Control method and aircraft dual-redundancy cold backup environmental control liquid cooling system

Abstract

The invention discloses a control method and an aircraft dual-redundancy cold backup environmental control liquid cooling system. Firstly, main and standby pump judgment logic is executed to determine main and standby identities of liquid cooling pumps 1 and 2; and secondly, when the manual control instruction exists, executing the manual control logic to control the liquid cooling pump, otherwise, executing the automatic control logic to control the liquid cooling pump. The task reliability and the autonomous control capability of the aircraft environment control liquid cooling system of the dual-redundancy cold backup liquid cooling pump are improved.

Description

Technical Field

[0001] This invention belongs to the field of aircraft environmental control design technology, and specifically relates to a control method and an aircraft dual-redundant cold backup environmental control liquid cooling system. Background Technology

[0002] Early aircraft environmental control liquid cooling systems typically handled typical liquid cooling pump failure modes by directly stopping the pump, displaying an alarm message to the pilot, and specifying emergency procedures in the emergency response manual. However, since pilots need to monitor the status of multiple aircraft systems and the battlefield situation in real time during missions, this approach distracts them from the mission itself. Furthermore, with the development of aircraft and the increasing importance of autonomy and intelligence, autonomy in handling simple, non-urgent emergency procedures has become crucial. Adopting autonomous emergency procedures, specifically automatic handling of liquid cooling pump failures, can improve the mission reliability and autonomy of the environmental control liquid cooling system, allowing pilots to focus on more critical operations.

[0003] To improve the mission reliability of airborne systems in long-endurance aircraft, the system design typically employs redundancy to ensure that critical components have both hot and cold backups. This allows the system to maintain normal operation or only experience degradation even after a single critical component fails. This design philosophy is reflected in the design of environmentally controlled liquid cooling systems, where the liquid cooling pumps are either redundant hot or cold backups. Redundant hot backups are typically used in multiple liquid cooling cycles; if one pump fails, the environmentally controlled liquid cooling system configuration is switched via a shut-off valve, allowing other still-functioning pumps to drive multiple liquid cooling cycles. Redundant cold backups are typically used in a single liquid cooling cycle; if one pump fails, there is no need to switch the environmentally controlled liquid cooling system configuration, and another functioning pump can be directly started to drive the liquid cooling cycle.

[0004] Therefore, the control of an aircraft environmental control liquid cooling system that employs a dual-redundant cold backup liquid cooling pump needs to comprehensively consider automatic fault handling methods and redundancy control content.

[0005] However, the main problems and difficulties in improving the mission reliability and autonomy of aircraft environmental control liquid cooling systems through system control design are as follows: 1. Early aircraft environmental control systems' liquid cooling pumps did not have speed regulation capabilities, making it impossible to achieve multi-level speed adjustment; 2. In the early days, the way to handle the failure mode of the liquid cooling pump in the aircraft's environmental control system was to stop the liquid cooling pump from working and restart it manually by the pilot, rather than restart it automatically. This approach would increase the pilot's workload and distract the pilot's attention. 3. The automatic handling of fault modes combined with redundancy control will make the control logic more complex; Summary of the Invention The purpose of this invention is to provide a control method and an aircraft dual-redundant cold backup environmental control liquid cooling system. This invention improves the mission reliability and autonomous control capability of the aircraft environmental control liquid cooling system with a dual-redundant cold backup liquid cooling pump.

[0006] The technical solution of the present invention is a control method for an aircraft dual-redundant cold backup environmental control liquid cooling system. First, the main and backup pump determination logic is executed to determine the main and backup identities of liquid cooling pumps 1 and 2. Second, when a manual control command exists, the manual control logic is executed to control the liquid cooling pumps; otherwise, the automatic control logic is executed to control the liquid cooling pumps.

[0007] In the aforementioned control method, the logic for determining the main and standby pumps is as follows: Based on the power-on time information of the host computer controller: if the power-on time is an odd-numbered day, then: liquid cooling pump 1 / liquid cooling pump 2 is the main pump, and correspondingly, liquid cooling pump 2 / liquid cooling pump 1 is the backup pump; if the heat dissipation demand signal of any liquid-cooled electronic device exists, but the time information is not provided, then: liquid cooling pump 1 is directly determined to be the main pump, and liquid cooling pump 2 is the backup pump.

[0008] In the aforementioned control method, the automatic control logic, in descending order of execution priority, includes: normal automatic control stop logic, redundancy control logic, undervoltage fault automatic handling logic, overvoltage fault automatic handling logic, and normal automatic control logic.

[0009] The design of the normal automatic control stop logic in the aforementioned control method is as follows: If the voltage of the power supply busbar of the liquid cooling pump does not exceed the rated operating voltage A, then the speed control signals of liquid cooling pumps 1 and 2 are both stopped; otherwise, proceed to the next step of judgment. If the heat dissipation demand signals of all liquid-cooled electronic devices are not present, then the speed control signals of liquid-cooled pumps 1 and 2 will both be stopped; otherwise, the redundancy control logic will be entered for judgment.

[0010] In the aforementioned control method, the design of the redundancy control logic is as follows: If the main pump's underpressure fault does not exist, and the main pump is not in a state where the main pump overpressure fault duration exceeds time B at the lowest speed setting, then: the liquid cooling pump speed control signals output in subsequent logic judgments are all liquid cooling pump speed control signals for the main pump, and the liquid cooling pump speed control signals for the standby pump are all stopped; otherwise, proceed to the next step of standby pump judgment; time B is the maximum time after the speed and pressure stabilize when the liquid cooling pump switches between different speed settings. If the standby pump does not have an undervoltage fault, and the standby pump is not in a state where the main pump overpressure fault duration exceeds time B at the lowest speed setting, then the liquid cooling pump speed control signal output in the subsequent logic judgment will be the liquid cooling pump speed control signal of the standby pump, and the liquid cooling pump speed control signal of the main pump will be all stopped. If the standby pump has an undervoltage fault, the automatic undervoltage fault handling logic will be entered. If the standby pump does not have an underpressure fault, and the standby pump is in a state where it reports the main pump overpressure fault for more than time B at the lowest speed setting, the speed control signals for liquid cooling pumps 1 and 2 will both be stopped.

[0011] In the aforementioned control method, the logic for determining the undervoltage fault of the liquid cooling pump is as follows: When the liquid cooling pump speed control signal is not a stop signal, the number of pressure sensors arranged between the liquid cooling pump outlet and the inlet of each liquid cooling electronic device is A. If the pressure value fed back by B or more of the pressure sensors in A is ≤ pressure A, and the duration is A, then a liquid cooling pump undervoltage fault is reported; otherwise, no fault is reported. The number B is half of the number A. Pressure A is half of the liquid cooling pump outlet pressure at the lowest control speed output by the host computer controller. The time A is determined based on the time it takes for the pressure to stabilize after the speed of the liquid cooling pump stabilizes during the low-temperature start-up test. Once the liquid cooling pump undervoltage fault is reported, it cannot be recovered. It can be cleared through manual control commands or automatic fault handling logic.

[0012] In the aforementioned control method, the logic for determining overpressure faults in the liquid cooling pump is as follows: When the liquid cooling pump speed control signal is not "stop", the pressure value fed back by the pressure sensor arranged between the liquid cooling pump outlet and the inlet of each liquid cooling electronic device is ≥ pressure B, and the pressure value fed back by the pressure sensor arranged between the outlet of each liquid cooling electronic device and the inlet of the liquid cooling pump is ≥ pressure C; if the number of sensors that meet the above pressure conditions is C or more, then an overpressure fault of the liquid cooling pump is reported; otherwise, no fault is reported; the number C is half of the total number of pressure sensors in the liquid cooling system; pressure B is the maximum working pressure of the liquid cooling system; pressure C is the automatic pressure relief value of the drain valve; Once the liquid cooling pump overpressure fault is reported at the lowest speed setting, it cannot be recovered and must be cleared by manual control commands.

[0013] In the aforementioned control method, the design of the automatic undervoltage fault handling logic is as follows: If the number of undervoltage restarts is greater than or equal to the preset number A, no processing is required and the process proceeds directly to the next judgment cycle; otherwise, the next judgment is performed. If the stop duration does not exceed the preset time C, the liquid cooling pump speed control signal will remain at the initial value: stop; otherwise, the undervoltage fault of liquid cooling pumps 1 and 2 will be cleared; where the preset time C is determined based on the time it takes for the speed and pressure of the liquid cooling pump to stabilize after it stops working in the low temperature test.

[0014] In the aforementioned control method, the design of the automatic overpressure fault handling logic is as follows: If an overpressure fault exists in the liquid cooling pump, the automatic overpressure fault handling logic will be entered; otherwise, the automatic overpressure fault handling logic will be exited. If the current speed control signal output speed level of the liquid cooling pump is not the lowest speed level, the output speed level will be reduced by one level and the speed holding mode will be entered; otherwise, the next judgment cycle will be entered. If the liquid cooling pump was in speed holding mode in the previous judgment cycle, then enter the overpressure fault automatic handling logic; otherwise, exit the overpressure fault automatic handling logic. If the duration of the liquid cooling pump in speed holding mode does not exceed time B, then continue to maintain the speed mode; otherwise, proceed to the next judgment. If there is no liquid cooling pump overpressure fault, continue to maintain the speed mode; otherwise, proceed to the next step of judgment. If the current speed control signal output of the liquid cooling pump is not the lowest speed level, the output speed level will be reduced by one level and the speed holding mode will be entered; otherwise, the next judgment cycle will be entered.

[0015] A dual-redundant cold backup air-cooled liquid cooling system for aircraft, as described above, includes a liquid cooling pump, a radiator, and liquid cooling electronics. The radiator is located at the front end of the liquid cooling electronics and the rear end of the liquid cooling pump. The liquid cooling pump provides power to the coolant, and the radiator exchanges heat between the coolant flowing through the liquid cooling electronics and the fuel. Pressure sensors are installed at the inlet and outlet of both the liquid cooling pump and the liquid cooling electronics, and the collected pressure signals are sent to the host computer controller of the liquid cooling pump. The liquid cooling pump includes two parallel liquid cooling pumps, 1 and 2, which serve as backups for each other. The host computer controller is provided with high-voltage power and voltage signals by a power supply busbar. The power supply busbar also provides high-voltage power to the liquid cooling pump via the host computer controller.

[0016] In the aforementioned dual-redundant cold backup environmental control liquid cooling system for aircraft, both liquid cooling pump 1 and liquid cooling pump 2 can be infinitely adjusted; the host computer controller outputs a liquid cooling pump speed control signal based on the pressure signal and the heat dissipation demand signal of the liquid cooling electronic equipment.

[0017] In the aforementioned dual-redundant cold backup environmental control liquid cooling system for aircraft, ground maintenance equipment and ground stations can send liquid cooling pump control commands to the host computer controller to manually control the liquid cooling pump.

[0018] In the aforementioned dual-redundant cold backup air-controlled liquid cooling system for aircraft, the host computer controller can also receive time information provided by the onboard timing equipment. The beneficial effects of this invention are: 1. The environmental control liquid cooling system of the present invention adopts a simple closed-loop architecture, which removes heat from the liquid-cooled electronic equipment through the heat exchange with fuel. The liquid cooling pump of this architecture is a dual-redundant cold backup and there is no shut-off valve or regulating valve. The only component that needs to be controlled is the dual-redundant cold backup liquid cooling pump. The structure is simple and the reliability is high.

[0019] 2. The redundancy control of the dual-redundant backup air-controlled liquid cooling pump in the air-controlled liquid cooling system of the present invention can select the main working liquid cooling pump for the current mission based on the date of the current flight, thereby enabling the dual-redundant liquid cooling pump to be used alternately in multiple flight missions, extending the service life of the product as much as possible and improving the reliability of the system mission.

[0020] 3. The automatic undervoltage fault handling of the environmental control liquid cooling system of the present invention has the characteristics of dual-redundant cold backup liquid cooling pumps, which automatically switch to continue working according to logic after encountering an undervoltage situation, and restart the liquid cooling pumps according to a specified number of times, and will not restart after multiple unsuccessful restarts; the system has high autonomy.

[0021] 4. The automatic overpressure fault handling of the environmental control liquid cooling system of this invention features a dual-redundant backup liquid cooling pump. After encountering an overpressure fault, the system reduces the speed of the liquid cooling pump to eliminate the fault. If the fault is eliminated, the current speed is maintained; if the fault is not eliminated, the speed is reduced until the lowest speed is reached. If the fault still does not disappear at the lowest speed, the liquid cooling pump is switched and the process is repeated. If the fault still does not disappear, the system stops operating. This feature further enhances the system's autonomy and ensures task execution as much as possible, thereby improving the system's reliability.

[0022] In summary, the dual-redundant cold backup environmental control liquid-cooled pump system and control method proposed in this invention comprehensively consider the automatic handling of typical failure modes and redundancy control of the dual-redundant cold backup liquid-cooled pump, namely the automatic handling method for undervoltage failure and the automatic handling method for overpressure failure of the dual-redundant cold backup liquid-cooled pump. It can complete multiple system restarts and pump switching operations without pilot intervention, improve the mission reliability and autonomous control capability of the environmental control system, reduce the emergency handling burden of the pilot, and indirectly improve the autonomous flight capability of the aircraft. Attached Figure Description

[0023] Figure 1 This is a schematic diagram of the system principle of the present invention; Figure 2 This is the control flowchart of the present invention; Figure 3 This is a sequence diagram for handling undervoltage faults; Figure 4 This is a sequence diagram for handling overpressure faults. Detailed Implementation

[0024] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of the present invention.

[0025] Example 1. A dual-redundant cold backup air-controlled liquid cooling system for aircraft, see [link to example]. Figures 1-4 It includes a liquid-cooled pump, a radiator, and liquid-cooled electronic equipment; the radiator is located at the front end of the liquid-cooled electronic equipment and at the rear end of the liquid-cooled pump; the liquid-cooled pump is used to provide power for the coolant, and the radiator is used to exchange heat between the coolant flowing through the liquid-cooled electronic equipment and the fuel; pressure sensors are installed at the inlet and outlet of both the liquid-cooled pump and the liquid-cooled electronic equipment, and the collected pressure signals are sent to the host computer controller of the liquid-cooled pump; the liquid-cooled pump includes liquid-cooled pump 1 and liquid-cooled pump 2 connected in parallel as backups for each other; the host computer controller is provided with high-voltage power and voltage signals by a power supply busbar; the power supply busbar also provides high-voltage power to the liquid-cooled pump via the host computer controller.

[0026] Key Point 1: This environmentally controlled liquid cooling system consists of a liquid cooling pump, radiator, one-way valve, pressure sensor, drain valve, and liquid cooling piping. It is a closed-loop system. The power supply for the liquid cooling pump is provided by the power busbar via a host computer controller. Control commands for the liquid cooling pump are issued by the host computer controller. Figure 1 As shown; Key Point 1.1: The liquid cooling pump serves as the drive source for the environmental control liquid cooling system, providing power to ensure the flow of coolant. There are two liquid cooling pumps in the system, which are cold backups. If one liquid cooling pump fails, it will stop working, and the other liquid cooling pump will start working. The speed of the liquid cooling pump has a stepless adjustment function within a certain range. Key Point 1.2: The radiator is located at the front end of the liquid-cooled electronic equipment and the rear end of the liquid-cooled pump; the radiator is the core of the heat exchange of the entire system. Its main function is to remove the heat generated by the liquid-cooled electronic equipment through the heat exchange between the coolant and the fuel, and to increase the temperature of the fuel to ensure the performance of the fuel system. Key Point 1.3: The one-way valve is located at the rear end of the liquid cooling pump and the front end of the radiator; the one-way valve is used to ensure the flow direction of the coolant and guarantee the directional flow of the coolant in the environmentally controlled liquid cooling system. Key Point 1.4: Pressure sensors are placed at the inlet and outlet of the liquid cooling pump and at the inlet and outlet of each liquid cooling electronic device. These sensors monitor the inlet and outlet pressures of the liquid cooling pump and each liquid cooling electronic device, and send the collected pressure signals to the host computer controller of the liquid cooling pump. Figure 1 As shown in signal 5, the boosting capacity of the liquid cooling pump and the flow resistance information of each liquid cooling electronic device are further obtained.

[0027] Key Point 1.5: The drain valve is located at the inlet of the liquid cooling pump. The coolant in the liquid cooling system can be drained manually, or the valve can be automatically opened to release pressure and drain the coolant when the pressure exceeds a certain level. Key Point 1.6: The liquid cooling pipeline is connected to the liquid cooling electronic equipment and the finished environmental control liquid cooling system. The coolant enters the liquid cooling pipeline through the ground filling pipeline, and after being pressurized by the liquid cooling pump, it flows through the radiator and exchanges heat with the fuel. Then it enters the liquid cooling electronic equipment, exchanges heat with the hot plate of the liquid cooling electronic equipment, and returns to the inlet of the liquid cooling pump. Key Point 1.7: The power supply busbar provides high-voltage power to the host computer controller of the liquid cooling pump, such as... Figure 1 As shown in signal 2; simultaneously, it provides the busbar voltage signal to the host computer controller of the liquid cooling pump, such as... Figure 1 As shown in signal 1, it is used by the host computer controller to determine whether the power supply busbar is energized. Key Point 1.8: The host computer controller utilizes various external signals acquired, such as coolant pressure signals (e.g., Figure 1 Signal 5 (as shown in the middle) and heat dissipation demand signals for liquid-cooled electronic equipment (such as...) Figure 1 As shown in signal 4), the liquid cooling pump speed control signal is output through software logic, and a high-voltage power supply is provided to the liquid cooling pump at the same time. Figure 1 Shown in signal 3; Key Point 1.9: Ground maintenance equipment and ground stations can send liquid cooling pump control commands to the upper-level controller for manual control of the liquid cooling pump, such as... Figure 1 Signals 6 and 7 are shown in the diagram; Key Point 1.10: Onboard electronic devices with time synchronization capabilities will send the current time information to the host computer controller, such as... Figure 1 Shown in signal 8.

[0028] Key Point 2: The fault mode determination logic of this environmental control liquid cooling system is as follows: Key Point 2.1: The failure modes of this environmental control liquid cooling system include liquid cooling pump undervoltage failure and liquid cooling pump overpressure failure; Key Point 2.2: The logic for determining undervoltage faults in liquid cooling pumps is as follows: Key Point 2.2.1: When the liquid cooling pump speed control signal is not a stop signal, the number of pressure sensors arranged between the liquid cooling pump outlet and the inlet of each liquid cooling electronic device is A. If the pressure value fed back by B or more of the pressure sensors in the number A is ≤ pressure A and the duration is A, then the liquid cooling pump undervoltage fault is reported; otherwise, no fault is reported. Point 2.2.2: The number A depends on the specific design of the system, and the number B is preferably half of the number A; Key point 2.2.3: Pressure A is preferably half of the liquid cooling pump outlet pressure at the lowest liquid cooling pump control speed output by the host computer controller according to the software logic. Key point 2.2.4: Time A is determined based on the time it takes for the pressure to stabilize after the speed of the liquid-cooled pump stabilizes during the low-temperature start-up test; Point 2.2.5: The liquid cooling pump undervoltage fault cannot be recovered after it is reported, but it can be cleared by manual control commands or automatic fault handling logic; Key Point 2.3: The logic for determining overpressure faults in liquid cooling pumps is as follows: Key Point 2.3.1: When the liquid cooling pump speed control signal is not a stop signal, the pressure value fed back by the pressure sensor arranged between the liquid cooling pump outlet and the inlet of each liquid cooling electronic device is ≥ pressure B, and the pressure value fed back by the pressure sensor arranged between the outlet of each liquid cooling electronic device and the inlet of the liquid cooling pump is ≥ pressure C; if the number of sensors that meet the above pressure conditions is C or more, then the liquid cooling pump overpressure fault is reported; otherwise, no fault is reported. Point 2.3.2: The number C is half the total number of pressure sensors in the liquid cooling system; Key point 2.3.3: Pressure B is the maximum operating pressure of the liquid cooling system; Key point 2.3.4: Pressure C is the automatic pressure relief value of the drain valve; Point 2.2.5: The liquid cooling pump overpressure fault reported at the lowest speed cannot be recovered after it is reported, but it can be cleared by manual control commands.

[0029] Key Point 3: The liquid cooling pump control method of this environmental control liquid cooling system consists of: main and standby pump determination logic, manual control logic, and automatic control logic. The automatic control logic consists of: normal automatic control stop logic, undervoltage fault automatic handling logic, overpressure fault automatic handling logic, and normal automatic control working logic.

[0030] Key Point 3.1: Priority of liquid cooling pump control: After the host computer controller is powered on, it prioritizes the main and backup pump determination logic, followed by manual control, and finally automatic control; Key Point 3.2: After the host computer controller is powered on, the main and backup pumps are prioritized for determination. After the determination is completed, no further determination is made. Subsequent control logic determinations start directly from the manual or automatic control logic. Key Point 3.3: When a manual control command exists, enter the manual control logic; otherwise, enter the automatic control logic. Key Point 3.4: Priority of automatic control of liquid cooling pump: first, normal automatic control stop logic; second, redundancy control logic; third, undervoltage fault automatic handling logic or overvoltage fault automatic handling logic; and finally, normal automatic control logic.

[0031] Key Point 4: The logic for determining the main and standby pumps of the liquid cooling pump in this environmentally controlled liquid cooling system: Key Point 4.1: Determine the selection of the primary or backup pump for the dual-redundant cold backup liquid-cooled pump under the current flight sortie based on the time information provided by the timing equipment; Key point 4.1.1: If the host computer controller is powered on on an odd-numbered day (1, 3, etc.), then liquid cooling pump 1 is the main pump and liquid cooling pump 2 is the standby pump. Key point 4.1.2: If the host computer controller is powered on on an even-numbered day (number 2, number 4, etc.), then liquid cooling pump 2 is the main pump and liquid cooling pump 1 is the standby pump; Key Point 4.2: If the heat dissipation demand signal of any liquid-cooled electronic device exists, but the timing device has not yet provided time information, then liquid-cooled pump 1 is directly determined to be the main pump and liquid-cooled pump 2 is the backup pump.

[0032] Key Point 5: The normal automatic control shutdown logic of the liquid cooling pump in this environmentally controlled liquid cooling system is as follows: Figure 2 As shown in number ①, the specific content is as follows: Key Point 5.1: If the voltage of the power supply busbar of the liquid cooling pump does not exceed the rated operating voltage A, then the speed control signals of liquid cooling pump 1 and liquid cooling pump 2 will both be stopped; otherwise, proceed to the next step of judgment. Point 5.1.1: The rated operating voltage A is adjusted according to the power supply system of the machine. For example, if the power supply system is 270V, then the voltage A is preferably 200V to 220V. Key Point 5.2: If the heat dissipation demand signals of all liquid-cooled electronic equipment are not present, the speed control signals of liquid-cooled pump 1 and liquid-cooled pump 2 will be stopped; otherwise, the redundancy control logic will be entered for judgment.

[0033] Key Point 6: Redundancy control logic of the liquid cooling pump in this environmentally controlled liquid cooling system: Key Point 6.1: If the undervoltage fault of the main pump does not exist, and the main pump is not in the state of reporting the overvoltage fault of the main pump for a duration exceeding time B at the lowest speed, then the liquid cooling pump speed control signal output in the subsequent logic judgment will be the liquid cooling pump speed control signal of the main pump, and the liquid cooling pump speed control signal of the standby pump will be stopped; otherwise, the standby pump judgment will be performed. Key point 6.1.1: Where time B is the maximum time after the liquid cooling pump switches between different speed ranges and the speed and pressure stabilize; Key point 6.1.2: Under normal automatic control logic, the liquid cooling pump speed control signal is a graded control, for example, the speed is divided into grade A, grade B, grade C... grade X, etc., with grade X corresponding to the highest speed and grade A corresponding to the lowest speed. Key Point 6.2: If the standby pump does not have an undervoltage fault, and the standby pump is not in the state of reporting the main pump overpressure fault for more than time B at the lowest speed, then the liquid cooling pump speed control signal output in the subsequent logic judgment is the liquid cooling pump speed control signal of the standby pump, and the liquid cooling pump speed control signal of the main pump is all stop. Key Point 6.3: If the standby pump has an undervoltage fault, the automatic undervoltage fault handling logic will be entered. Key Point 6.4: If the standby pump does not have an underpressure fault, and the standby pump is in the state of reporting the main pump overpressure fault for more than time B at the lowest speed setting, the speed control signals of liquid cooling pump 1 and liquid cooling pump 2 shall be stopped.

[0034] Key Point 7: Automatic handling logic for undervoltage faults, as follows: Figure 2 As shown in number ③, the specific content is as follows: Key Point 7.1: After entering the automatic undervoltage fault handling logic, the speed control signals of liquid cooler pump 1 and liquid cooler pump 2 are stopped; Key point 7.2: If the number of undervoltage restarts is greater than or equal to the preset number A, then no processing is performed and the process proceeds directly to the next judgment cycle; otherwise, the next judgment is performed. Key point 7.1.1: The preset number of times A is determined according to the overall requirements of the aircraft and the design concept of the environmental control liquid cooling system, and is preferably 1 to 3 times; Key Point 7.3: If the stop duration does not exceed time C, the liquid cooling pump speed control signal will remain stopped; otherwise, clear the undervoltage fault of liquid cooling pump 1 and the undervoltage fault of liquid cooling pump 2. Key point 7.3.1: The time C is determined based on the time it takes for the speed and pressure of the liquid-cooled pump to stabilize after it stops working in the low-temperature test; Key Point 7.4: Assuming the number of cycles A for this environmentally controlled liquid cooling system is 2, the time A is a, and the time C is c, the control timing diagram for the automatic undervoltage fault handling logic is shown below. Figure 3 : Key point 7.4.1: It is assumed that the pressure of the environmental control liquid cooling system is lower than the pressure condition in the fault reporting condition of the liquid cooling pump underpressure at time T0 after the liquid cooling pump starts, that is, the system never builds up pressure after T0. Key point 7.4.2: If the main pump's liquid cooling pump is reported as undervoltage at time T0+a, immediately switch to the standby pump. Key point 7.4.3: At time T0+2a, the liquid cooling pump of the standby pump is reported as undervoltage. At this time, the automatic handling logic for undervoltage fault is entered. Since the number of undervoltage restarts is 0 times < 2 times, the speed control signal of liquid cooling pump 1 and the speed control signal of liquid cooling pump 2 are stopped and remain for c seconds. Key point 7.4.4: At time T0+2a+c, the liquid cooling pump exits the automatic handling logic for undervoltage faults, and the main pump re-enters the normal automatic control logic; Key point 7.4.5: At time T0+3a+c, report a liquid cooling pump undervoltage fault of the main pump and immediately switch to the standby pump. Key point 7.4.6: At time T0+4a+c, the liquid cooling pump of the standby pump is reported as undervoltage. At this time, the automatic handling logic for undervoltage fault is entered. Since the number of undervoltage restarts is 1 < 2, the speed control signal of liquid cooling pump 1 and the speed control signal of liquid cooling pump 2 are stopped and remain for c seconds. Key point 7.4.7: At time T0+4a+2c, the liquid cooling pump exits the automatic handling logic for undervoltage faults, and the main pump re-enters the normal automatic control logic; Key point 7.4.8: At time T0+5a+2c, report a liquid cooling pump undervoltage fault of the main pump and immediately switch to standby pump operation; Key point 7.4.9: At time T0+6a+2c, a liquid cooling pump undervoltage fault is reported for the standby pump. At this time, the automatic undervoltage fault handling logic is entered. At this time, the number of undervoltage restarts is ≥2 times. The speed control signals of liquid cooling pump 1 and liquid cooling pump 2 are stopped and remain in this state.

[0035] Key Point 8: Automatic Overpressure Fault Handling Logic as follows Figure 2 As shown in number ④, the specific content is as follows: Key Point 8.1: If an overpressure fault exists in the liquid cooling pump, the automatic overpressure fault handling logic will be entered; otherwise, the automatic overpressure fault handling logic will be exited. Key point 8.1.1: If the current speed control signal output of the liquid cooling pump is not the lowest speed level, i.e., not the stop or level A, then the output speed level will be reduced by one level and the speed holding mode will be entered; otherwise, the next judgment cycle will be entered. Key Point 8.2: If the liquid cooling pump was in speed holding mode during the last judgment cycle, then enter the overpressure fault automatic handling logic; otherwise, exit the overpressure fault automatic handling logic. Key point 8.2.1: If the duration of the liquid cooling pump in speed holding mode does not exceed time B, then continue to maintain the speed mode; otherwise, proceed to the next step of judgment. Point 8.2.2: If there is no overpressure fault in the liquid cooling pump, continue to maintain the speed mode; otherwise, proceed to the next step of judgment. Key point 8.2.3: If the current speed control signal output of the liquid cooling pump is not the lowest speed level, i.e., not the stop or level A, then the output speed level will be reduced by one level and the speed holding mode will be entered; otherwise, the next judgment cycle will be entered. Key Point 8.3: Assuming the liquid cooling pump speed control signal under the normal control logic of this environmentally controlled liquid cooling system is gear D, and time B is b, the control timing diagram of the automatic overpressure fault handling logic is shown below. Figure 4 : Key point 8.3.1: Assume that the pressure of the environmental control liquid cooling system is higher than the pressure condition in the overpressure fault reporting condition of the liquid cooling pump at some time after the liquid cooling pump starts, namely at times T1, T2, T3, T4, T5, and T6. Key point 8.3.2: At time T1, the main pump's liquid cooling pump overpressure fault is reported. Since the speed control signal of the main pump's liquid cooling pump is not the lowest speed (speed A), the speed is reduced from speed D to speed C. Key point 8.3.3: Before time T1+b, the overpressure fault of the main pump's liquid cooling pump disappears, and the speed control signal of the main pump's liquid cooling pump continues to maintain the speed range of range C. Key point 8.3.4: At time T2, the main pump's liquid cooling pump overpressure fault is reported. Since the main pump has been in speed holding mode for more than c, and the speed control signal of the main pump's liquid cooling pump is not in the lowest gear (gear A), the speed is reduced from gear C to gear B. Key point 8.3.5: Before time T2+b, the overpressure fault of the main pump's liquid cooling pump disappears, and the speed control signal of the main pump's liquid cooling pump continues to be in gear C. Key point 8.3.6: At time T3, the main pump's liquid cooling pump overpressure fault is reported. Since the main pump has been in speed holding mode for more than c, and the speed control signal of the main pump's liquid cooling pump is not in the lowest gear (gear A), the gear is reduced from gear B to gear A. Key Point 8.3.7: At time T3+b, the overpressure fault of the main pump's liquid cooling pump still exists. Since the speed control signal of the main pump's liquid cooling pump is at the lowest speed (speed A) and the holding time exceeds c, the speed control signal of the main pump's liquid cooling pump is stopped, and the standby pump starts to work. According to the normal control logic, the speed control signal of the standby pump's liquid cooling pump is at speed D. Key point 8.3.8: At time T4, report the overpressure fault of the standby liquid cooling pump. Since the speed control signal of the standby liquid cooling pump is not the lowest speed (speed A), the speed level is reduced from speed D to speed C. Key point 8.3.9: Before time T4+b, the overpressure fault of the standby liquid cooling pump disappears, and the speed control signal of the standby liquid cooling pump continues to be maintained at speed C. Key point 8.3.10: At time T5, report the overpressure fault of the standby liquid cooling pump. Since the standby pump has been in speed holding mode for more than c, and the speed control signal of the standby liquid cooling pump is not the lowest speed (speed A), reduce the speed from speed C to speed B. Key point 8.3.11: Before time T5+b, the overpressure fault of the standby liquid cooling pump disappears, and the speed control signal of the standby liquid cooling pump continues to be maintained at speed C. Key point 8.3.12: At time T6, the standby pump's liquid cooling pump overpressure fault is reported. Since the standby pump has been in speed holding mode for more than c, and the speed control signal of the standby pump's liquid cooling pump is not in the lowest gear (gear A), the speed is reduced from gear B to gear A. Key Point 8.3.13: At time T6+b, the overpressure fault of the standby liquid cooling pump still exists. Since the speed control signal of the standby liquid cooling pump is at the lowest speed (speed A) and the holding time exceeds c, the speed control signal of the main pump is stopped and the speed control signal of the standby pump is stopped.

[0036] Other supplementary notes Products in the environmentally controlled liquid cooling system that are not directly related to the control content involved in the invention are not shown in this invention, such as temperature sensors, filters, gas-liquid separators, etc. In actual system design, the above-mentioned products still need to be considered.

[0037] For ease of explanation, the actual hierarchical architecture of the host computer controller in this invention has been simplified.

[0038] The normal automatic control logic of the liquid cooling pump in the environmental control liquid cooling system is not described in detail in this invention. This logic can be designed according to the actual requirements of the on-board environmental control liquid cooling system and is not the focus of this invention.

[0039] The above description is merely a specific embodiment of the present invention, providing a detailed description of the invention. Parts not covered herein are conventional techniques. However, the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in the present invention should be included within the scope of protection of the present invention. The scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A control method of an aircraft dual-redundant cold backup environmental control liquid cooling system, characterized in that, Firstly, the main and standby pump determination logic is executed to determine the main and standby identity of the liquid cooling pump 1, 2; secondly, when the manual control instruction exists, the manual control logic is executed to control the liquid cooling pump, otherwise the automatic control logic is executed to control the liquid cooling pump.

2. The control method according to claim 1, characterized by, The main and standby pump determination logic is as follows: The time information of the upper computer controller power-on is divided as follows: if it is a single day when the upper computer controller is powered on, then: the liquid cooling pump 1 / liquid cooling pump 2 is the main pump, and correspondingly, the liquid cooling pump 2 / liquid cooling pump 1 is the standby pump; if the heat dissipation demand signal of any liquid cooling electronic equipment exists, but the time information is not provided, then: the liquid cooling pump 1 is directly determined as the main pump, and the liquid cooling pump 2 is the standby pump.

3. The control method according to claim 1, characterized by, The automatic control logic includes, from high to low in execution priority, the normal automatic control stop logic, the redundancy control logic, the under-voltage fault automatic handling logic, the over-voltage fault automatic handling logic, and the normal automatic control logic.

4. The control method according to claim 3, characterized by, The design of the normal automatic control stop logic is as follows: If the supply bus bar voltage of the liquid cooling pump does not exceed the rated working voltage A, then the liquid cooling pump 1, 2 rotation speed control signals are all stopped, otherwise the next step is judged; If the heat dissipation demand signals of all liquid cooling electronic equipment do not exist, then the liquid cooling pump 1, 2 rotation speed control signals are all stopped, otherwise the redundancy control logic is entered for judgment.

5. The control method according to claim 3, characterized by, The design of the redundancy control logic is as follows: If the main pump has no under-voltage fault, and the main pump is not in the state of reporting that the over-voltage fault duration of the main pump exceeds time B at the lowest speed, then: in the subsequent logic determination, the liquid cooling pump rotation speed control signals output are all the liquid cooling pump rotation speed control signals of the main pump, and the liquid cooling pump rotation speed control signals of the standby pump are all stopped; otherwise, the next step of the standby pump determination is performed; time B is the maximum time after the rotation speed and pressure are stable when the liquid cooling pump is switched at different rotation speed gears; If the standby pump has no under-voltage fault, and the standby pump is not in the state of reporting that the over-voltage fault duration of the main pump exceeds time B at the lowest speed, then in the subsequent logic determination, the liquid cooling pump rotation speed control signals output are all the liquid cooling pump rotation speed control signals of the standby pump, and the liquid cooling pump rotation speed control signals of the main pump are all stopped; If the standby pump has an under-voltage fault, then the under-voltage fault automatic handling logic is entered; If the standby pump has no under-voltage fault, and the standby pump is in the state of reporting that the over-voltage fault duration of the main pump exceeds time B at the lowest speed, then the liquid cooling pump 1, 2 rotation speed control signals are all stopped.

6. The control method according to claim 5, characterized by The determination logic of the liquid cooling pump under-voltage fault is as follows: When the liquid cooling pump rotation speed control signal is not stopped, the number of pressure sensors arranged between the liquid cooling pump outlet and the inlet of each liquid cooling electronic equipment is number A, if number B and above pressure sensors feedback pressure values ≤ pressure A, and the duration A, then the liquid cooling pump under-voltage fault is reported, otherwise no fault is reported; number B is half of number A; pressure A is half of the liquid cooling pump outlet pressure at the lowest gear of the liquid cooling pump control rotation speed output by the upper computer controller; time A is determined according to the time after the rotation speed is stable in the low temperature start test of the liquid cooling pump. The liquid cooling pump under-voltage fault cannot be recovered and is cleared by the manual control instruction or the fault automatic handling logic.

7. The control method according to claim 5, characterized by, The determination logic of the liquid cooling pump over-voltage fault is as follows: When the liquid cooling pump rotation speed control signal is not stopped, the pressure value fed back by the pressure sensor arranged between the liquid cooling pump outlet and the inlet of each liquid cooling electronic device is greater than pressure B, and the pressure value fed back by the pressure sensor arranged between the outlet of each liquid cooling electronic device and the inlet of the liquid cooling pump is greater than pressure C; when the number of sensors satisfying the above pressure conditions is greater than or equal to number C, a liquid cooling pump overpressure fault is reported, otherwise no fault is reported; number C is half of the total number of pressure sensors in the liquid cooling system; pressure B is the highest working pressure of the liquid cooling system; and pressure C is the automatic pressure relief value of the liquid discharge valve. The liquid cooling pump overpressure fault reported at the lowest rotation speed cannot be recovered and is cleared by a manual control instruction.

8. The control method according to claim 6, characterized by, The design of the underpressure fault automatic handling logic is as follows: If the underpressure restart number is greater than or equal to a preset number A, no treatment is needed, and the next judgment period is directly entered, otherwise the next step is judged. If the stop duration does not exceed a preset time C, the liquid cooling pump rotation speed control signal continues to be the initial value: stop, otherwise the underpressure faults of the liquid cooling pumps 1 and 2 are cleared; wherein the preset time C is determined according to the time when the rotation speed and pressure of the liquid cooling pump are stable after stopping working in a low-temperature test.

9. The control method according to claim 7, characterized by, The design of the overpressure fault automatic handling logic is as follows: if the liquid cooling pump overpressure fault exists, the overpressure fault automatic handling logic is entered, otherwise the overpressure fault automatic handling logic is exited: if the rotation speed gear output by the current liquid cooling pump rotation speed control signal is not the lowest rotation speed gear, the output rotation speed gear is lowered by one gear, and the rotation speed maintaining mode is entered, otherwise the next judgment period is entered; If the liquid cooling pump is in the rotation speed maintaining mode in the last judgment period, the overpressure fault automatic handling logic is entered, otherwise the overpressure fault automatic handling logic is exited: if the duration of the liquid cooling pump in the rotation speed maintaining mode does not exceed time B, the rotation speed maintaining mode is continued, otherwise the next step is judged. If there is no liquid cooling pump overpressure fault, the rotation speed maintaining mode is continued, otherwise the next step is judged. If the rotation speed gear output by the current liquid cooling pump rotation speed control signal is not the lowest rotation speed gear, the output rotation speed gear is lowered by one gear, and the rotation speed maintaining mode is entered, otherwise the next judgment period is entered.

10. An aircraft dual-redundant cold backup environmental control liquid cooling system for use in a control method according to any one of claims 1 to 9, characterized in that, The liquid cooling system comprises a liquid cooling pump, a radiator and liquid cooling electronic devices; the radiator is arranged at the front end of the liquid cooling electronic devices and the rear end of the liquid cooling pump; the liquid cooling pump is used for providing power for cooling liquid, and the radiator is used for exchanging heat between the cooling liquid flowing through the liquid cooling electronic devices and fuel; the inlets and outlets of the liquid cooling pump and the liquid cooling electronic devices are provided with pressure sensors, and the collected pressure signals are sent to an upper computer controller of the liquid cooling pump; the liquid cooling pump comprises liquid cooling pump 1 and liquid cooling pump 2 which are connected in parallel and serve as backups for each other; the upper computer controller is provided with strong electric power and voltage signals by a power busbar; the power busbar also provides strong electric power to the liquid cooling pump through the upper computer controller.

Images