Redundant safety operation control system and method for oil-electric hybrid eVTOL

Abstract

The invention belongs to the technical field of aircrafts, and particularly relates to a redundant safety operation control system and method for an oil-electric hybrid eVTOL. The redundant safe operation control system of the oil-electric hybrid eVTOL comprises a redundant backup oil-electric hybrid power supply device, a rotor wing and propulsion propeller driving device, a pneumatic control surface and backup control propeller driving device, a flight state and environment sensing device, a manual operation control device, a fault diagnosis instrument, an alarm, a parachute throwing device and a central controller, various redundant safety designs are adopted, the safety problem of containing various single-point catastrophic faults is solved, potential dangers caused by various improper operations can be early warned and hidden dangers can be eliminated by using various sensors, all-directional and multi-level catastrophic fault state detection of eVTOL can be realized, a standby scheme can be provided, and the safety of eVTOL is improved. And safety protection is provided for drivers and passengers to the greatest extent.

Description

Technical Field

[0001] The present invention belongs to the field of aircraft technology, and in particular relates to a redundant safety operation control system and method for an electric-hybrid virtual reality (EVTOL) vehicle. Background Art

[0002] eVTOL (electric Vertical Take-off and Landing) is an electric vertical take-off and landing aircraft. As an aircraft capable of vertical take-off and landing, eVTOL is unrestricted by terrain and runway conditions, making it an extremely convenient and fast means of medium- and short-distance transportation. As the aircraft most likely to become a popular means of private air transportation, eVTOL can replace or supplement traditional small and medium-sized fixed-wing aircraft and helicopters in many applications, and is becoming a hot area of ​​research and development innovation in countries around the world.

[0003] For manned or passenger eVTOLs, the safety of drivers and passengers is the primary concern of product design and manufacturing, official airworthiness certification, corporate operations management, and drivers and passengers. Therefore, safety performance is the most important performance of manned or passenger eVTOLs. However, because eVTOL is a new industry field, most R&D personnel currently focus on the flight performance of eVTOLs, and pay relatively little attention to and investment in safety performance, especially the safety issues of catastrophic failures. Summary of the Invention

[0004] The present invention aims to provide a redundant safety operation control system and method for a hybrid electric VTOL, so as to improve the safety of the eVTOL through the redundant safety operation control system of the hybrid electric VTOL, especially to improve the safety of the driver and passengers in the event of a catastrophic failure.

[0005] To achieve the above objectives, the present invention adopts the following technical solutions:

[0006] Provides a redundant safety operation control system for a hybrid eVTOL, including:

[0007] A redundant backup hybrid power supply device, comprising a generator driven by an engine and a redundant backup battery pack;

[0008] A rotor and propeller drive device, wherein the rotor and propeller drive device includes a rotor drive motor and a propeller drive motor, which serve as backup for each other;

[0009] The pneumatic control surfaces and the backup control propeller drive device include a rudder actuator, a directional control propeller drive motor, a pitch rudder actuator, a pitch control propeller drive motor, a flaperon actuator, and a roll control propeller drive motor. Each actuator and the corresponding control propeller drive motor serve as redundant backups for each other.

[0010] Preferably, it also includes a flight status and environment perception device, which includes a flight direction sensor, a pitch angle sensor, a roll angle sensor, a wing angle of attack sensor, a flight altitude sensor, a maneuvering overload acceleration sensor, and an anti-collision sensor.

[0011] Preferably, it also includes a manual operation control device, a fault diagnosis instrument, an alarm, a parachute ejector and a central controller;

[0012] The battery pack, engine, rotor drive motor, propeller drive motor, rudder actuator, directional control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, central controller, parachute ejector and the manual control device are connected by signal;

[0013] The generator and battery pack are electrically connected to corresponding electrical components;

[0014] The engine, battery pack, rotor drive motor, propeller drive motor, rudder actuator, directional control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, parachute ejector, alarm, fault diagnosis instrument, flight direction sensor, pitch angle sensor, roll angle sensor, wing angle of attack sensor, flight altitude sensor, maneuvering overload acceleration sensor, and anti-collision sensor are connected to the central controller by signal;

[0015] The engine, generator, battery pack, manual operation control device, rotor drive motor, propulsion propeller drive motor, rudder actuator, direction control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, flight direction sensor, pitch angle sensor, roll angle sensor, wing angle of attack sensor, flight altitude sensor, maneuvering overload acceleration sensor, anti-collision sensor, parachute ejector, and alarm are connected to the fault diagnosis instrument signal.

[0016] Preferably, the manual operation control device is an operation keyboard and / or a touch screen.

[0017] Preferably, the central controller includes a circuit board, on which a processor, a memory, a power module, and communication modules and / or communication interfaces corresponding to the relevant components connected to each signal are provided.

[0018] The present invention further provides a redundant safety operation control method for a hybrid electric VTOL. The method adopts the redundant safety operation control system for the hybrid electric VTOL described above, comprising:

[0019] When the generator driven by the engine fails to provide power to the eVTOL, the alarm will issue a power shortage alarm, and the backup battery pack will automatically provide sufficient power to allow the eVTOL to continue to fly safely for an appropriate time or distance and land safely.

[0020] When the rotor drive motor fails, the alarm issues a fault alarm, and the pilot starts the propulsion propeller drive motor. Otherwise, the central controller issues a command to start the propulsion propeller drive motor, so that the eVTOL continues to fly safely in fixed-wing aircraft mode and taxis to land on the airport runway; or when the propulsion propeller drive motor fails, the alarm issues a fault alarm, and the pilot starts the rotor drive motor. Otherwise, the central controller issues a command to start the rotor drive motor, so that the eVTOL continues to fly safely in helicopter mode for an appropriate time or distance and lands safely;

[0021] When the rudder actuator fails, the alarm sounds an alarm and the directional control of the eVTOL is continued by controlling the directional control propeller drive motor; when the pitch rudder actuator fails, the alarm sounds an alarm and the pitch control of the eVTOL is continued by controlling the pitch control propeller drive motor; when the flaperon actuator fails, the alarm sounds an alarm and the roll control of the eVTOL is continued by controlling the roll control propeller drive motor.

[0022] Preferably, when the flight direction sensor detects that the flight direction of the eVTOL deviates from the preset direction, the alarm will issue a direction deviation alarm, and the pilot will correct the flight direction or set a new flight direction; if the pilot does not perform any flight direction operation, the central controller will issue an instruction to automatically correct the flight direction deviation;

[0023] When the pitch angle sensor detects that the pitch angle of the eVTOL deviates from a preset angle, the alarm will issue a pitch angle deviation alarm, prompting the driver to correct the pitch angle or set a new pitch angle; if the driver does not perform any pitch angle operation, the central controller will issue a command to automatically correct the pitch angle deviation;

[0024] When the roll angle sensor detects that the roll angle of the eVTOL deviates from the preset angle, the alarm will issue a roll angle deviation alarm, and the driver will correct the roll angle or set a new roll angle; if the driver does not perform a roll operation, the central controller will issue an instruction to automatically correct the roll angle deviation.

[0025] Preferably, when the flight altitude sensor detects that the flight altitude of the eVTOL deviates from a preset altitude, the alarm will issue a flight altitude deviation alarm, and the driver will correct the flight altitude or set a new flight altitude; if the driver does not perform a flight altitude operation, the central controller will issue a command to automatically correct the flight altitude deviation;

[0026] When the maneuvering overload acceleration sensor detects that the eVTOL's maneuvering overload deviates from the preset overload, the alarm will issue an overload deviation alarm, and the pilot will correct the aircraft's maneuvering overload deviation or set a new maneuvering overload limit; if the pilot does not perform a maneuvering overload correction operation, the central controller will issue a command to automatically correct the maneuvering overload deviation;

[0027] When the wing angle of attack sensor detects that the eVTOL's wing angle of attack deviates from the preset angle of attack limit, the alarm will issue a wing angle of attack deviation alarm, and the pilot will correct the wing angle of attack deviation; if the pilot does not perform the wing angle of attack correction operation, the central controller will issue a command to automatically correct the wing angle of attack deviation.

[0028] Preferably, when the anti-collision sensor detects that the eVTOL is at risk of collision, the alarm will issue a collision risk alarm, and the driver will operate the eVTOL to perform an anti-collision avoidance maneuver. If the driver does not perform an anti-collision avoidance maneuver, the central controller will issue an instruction, and the eVTOL will automatically perform an anti-collision avoidance maneuver.

[0029] Preferably, when all backup devices fail and the eVTOL cannot continue to fly safely, the alarm issues a reminder alarm of "starting the entire aircraft parachute", and the pilot starts the parachute ejector to release the entire aircraft parachute. The central controller can also automatically start the parachute ejector to release the entire aircraft parachute according to the preset setting.

[0030] Compared with the prior art, the beneficial effects of the present invention are as follows: the redundant safety operation control system of the hybrid eVTOL includes a redundant backup hybrid power supply device, a rotor and propeller drive device, a pneumatic control surface and a backup control propeller drive device, a flight status and environment perception device, a manual operation control device, a fault diagnosis instrument, an alarm, a parachute launcher and a central controller. It adopts a variety of redundant safety designs to solve the safety problems of various single-point catastrophic failures. By using multiple sensors, it can warn of potential dangers caused by various improper operations and eliminate hidden dangers. It can realize the detection of all-round and multi-level catastrophic failure states of the eVTOL and provide backup plans, thereby providing maximum safety protection for the crew. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0032] Figure 1 FIG. 1 is a schematic diagram of the overall architecture of an embodiment of a redundant safety operation control system for a hybrid eVTOL according to the present invention.

[0033] Figure 2 Schematic diagram of the control architecture of the manual operation control device in one embodiment of the redundant safety operation control system of the hybrid eVTOL of the present invention.

[0034] Figure 3 FIG. 1 is a schematic diagram of a power supply architecture of an embodiment of a redundant safety operation control system for a hybrid eVTOL according to the present invention.

[0035] Figure 4 FIG. 1 is a schematic diagram of the control architecture of an embodiment of a redundant safety operation control system for a hybrid eVTOL according to the present invention.

[0036] Figure 5 FIG. 1 is a schematic diagram of a fault diagnosis architecture of an embodiment of a redundant safety operation control system for a hybrid eVTOL according to the present invention. DETAILED DESCRIPTION

[0037] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0038] In one embodiment, a redundant safety operation control system for a hybrid eVTOL is provided, such as Figure 1As shown, the redundant safety operation control system of the hybrid eVTOL includes a redundant backup hybrid power supply device, a rotor and propeller drive device, a pneumatic control surface and a backup control propeller drive device, a flight status and environment perception device, a manual operation control device, a fault diagnosis instrument, an alarm, a parachute ejector and a central controller, wherein the redundant backup hybrid power supply device is set separately from the power supply equipment carried by the eVTOL itself, and the redundant backup hybrid power supply device includes a generator driven by an engine and a redundant backup battery pack; the rotor and propeller drive device includes a rotor drive motor and a propeller drive motor, which back up each other; the pneumatic control surface and the backup control propeller drive device include a rudder actuator, a directional control propeller drive motor, a pitch rudder actuator, a pitch control propeller drive motor, a flaperon actuator, a roll control propeller Propeller drive motor, each actuator and the corresponding control propeller drive motor are redundant backups of each other; the flight status and environment perception device includes a flight direction sensor, a pitch angle sensor, a roll angle sensor, a wing angle of attack sensor, a flight altitude sensor, a maneuvering overload acceleration sensor, and an anti-collision sensor; the manual operation control device is used for the pilot to manually control the relevant execution components of the redundant safety operation control system of the hybrid eVTOL, the fault diagnosis instrument is used to diagnose whether the functions of the relevant execution components of the redundant safety operation control system of the hybrid eVTOL are normal, the alarm is used to issue an alarm to remind the pilot when the relevant execution component fails, the parachute ejector is used to eject the entire parachute of the redundant safety operation control system of the hybrid eVTOL, and the central controller is used to control the action of the corresponding execution component in combination with the pilot's operating instructions or the sensing signals of the relevant sensors.

[0039] Combine Figure 2 As shown, the battery pack, engine, rotor drive motor, propeller drive motor, rudder actuator, directional control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, central controller, and parachute ejector of the redundant safety operation control system of the hybrid eVTOL are signal-connected to the manual operation control device. The manual operation control device is composed of an operation keyboard, a touch screen, or a combination of an operation keyboard and a touch screen. The manual operation control device is arranged next to the pilot and does not need to be used under normal flight conditions. The corresponding action is performed through the manual operation control device only when the relevant backup execution components need to be activated.

[0040] Combine Figure 3As shown, the generator and battery pack are electrically connected to corresponding electrical components. Specifically, the engine generates electricity through the generator, which charges the battery pack. Both the generator and the battery pack are capable of powering corresponding electrical components. The manual control device, central controller, rotor drive motor, propeller drive motor, rudder actuator, directional control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, flight direction sensor, pitch angle sensor, roll angle sensor, wing angle of attack sensor, flight altitude sensor, maneuvering overload acceleration sensor, collision avoidance sensor, parachute ejector, and alarm are all electrically connected to the generator and battery pack. A fault diagnosis instrument is also electrically connected to the battery pack.

[0041] Combine Figure 4 As shown, the engine, battery pack, rotor drive motor, propeller drive motor, rudder actuator, directional control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, parachute ejector, alarm, fault diagnosis instrument, flight direction sensor, pitch angle sensor, roll angle sensor, wing angle of attack sensor, flight altitude sensor, maneuvering overload acceleration sensor, and collision avoidance sensor of the redundant safety operation control system of the hybrid eVTOL are all connected to the central controller by signal. The central controller includes a circuit board, which is equipped with a processor, memory, power module, and communication modules and communication interfaces corresponding to the relevant components connected to each signal. The communication module is composed of a wired or wireless communication method. If the central controller has its own communication function, it can be configured with a communication interface to achieve access control between the central controller and each execution component.

[0042] Combine Figure 5 As shown, the engine, generator, battery pack, manual operation control device, rotor drive motor, propeller drive motor, rudder actuator, directional control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, flight direction sensor, pitch angle sensor, roll angle sensor, wing angle of attack sensor, flight altitude sensor, maneuvering overload acceleration sensor, anti-collision sensor, parachute ejector, and alarm of the redundant safety operation control system of the hybrid eVTOL are signal-connected to the fault diagnosis instrument. The fault diagnosis instrument is also provided with a communication module and / or a communication interface so that each sensor and the corresponding execution component can communicate with the fault diagnosis instrument, so that the fault diagnosis instrument can diagnose the fault of each component to ensure that it is in an available state.

[0043] Based on the above embodiments, it can be seen that the redundant safety operation control system of the hybrid eVTOL adopts multiple redundant safety designs to solve the safety issues of various single-point catastrophic failures. By using multiple sensors, it can warn of potential dangers caused by various improper operations and eliminate hidden dangers. It can realize the full-scale, multi-level catastrophic failure state detection of the eVTOL and provide backup plans, providing maximum safety protection for drivers and passengers.

[0044] In one embodiment, a redundant safety operation control method for a hybrid electric VTOL is provided. The method adopts the redundant safety operation control system for the hybrid electric VTOL in the previous embodiment. The method includes:

[0045] (1) When the engine-driven generator fails to power the eVTOL, the alarm sounds an insufficient power alarm, and the backup battery pack automatically provides sufficient power to allow the eVTOL to continue to fly safely for an appropriate time or distance and land safely. The alarm can be a combination of sound and screen flashing display.

[0046] (2) When the rotor drive motor fails, the alarm sounds a fault alarm, and the pilot starts the propeller drive motor. Otherwise, the central controller issues a command to start the propeller drive motor, so that the eVTOL continues to fly safely in fixed-wing aircraft mode and taxis to land on the airport runway; or when the propeller drive motor fails, the alarm sounds a fault alarm, and the pilot starts the rotor drive motor. Otherwise, the central controller issues a command to start the rotor drive motor, so that the eVTOL continues to fly safely in helicopter mode for an appropriate time or distance and lands safely.

[0047] The rotor drive motor and propeller drive motor are two different power units in the eVTOL configuration. The rotor drive motor drives the rotor, while the propeller drive motor drives the propeller. These are used for eVTOL ascent and descent, respectively. However, as long as one motor is functioning properly, the eVTOL's safety is guaranteed. The rotor drive motor and propeller drive motor are isolated from each other in terms of installation and control, eliminating any conflicts.

[0048] (3) When the rudder actuator fails, the alarm sounds an alarm and the propeller drive motor is controlled to maintain the directional control of the eVTOL; when the pitch rudder actuator fails, the alarm sounds an alarm and the propeller drive motor is controlled to maintain the pitch control of the eVTOL; when the flaperon actuator fails, the alarm sounds an alarm and the propeller drive motor is controlled to maintain the roll control of the eVTOL.

[0049] The rudder actuator and directional control propeller drive motor are two different devices for controlling flight direction on an eVTOL. They can be used interchangeably, with the rudder actuator being the primary device. Similarly, the pitch rudder actuator and pitch control propeller drive motor are two different devices for controlling flight pitch on an eVTOL. They can be used interchangeably, with the pitch rudder actuator being the primary device. The flaperon actuator and roll control propeller drive motor are two different devices for controlling flight roll amplitude on an eVTOL. They can be used interchangeably, with the flaperon actuator being the primary device.

[0050] (4) When the flight direction sensor detects that the eVTOL's flight direction deviates from the preset direction, the alarm will sound a direction deviation alarm, and the pilot will correct the flight direction or set a new flight direction. If the pilot does not perform any flight direction operation, the central controller will issue a command to automatically correct the flight direction deviation. The flight direction sensor set here detects deviation from the preset direction, and by setting the pilot to control and the central controller to automatically issue commands, the accuracy and safety of the flight direction are effectively guaranteed.

[0051] (5) When the pitch angle sensor detects that the eVTOL's pitch angle deviates from the preset angle, the alarm will sound a pitch angle deviation alarm, and the pilot will correct the pitch angle or set a new pitch angle. If the pilot does not perform any pitch angle operation, the central controller will issue a command to automatically correct the pitch angle deviation. The pitch angle sensor set here detects that the pitch angle deviates from the preset value. By setting the pilot to control and the central controller to automatically issue commands, the accuracy and safety of the flight pitch angle are effectively guaranteed.

[0052] (6) When the roll angle sensor detects that the eVTOL's roll angle deviates from the preset angle, the alarm will sound a roll angle deviation alarm, and the pilot will correct the roll angle or set a new roll angle. If the pilot does not perform a roll operation, the central controller will issue a command to automatically correct the roll angle deviation. The roll angle sensor set here detects that the roll angle deviates from the preset value. By setting the pilot to control and the central controller to automatically issue commands, the accuracy and safety of the flight roll angle are effectively guaranteed.

[0053] (7) When the flight altitude sensor detects that the eVTOL's flight altitude deviates from the preset altitude, the alarm will sound a flight altitude deviation alarm, and the driver will correct the flight altitude or set a new flight altitude. If the driver does not perform any flight altitude operation, the central controller will issue a command to automatically correct the flight altitude deviation. The flight altitude sensor set here detects that the flight altitude deviates from the preset value. By setting the driver to control and the central controller to automatically issue commands, the accuracy and safety of the flight altitude are effectively guaranteed.

[0054] (8) When the maneuvering overload acceleration sensor detects that the eVTOL's maneuvering overload deviates from the preset overload, the alarm will sound an overload deviation alarm, and the pilot will correct the aircraft's maneuvering overload deviation or set a new maneuvering overload limit. If the pilot does not perform the maneuvering overload correction operation, the central controller will issue a command to automatically correct the maneuvering overload deviation. The overload acceleration sensor set here senses the overload deviation from the preset value, and by setting the pilot control and the central controller automatically issuing commands, the accuracy and safety of flight overload judgment are effectively guaranteed.

[0055] (9) When the wing angle of attack sensor detects that the eVTOL's wing angle of attack deviates from the preset angle of attack limit, the alarm will sound a wing angle of attack deviation alarm, and the pilot will correct the wing angle of attack deviation; if the pilot does not perform the wing angle of attack correction operation, the central controller will issue a command to automatically correct the wing angle of attack deviation. The wing angle of attack sensor set here detects the deviation from the preset angle, and by setting the pilot control and the central controller automatically issuing commands, the accuracy and safety of the flight wing angle of attack are effectively guaranteed.

[0056] (10) When the collision avoidance sensor detects a collision risk with the eVTOL, the alarm sounds a collision hazard warning, and the pilot controls the eVTOL to perform a collision avoidance maneuver. If the pilot fails to perform a collision avoidance maneuver, the central controller issues a command, and the eVTOL automatically performs a collision avoidance maneuver. When the collision avoidance sensor detects a collision risk, the pilot controls the flight, and the central controller automatically issues a command, effectively ensuring flight accuracy and safety.

[0057] (11) When all backup devices fail and the eVTOL cannot continue to fly safely, the alarm will sound a reminder to "activate the entire aircraft parachute". The pilot will activate the parachute ejector to release the entire aircraft parachute. The central controller can also automatically activate the parachute ejector to release the entire aircraft parachute according to the preset settings. The parachute ejector set here is the last safety guarantee for the entire aircraft. It will not be used easily. It will only be activated when all backup plans fail. The entire aircraft parachute set also effectively guarantees flight safety. Even if all failures occur, it can provide the last safety guarantee. It is particularly suitable for relatively small aircraft such as eVTOL.

[0058] Based on the above embodiments, it can be seen that the redundant safety operation control method of the hybrid eVTOL adopts multiple redundant safety designs to solve the safety issues of various single-point catastrophic failures. By using multiple sensors, it can warn of potential dangers caused by various improper operations and eliminate hidden dangers. It can realize the detection of all-round, multi-level catastrophic failure states of eVTOL and provide backup plans. For single-point catastrophic failures, there are redundant backup devices to ensure safe flight, and it can tolerate most double-fault and multiple-fault combinations. It can also automatically correct safety issues caused by some incorrect operations, providing maximum safety protection for drivers and passengers.

[0059] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that includes a list of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus.

[0060] While embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to these embodiments without departing from the principles and spirit of the invention, and that the scope of the invention is defined by the appended claims and their equivalents.

Claims

1. A redundant safety operation control system for a hybrid electric VTOL, characterized in that: include: A redundant backup hybrid power supply device, comprising a generator driven by an engine and a redundant backup battery pack; A rotor and propeller drive device, wherein the rotor and propeller drive device includes a rotor drive motor and a propeller drive motor, which serve as backup for each other; The pneumatic control surfaces and the backup control propeller drive device include a rudder actuator, a directional control propeller drive motor, a pitch rudder actuator, a pitch control propeller drive motor, a flaperon actuator, and a roll control propeller drive motor. Each actuator and the corresponding control propeller drive motor serve as redundant backups for each other.

2. The redundant safety operation control system for the hybrid eVTOL according to claim 1, characterized in that: It also includes a flight status and environment perception device, which includes a flight direction sensor, a pitch angle sensor, a roll angle sensor, a wing angle of attack sensor, a flight altitude sensor, a maneuvering overload acceleration sensor, and an anti-collision sensor.

3. The redundant safety operation control system for the hybrid eVTOL according to claim 2, characterized in that: It also includes manual operation control devices, fault diagnosis instruments, alarms, parachute ejectors and central controllers; The battery pack, engine, rotor drive motor, propeller drive motor, rudder actuator, directional control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, central controller, parachute ejector and the manual control device are connected by signal; The generator and battery pack are electrically connected to corresponding electrical components; The engine, battery pack, rotor drive motor, propeller drive motor, rudder actuator, directional control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, parachute ejector, alarm, fault diagnosis instrument, flight direction sensor, pitch angle sensor, roll angle sensor, wing angle of attack sensor, flight altitude sensor, maneuvering overload acceleration sensor, and anti-collision sensor are connected to the central controller by signal; The engine, generator, battery pack, manual operation control device, rotor drive motor, propulsion propeller drive motor, rudder actuator, direction control propeller drive motor, pitch rudder actuator, pitch control propeller drive motor, flaperon actuator, roll control propeller drive motor, flight direction sensor, pitch angle sensor, roll angle sensor, wing angle of attack sensor, flight altitude sensor, maneuvering overload acceleration sensor, anti-collision sensor, parachute ejector, and alarm are connected to the fault diagnosis instrument signal.

4. The redundant safety operation control system for the hybrid eVTOL according to claim 3, characterized in that: The manual operation control device is an operation keyboard and / or a touch screen.

5. The redundant safety operation control system for the hybrid eVTOL according to claim 5, characterized in that: The central controller includes a circuit board, on which a processor, a memory, a power supply module, and communication modules and / or communication interfaces corresponding to components related to various signal connections are provided.

6. A redundant safety operation control method for a hybrid electric VTOL, characterized in that: The method adopts the redundant safety operation control system of the hybrid eVTOL according to any one of claims 3 to 5, comprising: When the generator driven by the engine fails to provide power to the eVTOL, the alarm will issue a power shortage alarm, and the backup battery pack will automatically provide sufficient power to allow the eVTOL to continue to fly safely for an appropriate time or distance and land safely. When the rotor drive motor fails, the alarm issues a fault alarm, and the pilot starts the propulsion propeller drive motor. Otherwise, the central controller issues a command to start the propulsion propeller drive motor, so that the eVTOL continues to fly safely in fixed-wing aircraft mode and taxis to land on the airport runway; or when the propulsion propeller drive motor fails, the alarm issues a fault alarm, and the pilot starts the rotor drive motor. Otherwise, the central controller issues a command to start the rotor drive motor, so that the eVTOL continues to fly safely in helicopter mode for an appropriate time or distance and lands safely; When the rudder actuator fails, the alarm sounds an alarm and the directional control of the eVTOL is continued by controlling the directional control propeller drive motor; when the pitch rudder actuator fails, the alarm sounds an alarm and the pitch control of the eVTOL is continued by controlling the pitch control propeller drive motor; when the flaperon actuator fails, the alarm sounds an alarm and the roll control of the eVTOL is continued by controlling the roll control propeller drive motor.

7. The redundant safety operation control method for a hybrid eVTOL according to claim 6, characterized in that: When the flight direction sensor detects that the eVTOL's flight direction deviates from the preset direction, the alarm will issue a direction deviation alarm, prompting the pilot to correct the flight direction or set a new flight direction. If the pilot does not perform any flight direction operation, the central controller will issue a command to automatically correct the flight direction deviation. When the pitch angle sensor detects that the pitch angle of the eVTOL deviates from a preset angle, the alarm will issue a pitch angle deviation alarm, prompting the driver to correct the pitch angle or set a new pitch angle; if the driver does not perform any pitch angle operation, the central controller will issue a command to automatically correct the pitch angle deviation; When the roll angle sensor detects that the roll angle of the eVTOL deviates from the preset angle, the alarm will issue a roll angle deviation alarm, and the driver will correct the roll angle or set a new roll angle; if the driver does not perform a roll operation, the central controller will issue an instruction to automatically correct the roll angle deviation.

8. The redundant safety operation control method for a hybrid eVTOL according to claim 7, characterized in that: When the flight altitude sensor detects that the flight altitude of the eVTOL deviates from the preset altitude, the alarm will issue a flight altitude deviation alarm, prompting the pilot to correct the flight altitude or set a new flight altitude. If the pilot does not perform any flight altitude operation, the central controller will issue a command to automatically correct the flight altitude deviation. When the maneuvering overload acceleration sensor detects that the eVTOL's maneuvering overload deviates from the preset overload, the alarm will issue an overload deviation alarm, and the pilot will correct the aircraft's maneuvering overload deviation or set a new maneuvering overload limit; if the pilot does not perform a maneuvering overload correction operation, the central controller will issue a command to automatically correct the maneuvering overload deviation; When the wing angle of attack sensor detects that the eVTOL's wing angle of attack deviates from the preset angle of attack limit, the alarm will issue a wing angle of attack deviation alarm, and the pilot will correct the wing angle of attack deviation; if the pilot does not perform the wing angle of attack correction operation, the central controller will issue a command to automatically correct the wing angle of attack deviation.

9. The redundant safety operation control method for a hybrid eVTOL according to claim 8, characterized in that: When the anti-collision sensor detects that the eVTOL is at risk of collision, the alarm will issue a collision risk alert, and the driver will operate the eVTOL to perform an anti-collision avoidance maneuver. If the driver does not perform the anti-collision avoidance maneuver, the central controller will issue an instruction, and the eVTOL will automatically perform an anti-collision avoidance maneuver.

10. The redundant safety operation control method for a hybrid eVTOL according to claim 9, characterized in that: When all backup devices fail and the eVTOL cannot continue to fly safely, the alarm will issue a reminder alarm to "start the entire aircraft parachute". The pilot will start the parachute ejector to release the entire aircraft parachute. The central controller can also automatically start the parachute ejector to release the entire aircraft parachute according to the preset setting.

Images