Design method for high-reliability network structure of engine test bed
By conducting a safety-test dual-dimensional hierarchical evaluation of the rocket engine test bench network architecture, combining independent ring network and three-layer topological architecture, the existing network architecture has solved the problems of low resource utilization, high operation and maintenance costs and single-point failure risk, and achieved high reliability and high efficiency network transmission.
Patent Information
- Application Number
- CN202510530939.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-25
- Publication Date
- 2025-08-08
AI Technical Summary
The existing rocket engine test bench network architecture has problems such as low resource utilization, cross-system collaborative hysteresis, high operation and maintenance costs and single-point failure risk, and cannot meet the high reliability transmission needs of long-distance, high real-time and multi-system coupling.
The high-reliability network structure design method of the engine test bench is adopted. By dividing the system levels and combining independent ring network architecture and three-layer topology architecture, dynamic optimization configuration is achieved, including the safety-test dual-dimensional hierarchical evaluation of the system. The key systems adopt independent ring network architecture, and non-critical systems adopt three-layer topology architecture, and redundant design and unified operation and maintenance management are configured.
It improves network resource utilization, reduces equipment energy consumption and operation and maintenance costs, eliminates the risk of single point failure, improves the reliability and fault positioning efficiency of inter-device links, and achieves high reliability and high efficiency network transmission.
Smart Images

Figure CN120455267A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to a rocket engine test bench network system, in particular to a high-reliability network structure design method for an engine test bench. Background Art
[0002] Existing rocket engine test benches mainly use two types of network architectures, but there are structural contradictions between their technical characteristics and test requirements:
[0003] 1. The independent ring network architecture uses multiple systems to independently deploy dedicated networks. For example, the control system, measurement system, and monitoring system are physically isolated, and each subsystem achieves redundancy through a ring topology. This has the following technical limitations:
[0004] 1) Low resource utilization: Each ring network is independently configured with switches, optical fibers, and other hardware, resulting in fragmented redundancy mechanisms and insufficient equipment utilization, leading to increased construction costs and excessive energy consumption.
[0005] 2) Scalability bottlenecks: Adding new measurement points or equipment requires interrupting the corresponding subsystem network for physical wiring. A single expansion takes 4-6 hours, extending the test cycle by more than 30% and delaying cross-system coordination.
[0006] 3) Increased operation and maintenance costs: Independent networks require separate maintenance, and troubleshooting requires switching between different systems, increasing labor costs and time.
[0007] 2. The three-tier topology architecture adopts a "core-aggregation-access" hierarchical structure and achieves resource integration through protocol standardization. The technical problem is that its core switch is responsible for 85% of data forwarding. If a failure occurs, it will cause the entire system data exchange to be interrupted and paralyzed, thereby affecting the safety and test results of the engine test and posing a single point of failure risk.
[0008] In a certain rocket engine test scenario with long distance (≥1km), multiple nodes (>500), high real-time (command transmission delay ≤50ms) and multi-system coupling (control / measurement / fault diagnosis / monitoring / communication / data platform), neither of the above two types of architectures can meet the high-reliability network transmission requirements. Summary of the Invention
[0009] The purpose of the present invention is to solve the technical problems of low resource utilization, cross-system coordination lag, high operation and maintenance costs and single point failure risk in the existing rocket engine test bench network architecture, and to provide a high-reliability network structure design method for an engine test bench.
[0010] In order to achieve the above object, the present invention adopts the following technical solutions:
[0011] A method for designing a high-reliability network structure for an engine test bench, the engine test bench comprising a measurement and control room and a test bench, is characterized in that the method comprises the following steps:
[0012] 1) Identify the engine test bench systems that need to be rated;
[0013] 2) Classify the various systems of the engine test bench;
[0014] 2.1. Classify the safety levels of each system of the engine test bench;
[0015] 2.2. Classify the test levels for each system of the engine test bench;
[0016] 2.3. Obtain the network importance level of each system of the engine test bench based on the safety level and test level;
[0017] 3) The network structure of the engine test bench is integrated according to the network importance level. The system of the first network importance level adopts an independent ring network architecture; the systems of the second and third network importance levels both adopt a "core-aggregation-access" three-layer topology architecture to complete the high-reliability network structure design of the engine test bench.
[0018] Furthermore, in step 2.1, the safety level includes a first safety level, a second safety level, and a third safety level; the first safety level is when the system failure directly affects the safety of the measurement and control room, the test bench, or the test personnel; the second safety level is when the system failure indirectly affects the safety of the measurement and control room, the test bench, or the test personnel, causing safety hazards in the test process; the third safety level is when the system failure has no impact on the safety of the measurement and control room, the test bench, or the test personnel.
[0019] Furthermore, in step 2.2, the three test levels include the first test level, the second test level and the third test level; the first test level is when the system failure directly causes the test to be terminated or failed; the second test level is when the system failure indirectly causes the test to be terminated or failed; and the third test level is when the system failure does not affect the test task.
[0020] Furthermore, step 2.3 is specifically as follows: according to the first safety level, the second safety level, the third safety level, the first test level, the second test level and the third test level, the network importance level of each system of the engine test bench is obtained; the first network importance level is system network independence; the second network importance level is system network redundancy; the third network importance level is system network sharing.
[0021] Furthermore, in step 1), the engine test bench systems to be rated include the control system, fault diagnosis system, slow-change measurement system, fast-change measurement system, test ignition video recording system, UPS monitoring system, environmental monitoring system, condition monitoring system, communication system, data platform system, and security monitoring system. Each system is divided into a core layer, a convergence layer, an access layer, and a device layer.
[0022] Furthermore, in step 2.1, the safety levels of each system of the engine test bench are divided into the following specific levels:
[0023] The control system is of the first safety level; the fault diagnosis system, test ignition video recording system and communication system are of the second safety level; and the remaining engine test bench systems are of the third safety level.
[0024] Furthermore, in step 2.2, the test levels of the engine test bench systems are specifically divided as follows: the control system and fault diagnosis system are the first test level; the slow-change measurement system, fast-change measurement system and test ignition video recording system are the second test level; and the remaining engine test bench systems are the third test level.
[0025] Furthermore, in step 2.3, the network importance levels of the engine test bench systems are obtained as follows: the control system and the fault diagnosis system are at the first network importance level; the slow-changing measurement system, the fast-changing measurement system, the test ignition video recording system, and the communication system are at the second network importance level; and the remaining engine test bench systems are at the third network importance level.
[0026] Furthermore, in step 3), the switches in the access layer of the first network importance level adopt a redundant design, and the links between the switches in the core layer, device layer and access layer adopt a redundant design respectively; ACL policies are configured in the core layer switches and aggregation layer switches of the second network importance level and the third network importance level, the switches in the core layer adopt dual master controls and dual power supplies, and the switches in the aggregation layer adopt four stacking modes to form a network.
[0027] Furthermore, the switches of the access layer of the second network importance level adopt redundant design, and the links adopt dual links; the switches of the access layer of the third network importance level are independent or / and shared, and the links adopt single links.
[0028] Beneficial effects of the present invention:
[0029] 1. This invention combines the advantages of the "independent ring network architecture" and the "three-layer topology plus structure" modes. Through the hierarchical evaluation of the two dimensions of security and testing, it realizes the dynamic optimization configuration of the network architecture and forms a new hybrid architecture with both high reliability and resource efficiency.
[0030] 2. The reliability of the present invention is intensive and collaboratively optimized, with independent protection of key systems. That is, the first network importance level adopts an independent ring network architecture, with 100% isolation of key node faults, eliminating the risk of single point failure; non-critical systems are intensively shared, that is, the second and third network importance levels are connected to a three-layer topology public network, which increases equipment utilization from 38% to 85% and reduces energy consumption to 63%.
[0031] 3. The dynamic redundancy performance of the present invention is greatly improved. The second network importance level adopts a stacking method to improve the reliability of the switch, and adopts a dual-link redundant design to improve the reliability of the link between devices. The fault switching time of the main link (i.e., the link between the core layer and the aggregation layer, and the aggregation layer and the access layer) and the terminal link (i.e., the link between the device layer and the access layer) is reduced from 150ms to ≤20ms.
[0032] 4. The present invention can unify operation and maintenance management, thereby realizing centralized control of multiple network elements and reducing fault location time. BRIEF DESCRIPTION OF THE DRAWINGS
[0033] Figure 1 Schematic diagram of the network structure of the control system and the fault diagnosis system in an embodiment of the present invention;
[0034] Figure 2 Schematic diagram of the network structure of the slow-change measurement system, the fast-change measurement system, the test ignition video recording system and the communication system in an embodiment of the present invention;
[0035] Figure 3 This is a schematic diagram of the network structure of the UPS monitoring system, environmental monitoring system, status monitoring system, data platform system, and security monitoring system in an embodiment of the present invention, where red represents a dual link and blue represents a single link;
[0036] Figure 4 This is a schematic diagram of the high-reliability network structure of an engine test bench according to an embodiment of the present invention, wherein red represents a dual link and blue represents a single link.
[0037] Description of reference numerals:
[0038] 1-Measurement and control room, 2-Test bench, 3-Core layer, 4-Convergence layer, 5-Access layer, 6-Device layer, 7-Link, 8-Host computer, 11-Control system, 12-Fault diagnosis system, 13-Slow-change measurement system, 14-Rapid-change measurement system, 15-Test ignition video recording system, 16-UPS monitoring system, 17-Environmental monitoring system, 18-Status monitoring system, 19-Communication system, 20-Data platform system, 21-Security monitoring system. DETAILED DESCRIPTION
[0039] A method for designing a high-reliability network structure for an engine test bench, the engine test bench comprising a measurement and control room 1 and a test bench 2, comprising the following steps:
[0040] 1) According to the degree of influence of each system of the engine test bench 2 on the test bench 2, the safety of the test personnel and the success of the engine test, the systems of the engine test bench 2 that need to be rated are determined and divided into the core layer 3, the convergence layer 4, the access layer 5 and the equipment layer 6; Among them, the systems of the engine test bench 2 include the control system 11, the fault diagnosis system 12, the slow-changing measurement system 13, the fast-changing measurement system 14, the test ignition video recording system 15, the UPS monitoring system 16, the environmental monitoring system 17, the status monitoring system 18, the communication system 19, the data platform system 20 and the security monitoring system 21; the control system 11 is used to control the engine ignition, the engine shutdown and the opening or closing of all valves of the test bench 2; the fault diagnosis system 12 is used to monitor the key parameters of the engine during operation and perform algorithm combination. If the threshold is exceeded, a shutdown command is issued to the engine, otherwise it continues to observe; the slow-changing measurement system 13 is used to collect The temperature, pressure, thrust and other performance parameters of the engine when it is working; the rapid change measurement system 14 is used to collect the vibration, pulsating pressure and other performance parameters of the engine when it is working; the test ignition video recording system 15 is used to shoot and record the plume shape, engine casing, etc. when the engine is working; the UPS monitoring system 16 is used to monitor the voltage, output power, load conditions and other parameters of the UPS; the environmental monitoring system 17 is used to monitor the atmospheric pressure, temperature, humidity, noise and other parameters around the test bench 2; the status monitoring system 18 is used for daily monitoring of the medium tank pressure of the test bench 2, the valve switch status of the test bench 2, the gas cylinder pressure and other parameters; the communication system 19 is used for communication between test personnel in various rooms, and has the broadcast function of the entire test area; the data platform system 20 is used to centrally store test data and perform data analysis; the security monitoring system 21 is used to monitor the exit and entrance of the test bench 2, the exit and entrance of the measurement and control room 1, and the machine room and other locations.
[0041] 2) Classify the various systems of the engine test bench 2 according to the safety and success or failure of the engine test;
[0042] 2.1. During the engine test process, from a safety perspective, the various systems of engine test bench 2 are divided into three safety levels, specifically the first safety level, the second safety level, and the third safety level in this embodiment. The first safety level is when a system failure directly affects the safety of measurement and control room 1, test bench 2, or test personnel; the second safety level is when a system failure indirectly affects the safety of measurement and control room 1, test bench 2, or test personnel, posing a safety hazard to the test process; and the third safety level is when a system failure has no impact on the safety of measurement and control room 1, test bench 2, or test personnel.
[0043] The 11 systems of the engine test bench 2 are classified according to the above three safety levels, as shown in Table 1 below, where "1" represents the level at which a system is located, and "0" represents the level at which a system is not located.
[0044] Table 1
[0045]
[0046]
[0047] As can be seen from Table 2, the control system 11 is at the first safety level; the fault diagnosis system 12, the test ignition video recording system 15 and the communication system 19 are at the second safety level; and the remaining systems of the engine test bench 2 are at the third safety level.
[0048] 2.2. During the engine test process, based on the test success or failure perspective, the systems of the engine test bench 2 are divided into three test levels: the first test level, the second test level, and the third test level. The first test level is when a system failure directly leads to test termination or failure; the second test level is when a system failure indirectly leads to test termination or failure; and the third test level is when a system failure does not affect the test mission.
[0049] The 11 systems of the engine test bench 2 are classified according to the above three test levels, as shown in Table 2 below, where "1" represents the level at which a system is located, and "0" represents that a system is not located at the level.
[0050] Table 2
[0051] System Name First level Second level Third level control system 1 0 0 Fault diagnosis system 1 0 0 Slowly changing measurement system 0 1 0 Rapid change measurement system 0 1 0 Test ignition video recording system 0 1 0 UPS monitoring system 0 0 1 Environmental monitoring system 0 0 1 Condition Monitoring System 0 0 1 Communication system 0 0 1 Data platform system 0 0 1 Security monitoring system 0 0 1
[0052] As can be seen from Table 2, the control system 11 and the fault diagnosis system 12 are at the first test level; the slow-change measurement system 13, the fast-change measurement system 14 and the test ignition video recording system 15 are at the second test level; and the remaining systems of the engine test bench 2 are at the third test level.
[0053] 2.3. Based on the first safety level, second safety level, third safety level, first test level, second test level, and third test level, obtain the network importance level of each system of engine test bench 2. The network importance level includes the first network importance level, the second network importance level, and the third network importance level. The first network importance level indicates system network independence; the second network importance level indicates system network redundancy; and the third network importance level indicates system network sharing.
[0054] According to the above three safety levels and three test levels, the 11 systems of the engine test bench 2 are classified according to their network importance levels, as shown in Table 3 below, where "1" represents the level at which a system is located, and "0" represents the level at which a system is not located.
[0055] Table 3
[0056] System Name First level Second level Third level control system 1 0 0 Fault diagnosis system 1 0 0 Slowly changing measurement system 0 1 0 Rapid change measurement system 0 1 0 Test ignition video recording system 0 1 0 UPS monitoring system 0 0 1 Environmental monitoring system 0 0 1 Condition Monitoring System 0 0 1 Communication system 0 1 0 Data platform system 0 0 1 Security monitoring system 0 0 1
[0057] As can be seen from Table 3, the control system 11 and the fault diagnosis system 12 are at the first network importance level; the slow-change measurement system 13, the fast-change measurement system 14, the test ignition video recording system 15, and the communication system 19 are at the second network importance level; and the remaining systems of the engine test bench 2 are at the third network importance level.
[0058] The first network importance level is the most important network level, with the highest reliability requirements. The network of the system at this level must be independent of other systems, and the interference of other systems on its network must be eliminated through physical isolation. The network system itself must have high reliability. Figure 1 As shown, the network structures of the control system 11 and the fault diagnosis system 12 of the first network importance level both adopt an independent ring network architecture, and the switches of the access layer 5 thereof adopt a redundant design. The switch redundancy design realizes the virtualization of two switches into one switch by stacking. When the main switch fails, the backup switch will migrate the services carried by the system as a whole without causing service interruption. The access layer 5 switch deployed in the measurement and control room 1 is connected to the host computer 8, and the access layer 5 switch deployed in the test bench 2 is connected to the system equipment; the links 7 between the core layer 3, the equipment layer 6 and the access layer 5 switches are respectively designed to be redundant. Through the link 7 aggregation scheme, multiple links 7 are virtualized into a logical Eth-Trunk link 7 through the LACP protocol. If any link 7 is interrupted, the service will not be affected; for the physical reliability of transmission, the main optical cable of the access layer 5 switch between the measurement and control room 1 and the test bench 2 can be selected as a double-layer armored optical cable to ensure long distance (≥1km).
[0059] The second network importance level is the important network level, which has a high reliability requirement. The network of the system at this level can be shared, but the reliability of its own network system is high and the link adopts a redundant design. Figure 2As shown, the network architecture of the second-level network importance system, slowly changing measurement system 13, rapidly changing measurement system 14, test ignition recording system 15, and communication system 19, all adopts a three-layer "core-aggregation-access" topology. The access layer 5 switch deployed in measurement and control room 1 connects to the host computer 8, while the access layer 5 switch deployed in test bed 2 connects to the system equipment. By configuring ACL policies in the core layer 3 and aggregation layer 4 switches, the network security requirements of test bed 2 are met. The core layer 3 switches adopt a dual master control and dual power supply design to enhance equipment security and reliability. The aggregation layer 4 switches are stacked in a four-unit network, which not only expands port capacity but also provides mutual redundancy. The access layer 5 switches adopt a redundant design, virtualizing two switches into a single switch through stacking. If the active switch fails, the backup switch will migrate all system services without interruption. Link 7 uses dual links for trunk bundling; if either link 7 fails, services remain unaffected.
[0060] The third network importance level is the general network level, which has a low reliability requirement. The system at this level can use the network for public use, and the reliability requirement of its own network system is not high. Figure 3 As shown, the network structure of the UPS monitoring system 16, environmental monitoring system 17, status monitoring system 18, and security monitoring system 21 of the third network importance level adopts a "core-aggregation-access" three-layer topology architecture, wherein the core layer 3 and aggregation layer 4 are shared with the systems of the second network importance level; the switches of the access layer 5 are shared by all systems. According to the requirements of each system of the test bench 2, the different ports of the switches are configured as the network segments of the corresponding systems, so that the terminals of the corresponding systems (i.e., UPS monitoring system 16, environmental monitoring system 17, status monitoring system 18, and security monitoring system 21) can access the corresponding ports and can only communicate within their respective network segments. The data platform system 20 is directly connected to the core layer 3. The links 7 between the device layer 6 and the access layer 5, and between the access layer 5 and the core layer 3 are all single links.
[0061] 3) If Figure 4 As shown, the network structure of the engine test bench 2 is integrated according to the network importance level to complete the high-reliability network structure design of the engine test bench. The specific connection relationship is as follows: the first network importance level adopts an independent ring network architecture, and the systems are physically isolated; the second and third network importance levels adopt a "core-aggregation-access" three-layer topology architecture, and the core layer 3 and the switching layer share the logical isolation between the systems. The second network importance level access layer 5 switch and link 7 adopt a redundant design; the third network importance level access layer 5 switch is shared, and link 7 is a single link.
Claims
1. A method for designing a high-reliability network structure for an engine test bench, the engine test bench comprising a measurement and control room (1) and a test bench (2), characterized in that: The following steps are involved: 1) Identify the engine test bench (2) systems to be rated; 2) Divide the engine test bench (2) into various system levels; 2.
1. Classify the safety levels of each system of the engine test bench (2); 2.
2. Classify the test levels for each system of the engine test bench (2); 2.
3. Obtain the network importance level of each system of the engine test bench (2) based on the safety level and test level; 3) The network structure of the engine test bench (2) is integrated according to the network importance level. The system of the first network importance level adopts an independent ring network architecture; the systems of the second network importance level and the third network importance level both adopt a "core-aggregation-access" three-layer topology architecture, thereby completing the high-reliability network structure design of the engine test bench.
2. The method for designing a high-reliability network structure for an engine test bench according to claim 1, characterized in that: In step 2.1, the security level includes a first security level, a second security level, and a third security level; The first safety level is that the system failure directly affects the safety of the measurement and control room (1), the test bench (2) or the test personnel; The second safety level is that the system failure indirectly affects the safety of the measurement and control room (1), the test bench (2) or the test personnel, causing safety hazards in the test process; The third safety level is that the system failure has no impact on the safety of the measurement and control room (1), the test bench (2) or the test personnel.
3. The method for designing a high-reliability network structure for an engine test bench according to claim 2, characterized in that: In step 2.2, the three test levels include a first test level, a second test level, and a third test level; The first test level is when a system failure directly causes the test to be terminated or failed; The second test level is when a system failure indirectly causes the test to be terminated or failed; The third test level is that the system failure does not affect the test task.
4. The method for designing a high-reliability network structure for an engine test bench according to claim 3, characterized in that: Step 2.3 is as follows: Obtaining a network importance level of each system of the engine test bench (2) according to the first safety level, the second safety level, the third safety level, the first test level, the second test level, and the third test level; The first network importance level is system network independence; The second network importance level is system network redundancy; The third network importance level is common to the system network.
5. The method for designing a high-reliability network structure for an engine test bench according to claim 4, characterized in that: In step 1), the systems of the engine test bench (2) to be rated include a control system (11), a fault diagnosis system (12), a slow-change measurement system (13), a fast-change measurement system (14), a test ignition video recording system (15), a UPS monitoring system (16), an environmental monitoring system (17), a state monitoring system (18), a communication system (19), a data platform system (20), and a security monitoring system (21), and each system is divided into a core layer (3), a convergence layer (4), an access layer (5), and a device layer (6).
6. The method for designing a high-reliability network structure for an engine test bench according to claim 5, characterized in that: In step 2.1, the safety levels of the various systems of the engine test bench (2) are specifically divided as follows: The control system (11) is of the first safety level; the fault diagnosis system (12), the test ignition video recording system (15) and the communication system (19) are of the second safety level; and the remaining systems of the engine test bench (2) are of the third safety level.
7. The method for designing a high-reliability network structure for an engine test bench according to claim 6, characterized in that: In step 2.2, the test levels of each system of the engine test bench (2) are specifically divided as follows: The control system (11) and the fault diagnosis system (12) are of the first test level; the slow-change measurement system (13), the fast-change measurement system (14) and the test ignition video recording system (15) are of the second test level; and the remaining systems of the engine test bench (2) are of the third test level.
8. The method for designing a high-reliability network structure for an engine test bench according to claim 7, characterized in that: In step 2.3, the network importance level of each system of the engine test bench (2) is obtained as follows: The control system (11) and the fault diagnosis system (12) are of the first network importance level; The slow-change measurement system (13), the fast-change measurement system (14), the test ignition video recording system (15) and the communication system (19) are of the second network importance level, and the remaining systems of the engine test bench (2) are of the third network importance level.
9. The method for designing a high-reliability network structure for an engine test bench according to claim 4, characterized in that: In step 3), the switches of the access layer (5) in the first network importance level adopt a redundant design, and the links (7) between the switches of the core layer (3), the device layer (6) and the access layer (5) respectively adopt a redundant design; ACL policies are configured in the core layer (3) switches and the aggregation layer (4) switches of the second network importance level and the third network importance level. The switches of the core layer (3) adopt dual master control and dual power supply, and the switches of the aggregation layer (4) adopt four stacking modes to form a network.
10. The method for designing a high-reliability network structure for an engine test bench according to claim 8, characterized in that: The switches of the access layer (5) of the second network importance level adopt a redundant design, and the links (7) adopt a dual link; The switches of the access layer (5) of the third network importance level are independent or / and shared, and the link (7) adopts a single link.
Citation Information
Patent Citations
Industrial network safety system deployment method and safety system
CN108055261A
Design method of computer network system suitable for large-scale commercial complex
CN110971456A
Engine ground test command decision-making method, system, equipment and medium
CN118010361A
Security-level rod position measuring equipment suitable for nuclear power station and network communication structure
CN118248359A
Process level networking structure applicable to centralized station domain protection communication of intelligent substations
CN202978439U