management module and the channel management unit of the flight control module; the data transceiver unit is responsible for receiving simulation management instructions and flight control instruction data and sending simulation data; the channel management unit communicates point-to-point with the three channel interfaces of the flight control module to set the channel hardware status logic data set and the equipment signal status data set.

5. The triple-redundant aircraft management system digital simulation platform according to claim 2, characterized in that: The cross transmission submodule screens valid data sources based on the following principles: first screen according to channel validity, then screen according to channel priority; when multiple signal channels are valid, select according to priority.

6. A triple-redundant aircraft management system digital simulation platform as claimed in claim 4, characterized in that: The data transceiver unit includes a data receiving subunit and a data sending subunit. The data receiving subunit receives and analyzes the control instructions of the host computer simulation management and flight control software, and transmits them to the simulation model unit for calculation; the data sending subunit sends the device simulation data after data injection to the simulation management module and the channel management unit of the simulation module, and encapsulates the frame header, heartbeat word, and check word of each device simulation data and sends it to the three channels of the flight control computer.

7. A triple-redundant aircraft management system digital simulation platform as claimed in claim 4, characterized in that: The channel management unit has three UDP communication interfaces, which respectively communicate with the three channel interfaces of the flight control module in a point-to-point manner; The communication data of each channel includes: flight control instructions and airborne equipment simulation report data, and the other two channels cross-transmit data, simulated channel hardware status logic and equipment signal status.

8. A triple-redundant aircraft management system digital simulation platform as claimed in claim 7, characterized in that: The channel hardware status logic includes CPU validity, watchdog status, power status, signal channel status and fault logic; the device signal status includes the heartbeat fault status, check word status, fault status, amplitude threshold and device validity status of each onboard device.

9. A triple-redundant aircraft management system digital simulation platform as claimed in claim 8, characterized in that: The channel management unit changes the elements of the channel hardware status logic data set and the device status data set by injecting data from the simulation management computer to realize the software and hardware logic of the simulated channel / device.

10. The triple-redundant aircraft management system digital simulation platform according to claim 7, characterized in that: The channel management unit performs a channel signal redundancy voting closed-loop simulation test by sending a channel hardware status logic data set and a device status data set to a flight control computer.

Images