Fuel quantity control method and system
By real-time detection and dynamic adjustment of the fuel demand of aero-engines, combined with multi-dimensional parameter analysis and processing, the problems of complex structure and low precision in existing fuel quantity control systems have been solved, achieving precise control of fuel flow and stable engine operation.
Patent Information
- Application Number
- CN202511601559.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-11-04
- Publication Date
- 2026-02-24
AI Technical Summary
The existing fuel quantity control system for aircraft engines has a complex structure and low precision, resulting in low fuel control efficiency.
By monitoring the status of the aircraft engine in real time and dynamically adjusting the working status of the first and second electric pumps, combined with multi-dimensional parameter analysis and processing, precise control of fuel demand can be achieved, and emergency handling measures can be implemented in case of failure.
It improves the accuracy and efficiency of fuel flow control, ensuring stable engine operation in case of malfunction.
Smart Images

Figure CN121556987A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of aero-engine technology, and in particular to a fuel quantity control method and system. Background Technology
[0002] With the advancement of science and technology and the rapid development of productivity, significant progress has been made in the research and development of aero engines. Among these advancements, the main fuel metering system of aero engines generally adopts a fuel pump for fuel supply and pressurization, and a fuel regulator for precise metering to achieve accurate fuel flow supply.
[0003] In order to reduce costs, micro-sized aircraft engines use motors with adjustable speeds to drive volumetric pumps (such as gear pumps and piston pumps), and utilize the linear relationship between fuel flow and speed to control fuel flow.
[0004] Furthermore, in practical applications, although the combination of fuel pump and fuel regulator can achieve accurate metering, it has a complex structure, high cost, and low high-altitude efficiency. The combination of motor and volumetric pump, although simple in structure, low in cost, and high high-altitude efficiency, has relatively low metering accuracy, thus reducing the fuel control efficiency. Summary of the Invention
[0005] Based on this, the purpose of the present invention is to provide a fuel quantity control method and system to solve the problems of complex structure and low accuracy of existing fuel quantity control technologies.
[0006] The first aspect of the present invention proposes: A fuel quantity control method, wherein the method includes: When the aircraft engine is detected to be in a constant speed state or an acceleration / deceleration state in real time, the fuel demand corresponding to the aircraft engine is detected in real time. Real-time determination of whether the fuel demand exceeds a preset demand threshold; If it is determined in real time that the fuel demand is greater than the preset demand threshold, the first electric pump and the second electric pump are activated simultaneously through the motor controller, and a first control signal corresponding to the first electric pump and the second electric pump is generated synchronously. If it is determined in real time that the fuel demand is less than the preset demand threshold, the second electric pump is shut down by the motor controller, and a second control signal adapted to the first electric pump is generated simultaneously. Both the first and second electric pumps are composed of a drive motor and a gear pump.
[0007] The beneficial effects of this invention are: by real-time detection of the operating status of the aircraft engine, it is possible to determine whether the fuel demand exceeds a preset demand threshold. Specifically, if so, both the first and second electric pumps will be activated simultaneously, and a suitable first control signal will be generated. Conversely, if not, the second electric pump will be shut down, and only the first electric pump will be controlled, while a suitable second control signal will be generated. Thus, with the cooperation of the first and second electric pumps, the fuel flow can be precisely controlled, thereby improving control efficiency.
[0008] Furthermore, the fuel quantity control method also includes: During the operation of the first electric pump and the second electric pump, the actual operating parameters generated by the first electric pump or the second electric pump are obtained. The actual operating parameters are dynamically analyzed to determine in real time whether the first electric pump or the second electric pump has malfunctioned. If a fault is detected in the first or second electric pump in real time, a corresponding fault pump stop command is generated, and corresponding emergency handling measures are executed.
[0009] Furthermore, the step of dynamically analyzing the actual operating parameters to determine in real time whether the first electric pump or the second electric pump has malfunctioned includes: The drive motor current, gear pump outlet pressure, motor speed and temperature of the first electric pump and the second electric pump are collected synchronously at a preset sampling frequency to form a corresponding multi-dimensional parameter sequence. The multi-dimensional parameter sequence is processed by a sliding window, and the mean, standard deviation and rate of change between adjacent windows are calculated for each sliding window. The mean, standard deviation and rate of change are then compared with a preset normal threshold. If the mean, standard deviation, and rate of change of three consecutive windows exceed the threshold range, the corresponding electric pump is determined to be faulty.
[0010] Furthermore, the step of synchronously collecting the drive motor current, gear pump outlet pressure, motor speed, and temperature of the first and second electric pumps at a preset sampling frequency to form a corresponding multi-dimensional parameter sequence includes: Four independent signal conditioning circuits are configured for the first electric pump and the second electric pump respectively, which amplify, filter and level convert the analog signals output by the current, pressure, speed and temperature sensors to generate corresponding standard voltage signals. The standard voltage signal is connected to a preset converter, and the pulse signal output by the preset position sensor is used as the acquisition synchronization trigger signal. After each sampling is completed, the four sets of parameter values of the first electric pump and the second electric pump are stored in the double buffer data queue in chronological order. When the length of the double buffer data queue reaches the preset length threshold, the data is output in chronological order as the multi-dimensional parameter sequence.
[0011] Furthermore, the step of generating a corresponding fault pump stop command and executing corresponding emergency handling measures if a fault is detected in real time in the first or second electric pump includes: Extract the pump code identifier from the fault diagnosis results to determine whether the faulty pump is the first electric pump or the second electric pump; The fault information is reported to the upper-level controller, and the task is downgraded to work in single-pump mode, limiting system functions and performance, and continuing to execute the task. Record the operating parameters at the moment the fault occurs and read out the corresponding fault code; The pump code identifier, the operating parameters, and the fault code are written into a non-volatile memory to generate a corresponding fault pump shutdown confirmation frame, and the fault pump stop command is generated based on the fault pump shutdown confirmation frame.
[0012] Furthermore, the step of writing the pump code identifier, the operating parameters, and the fault code into a non-volatile memory to generate a corresponding fault pump shutdown confirmation frame includes: According to the preset data frame format, the pump code identifier, the operating parameters and the fault code are sequentially encapsulated into a data block of fixed length, and a timestamp and a check bit are appended to the beginning of the data block; The data block is written into the contiguous address space of the non-volatile memory, and the starting address and data length are recorded simultaneously to generate a storage index. Based on the storage index, the data block is compared and verified byte by byte with the original data. If the comparison is consistent, the storage index is combined with the shutdown instruction identifier to form the fault pump shutdown confirmation frame and output it.
[0013] Furthermore, the step of generating the fault pump stop command based on the fault pump stop confirmation frame includes: The fault pump shutdown confirmation frame is converted into corresponding binary data according to a preset fixed bit width to form the corresponding original instruction frame; The original instruction frame is subjected to cyclic redundancy check and byte accumulation check to generate a double check code, which is then appended to the end of the frame. A timestamp and instruction sequence number are inserted into the header of the original instruction frame to generate the fault pump stop instruction accordingly; When the faulty pump stops, the system switches to emergency control mode, reports an emergency control alarm for the fuel pump, and calculates the engine's operating status under different altitude and speed conditions supported by the maximum fuel supply capacity based on the fuel supply capacity of the first electric pump and the engine's real-time model. This limits the engine's operating status and alerts other aircraft systems via the communication bus.
[0014] The second aspect of the present invention proposes: A fuel quantity control system, wherein the system comprises: The detection module is used to detect the fuel demand corresponding to the aircraft engine in real time when the aircraft engine is detected to be in a constant speed state or an acceleration / deceleration state. The judgment module is used to determine in real time whether the fuel demand exceeds a preset demand threshold. The first generation module is used to simultaneously activate the first electric pump and the second electric pump through the motor controller if it is determined in real time that the fuel demand is greater than the preset demand threshold, and synchronously generate a first control signal corresponding to the first electric pump and the second electric pump. The second generation module is used to shut down the second electric pump through the motor controller if it is determined in real time that the fuel demand is less than the preset demand threshold, and to simultaneously generate a second control signal adapted to the first electric pump. Both the first electric pump and the second electric pump are composed of a drive motor and a gear pump.
[0015] Furthermore, the fuel quantity control system also includes a parsing module, which is specifically used for: During the operation of the first electric pump and the second electric pump, the actual operating parameters generated by the first electric pump or the second electric pump are obtained. The actual operating parameters are dynamically analyzed to determine in real time whether the first electric pump or the second electric pump has malfunctioned. If a fault is detected in the first or second electric pump in real time, a corresponding fault pump stop command is generated, and corresponding emergency handling measures are executed.
[0016] Furthermore, the parsing module is specifically used for: The drive motor current, gear pump outlet pressure, motor speed and temperature of the first electric pump and the second electric pump are collected synchronously at a preset sampling frequency to form a corresponding multi-dimensional parameter sequence. The multi-dimensional parameter sequence is processed by a sliding window, and the mean, standard deviation and rate of change between adjacent windows are calculated for each sliding window. The mean, standard deviation and rate of change are then compared with a preset normal threshold. If the mean, standard deviation, and rate of change of three consecutive windows exceed the threshold range, the corresponding electric pump is determined to be faulty.
[0017] Furthermore, the parsing module is specifically used for: Four independent signal conditioning circuits are configured for the first electric pump and the second electric pump respectively, which amplify, filter and level convert the analog signals output by the current, pressure, speed and temperature sensors to generate corresponding standard voltage signals. The standard voltage signal is connected to a preset converter, and the pulse signal output by the preset position sensor is used as the acquisition synchronization trigger signal. After each sampling is completed, the four sets of parameter values of the first electric pump and the second electric pump are stored in the double buffer data queue in chronological order. When the length of the double buffer data queue reaches the preset length threshold, the data is output in chronological order as the multi-dimensional parameter sequence.
[0018] Furthermore, the parsing module is specifically used for: Extract the pump code identifier from the fault diagnosis results to determine whether the faulty pump is the first electric pump or the second electric pump; Record the operating parameters at the moment the fault occurs and read out the corresponding fault code; The pump code identifier, the operating parameters, and the fault code are written into a non-volatile memory to generate a corresponding fault pump shutdown confirmation frame, and the fault pump stop command is generated based on the fault pump shutdown confirmation frame.
[0019] Furthermore, the parsing module is specifically used for: According to the preset data frame format, the pump code identifier, the operating parameters and the fault code are sequentially encapsulated into a data block of fixed length, and a timestamp and a check bit are appended to the beginning of the data block; The data block is written into the contiguous address space of the non-volatile memory, and the starting address and data length are recorded simultaneously to generate a storage index. Based on the storage index, the data block is compared and verified byte by byte with the original data. If the comparison is consistent, the storage index is combined with the shutdown instruction identifier to form the fault pump shutdown confirmation frame and output it.
[0020] Furthermore, the parsing module is specifically used for: The fault pump shutdown confirmation frame is converted into corresponding binary data according to a preset fixed bit width to form the corresponding original instruction frame; The original instruction frame is subjected to cyclic redundancy check and byte accumulation check to generate a double check code, which is then appended to the end of the frame. A timestamp and instruction sequence number are inserted into the header of the original instruction frame to generate the fault pump stop instruction accordingly.
[0021] The third aspect of the present invention proposes: A computer includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor, when executing the computer program, implements the fuel quantity control method as described above.
[0022] The fourth aspect of the present invention proposes: A readable storage medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the fuel quantity control method as described above.
[0023] Additional aspects and advantages of the invention will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. Attached Figure Description
[0024] Figure 1 A flowchart of the fuel quantity control method provided in the first embodiment of the present invention; Figure 2 This is a structural block diagram of the fuel quantity control system provided in the third embodiment of the present invention.
[0025] The following detailed description, in conjunction with the accompanying drawings, will further illustrate the present invention. Detailed Implementation
[0026] To facilitate understanding of the present invention, a more complete description will be given below with reference to the accompanying drawings. Several embodiments of the invention are illustrated in the drawings. However, the invention can be implemented in many different forms and is not limited to the embodiments described herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete.
[0027] It should be noted that when a component is said to be "fixed to" another component, it can be directly on the other component or there may be an intervening component. When a component is said to be "connected to" another component, it can be directly connected to the other component or there may be an intervening component. The terms "vertical," "horizontal," "left," "right," and similar expressions used in this document are for illustrative purposes only.
[0028] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. The terminology used herein in the description of the invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The term "and / or" as used herein includes any and all combinations of one or more of the associated listed items.
[0029] Please see Figure 1 The figure shows a fuel quantity control method provided in the first embodiment of the present invention. The fuel quantity control method provided in this embodiment can accurately control the fuel flow rate, thereby improving the control efficiency.
[0030] Specifically, this embodiment provides: A method for controlling fuel quantity specifically includes the following steps: Step S10: When the aircraft engine is detected to be in a constant speed state or an acceleration / deceleration state in real time, the fuel demand corresponding to the aircraft engine is detected in real time. It should be noted that the fuel quantity control method provided by this invention is based on a pre-set first electric pump and a second electric pump. In actual application, the working status of the aircraft engine will be monitored in real time. Specifically, during the start-up process of the aircraft engine, only the first electric pump will work. Based on this, during the dynamic operation of the aircraft engine, it will be monitored whether the aircraft engine is in a constant speed working state or an acceleration / deceleration working state. During this process, the fuel demand of the aircraft engine will be monitored simultaneously and corresponding judgments will be made for subsequent processing.
[0031] Step S20: Determine in real time whether the fuel demand exceeds a preset demand threshold; It should be noted that during the actual operation of the aircraft engine, it is determined whether the fuel demand of the aircraft engine exceeds a preset demand threshold. Specifically, the preset demand threshold can be 200L / h, in order to facilitate subsequent processing.
[0032] Step S30: If it is determined in real time that the fuel demand is greater than the preset demand threshold, the first electric pump and the second electric pump are activated simultaneously through the motor controller, and a first control signal corresponding to the first electric pump and the second electric pump is generated synchronously. It should be noted that if the fuel demand is determined to be greater than the preset demand threshold, the second electric pump will intervene. When the aircraft engine is in a steady state, the fuel intake of the first electric pump remains constant, and the fuel intake of the second electric pump is dynamically adjusted by controlling the speed of the second electric pump. When the aircraft engine is accelerating or decelerating, the fuel intake of the second electric pump is gradually increased, and correspondingly, the fuel intake of the first electric pump is reduced synchronously, while keeping the total fuel intake of the first and second electric pumps constant. This enables precise fuel control for subsequent processing.
[0033] Step S40: If it is determined in real time that the fuel demand is less than the preset demand threshold, the second electric pump is shut down by the motor controller, and a second control signal adapted to the first electric pump is generated simultaneously. Both the first electric pump and the second electric pump are composed of a drive motor and a gear pump.
[0034] It should be noted that if the fuel demand is determined to be less than the preset demand threshold, the second electric pump will be turned off, and the fuel quantity will be controlled only by the first electric pump. This allows for precise control of the fuel quantity through a simple structure, which is beneficial for subsequent processing.
[0035] Second Embodiment Furthermore, the fuel quantity control method also includes: During the operation of the first electric pump and the second electric pump, the actual operating parameters generated by the first electric pump or the second electric pump are obtained. The actual operating parameters are dynamically analyzed to determine in real time whether the first electric pump or the second electric pump has malfunctioned. If a fault is detected in the first or second electric pump in real time, a corresponding fault pump stop command is generated, and corresponding emergency handling measures are executed.
[0036] It should be noted that, firstly, during the operation of the first and second electric pumps, the system needs to continuously acquire the actual operating parameters of both. These parameters are key indicators reflecting the pump status, including drive motor current (to determine whether the motor load is normal), gear pump outlet pressure (to reflect whether the oil supply pressure meets the standard), motor speed (to verify whether the pump operates smoothly), and pump temperature (to monitor whether there is a risk of overheating). These parameters are collected in real time through corresponding sensors (current sensor, pressure sensor, speed sensor, and temperature sensor).
[0037] Then, the collected actual operating parameters are dynamically analyzed. The analysis process needs to be combined with the normal operating parameter range of the pump body (such as the rated current and rated speed of the motor, and the design outlet pressure of the gear pump). Through trend analysis (such as whether the parameters continuously deviate from the normal range) and sudden change detection (such as whether the parameters jump instantaneously), the pump body is judged in real time whether there is a fault (such as motor stall, gear pump leakage, bearing wear, etc.). For example, if the motor current suddenly exceeds the rated value and continues to rise, it may be a motor overload or pump body jamming fault; if the gear pump outlet pressure drops sharply, it may be a pump body seal failure or pipeline leakage fault.
[0038] Upon detecting a malfunction in either the first or second electric pump, the system must immediately generate a corresponding pump stop command to prevent the fault from escalating (e.g., motor overload could lead to burnout and affect other systems). Simultaneously, emergency response measures must be implemented. These measures include activating the backup fuel supply path (if available), sending a fault alarm signal to the cockpit (e.g., audible and visual alerts), and recording the fault information (to provide a basis for subsequent maintenance). This ensures that even after a malfunction, the fuel supply can still meet basic needs or be safely switched over, guaranteeing the continuous and stable operation of the aircraft engine and facilitating subsequent handling.
[0039] Furthermore, the step of dynamically analyzing the actual operating parameters to determine in real time whether the first electric pump or the second electric pump has malfunctioned includes: The drive motor current, gear pump outlet pressure, motor speed and temperature of the first electric pump and the second electric pump are collected synchronously at a preset sampling frequency to form a corresponding multi-dimensional parameter sequence. The multi-dimensional parameter sequence is processed by a sliding window, and the mean, standard deviation and rate of change between adjacent windows are calculated for each sliding window. The mean, standard deviation and rate of change are then compared with a preset normal threshold. If the mean, standard deviation, and rate of change of three consecutive windows exceed the threshold range, the corresponding electric pump is determined to be faulty.
[0040] It should be noted that, firstly, the drive motor current of the first and second electric pumps, the outlet pressure of the gear pump, the motor speed, and the temperature are synchronously collected at a preset sampling frequency (usually 10-100Hz, balancing real-time performance and data volume) to form a multi-dimensional parameter sequence. Synchronous acquisition is crucial, ensuring the correlation between different parameters at the same point in time. For example, a sudden increase in motor current and a sudden drop in outlet pressure at the same moment may correspond to a pump jamming fault; if the acquisition is not synchronized, the fault correlation characteristics may be missed.
[0041] Next, a sliding window process is applied to the multi-dimensional parameter sequence. The size of the sliding window (e.g., 5-10 sampling points) needs to be set according to the parameter variation characteristics. A window that is too small will lead to large data fluctuations, while a window that is too large may delay fault detection. Within each window, the mean (reflecting the overall level of the parameter, such as whether the average current exceeds the limit), standard deviation (reflecting the stability of the parameter, such as whether the current fluctuation is too large), and rate of change between adjacent windows (reflecting the dynamic trend of the parameter, such as whether the pressure drops rapidly) are calculated. These statistical indicators can comprehensively characterize the static and dynamic features of the parameters and reflect the fault state more accurately than a single parameter value.
[0042] Finally, the calculated mean, standard deviation, and rate of change are compared with preset normal thresholds (calibrated based on pump factory parameters and historical operating data). To avoid misjudgments caused by transient interference (such as brief sensor fluctuations), a judgment condition of "three consecutive windows exceeding the threshold" is set. Only when multiple consecutive sets of data are abnormal is the corresponding electric pump determined to be faulty. This multi-indicator, multi-window judgment logic significantly improves the reliability of fault detection and reduces the probability of erroneous shutdown of critical equipment in aviation systems, facilitating subsequent processing.
[0043] Furthermore, the step of synchronously collecting the drive motor current, gear pump outlet pressure, motor speed, and temperature of the first and second electric pumps at a preset sampling frequency to form a corresponding multi-dimensional parameter sequence includes: Four independent signal conditioning circuits are configured for the first electric pump and the second electric pump respectively, which amplify, filter and level convert the analog signals output by the current, pressure, speed and temperature sensors to generate corresponding standard voltage signals. The standard voltage signal is connected to a preset converter, and the pulse signal output by the preset position sensor is used as the acquisition synchronization trigger signal. After each sampling is completed, the four sets of parameter values of the first electric pump and the second electric pump are stored in the double buffer data queue in chronological order. When the length of the double buffer data queue reaches the preset length threshold, the data is output in chronological order as the multi-dimensional parameter sequence.
[0044] It should be noted that, firstly, four independent signal conditioning circuits are configured for the first and second electric pumps respectively, with each circuit corresponding to a specific parameter (current, pressure, speed, and temperature). Since the raw signals output by the sensors are typically weak analog signals (such as a few millivolts from a current sensor) and may contain noise (such as electromagnetic interference), the signal conditioning circuits need to perform three core tasks: amplification (amplifying the weak signal to a range recognizable by the acquisition device, such as 0-5V), filtering (removing high-frequency noise through a low-pass filter and retaining the effective signal), and level conversion (converting the signal voltage to a level standard compatible with the acquisition device). Ultimately, this generates a stable standard voltage signal, preventing distortion of the raw signal from affecting parameter accuracy.
[0045] Then, the standard voltage signal is connected to a preset converter (usually an analog-to-digital converter, ADC) to convert the analog signal to a digital signal, facilitating subsequent data processing. To ensure synchronous parameter acquisition between the two pumps, a pulse signal from a preset position sensor (such as an engine crankshaft position sensor, whose output pulse is synchronized with engine operation) is used as the acquisition synchronization trigger signal. Whenever the trigger signal arrives, the ADC simultaneously samples four sets of parameters from both pumps, completely eliminating the acquisition time difference between different pumps and different parameters, and ensuring the time consistency of the parameter sequence.
[0046] After each sampling, the four sets of parameter values for the first and second electric pumps are stored in a double-buffered data queue in chronological order. The advantage of the double-buffered queue lies in its parallel "acquisition-storage-output" processing: while one buffer is used to store newly acquired data, the other buffer can simultaneously output the already stored data, avoiding data loss due to insufficient processing speed. When the length of the double-buffered data queue reaches a preset threshold (e.g., 100 sampling points, set according to the real-time requirements of fault detection), the data is integrated into a multi-dimensional parameter sequence in chronological order (e.g., each time point contains eight parameter values: "Pump 1 current, Pump 1 pressure, Pump 1 speed, Pump 1 temperature, Pump 2 current, Pump 2 pressure, Pump 2 speed, and Pump 2 temperature"), and output to the fault diagnosis module to ensure the continuity and stability of data supply for subsequent processing.
[0047] Furthermore, the step of generating a corresponding fault pump stop command and executing corresponding emergency handling measures if a fault is detected in real time in the first or second electric pump includes: Extract the pump code identifier from the fault diagnosis results to determine whether the faulty pump is the first electric pump or the second electric pump; Record the operating parameters at the moment the fault occurs and read out the corresponding fault code; The pump code identifier, the operating parameters, and the fault code are written into a non-volatile memory to generate a corresponding fault pump shutdown confirmation frame, and the fault pump stop command is generated based on the fault pump shutdown confirmation frame.
[0048] It should be noted that, firstly, the pump code identifier is extracted from the fault diagnosis results. This identifier is a unique number assigned by the system to the first and second electric pumps (e.g., "01" represents the first pump, and "02" represents the second pump). This identifier allows for quick identification of the faulty pump, preventing accidental shutdown of a normal pump and thus avoiding oil supply interruptions. For example, if the fault diagnosis results show "Pump code 02 parameter abnormal," then the second electric pump is directly identified as the faulty pump.
[0049] Next, record the operating parameters at the moment the fault occurred. These parameters are crucial for fault analysis, including motor current, outlet pressure, speed, and temperature at the time of the fault. Simultaneously, read the corresponding fault codes. Specifically, the fault codes are system-preset fault type identifiers (e.g., "E01" represents motor overload, "E02" represents low pressure). The fault codes allow for quick determination of the fault nature, reducing subsequent troubleshooting time. For example, if the current exceeds the rated value by 30% at the time of the fault and the fault code is "E01," it can be preliminarily determined to be a motor overload fault.
[0050] Finally, the pump identification code, instantaneous operating parameters at the time of the fault, and fault code are written to non-volatile memory (such as EEPROM or Flash chip). This type of memory retains data even after power failure, ensuring long-term storage of fault information. After writing, a corresponding fault pump shutdown confirmation frame is generated. This frame contains core information such as the fault pump identifier and fault information summary, used to verify the necessity and accuracy of the shutdown operation. Based on the fault pump shutdown confirmation frame, the system generates a fault pump stop command. The command clearly indicates the pump number to be stopped and the stopping sequence (e.g., reducing speed before cutting off power to avoid impact), ensuring the safe shutdown of the fault pump. Simultaneously, a backup plan is activated (e.g., keeping another pump operating normally in case of a single pump failure) to maintain oil supply, facilitating subsequent processing.
[0051] Furthermore, the step of writing the pump code identifier, the operating parameters, and the fault code into a non-volatile memory to generate a corresponding fault pump shutdown confirmation frame includes: According to the preset data frame format, the pump code identifier, the operating parameters and the fault code are sequentially encapsulated into a data block of fixed length, and a timestamp and a check bit are appended to the beginning of the data block; The data block is written into the contiguous address space of the non-volatile memory, and the starting address and data length are recorded simultaneously to generate a storage index. Based on the storage index, the data block is compared and verified byte by byte with the original data. If the comparison is consistent, the storage index is combined with the shutdown instruction identifier to form the fault pump shutdown confirmation frame and output it.
[0052] It should be noted that, firstly, following a preset data frame format (such as one conforming to avionics communication standards), the pump code identifier, fault operating parameters, and fault code are sequentially encapsulated into a fixed-length data block (e.g., 64 bytes, for easy system parsing). A timestamp (accurate to milliseconds, recording the time of the fault) and a check bit (e.g., a parity bit, used for initial data integrity verification) are appended to the beginning of the data block. The timestamp helps to trace the specific operating conditions under which the fault occurred (e.g., whether it occurred during acceleration or deceleration), and the check bit quickly detects bit flip errors during data transmission.
[0053] Then, the packaged data block is written into the contiguous address space of the non-volatile memory. Choosing contiguous addresses improves data read speed. Simultaneously, the starting address (e.g., "0x000100") and data length (e.g., 64 bytes) of the data block are recorded, generating a storage index. Specifically, the index acts as a "directory" for the data block, allowing for quick location and retrieval of faulty data, avoiding the waste of time traversing the entire memory. For example, the storage index records "starting address 0x000100, length 64 bytes, corresponding to pump 02 fault," allowing direct reading of the data block at that address during subsequent maintenance.
[0054] Finally, data verification is performed based on the storage index: a data block is read from memory and compared byte-by-byte with the original data (fault information before it was written). If they match, the data was written correctly and is not corrupted; if they do not match, the data block is rewritten until they match. After successful verification, the storage index is combined with a stop command identifier (such as "STOP") to form a complete fault pump stop confirmation frame, which is then output. This frame contains not only fault information but also the storage verification result, ensuring that the stop command is generated based on reliable fault data, thus facilitating subsequent processing.
[0055] Furthermore, the step of generating the fault pump stop command based on the fault pump stop confirmation frame includes: The fault pump shutdown confirmation frame is converted into corresponding binary data according to a preset fixed bit width to form the corresponding original instruction frame; The original instruction frame is subjected to cyclic redundancy check and byte accumulation check to generate a double check code, which is then appended to the end of the frame. A timestamp and instruction sequence number are inserted into the header of the original instruction frame to generate the fault pump stop instruction accordingly.
[0056] It should be noted that, firstly, the fault pump shutdown confirmation frame is converted into corresponding binary data according to a preset fixed bit width (e.g., 32 bits, conforming to the motor controller's instruction receiving format) to form the original instruction frame. Fixed bit width conversion ensures compatibility between the instruction format and the motor controller, avoiding parsing errors due to bit width mismatch. For example, converting the "fault pump shutdown confirmation frame content" into a 32-bit binary number "10100110...0110" facilitates controller recognition.
[0057] Next, the original command frame undergoes dual verification: first, a cyclic redundancy check (CRC, such as CRC16 or CRC32) is performed, using a specific algorithm to calculate the checksum, which can detect multi-bit errors during command transmission; then, a byte-by-byte checksum is performed, adding the values of each byte in the command frame to obtain a cumulative sum, used to further verify data integrity. Dual verification significantly improves the error detection rate compared to single verification, and is particularly suitable for scenarios in aviation systems with extremely high reliability requirements. For example, if the original command frame's CRC checksum is "0x1234" and the byte-by-byte sum is "0x56", appending both to the end of the frame forms a complete structure of "command frame + CRC + cumulative sum".
[0058] Finally, a timestamp (accurate to milliseconds, recording the command generation time) and a command sequence number (e.g., "SN001," used to distinguish different commands and prevent command duplication or loss) are inserted into the header of the original command frame. The timestamp helps the system determine if a command has timed out (e.g., if a command is not executed within 1 second of its generation, it becomes invalid), and the sequence number can be used for command tracing (e.g., to check the transmission record by querying the sequence number when investigating why a certain command was not executed). After insertion, the final fault pump stop command is generated. The command is transmitted to the motor controller via a safety communication bus (e.g., aviation CAN bus) to ensure that the fault pump stops safely as instructed, while also ensuring the stable operation of the entire fuel system, facilitating subsequent processing.
[0059] Please see Figure 2 The third embodiment of the present invention provides: A fuel quantity control system, wherein the system comprises: The detection module is used to detect the fuel demand corresponding to the aircraft engine in real time when the aircraft engine is detected to be in a constant speed state or an acceleration / deceleration state. The judgment module is used to determine in real time whether the fuel demand exceeds a preset demand threshold. The first generation module is used to simultaneously activate the first electric pump and the second electric pump through the motor controller if it is determined in real time that the fuel demand is greater than the preset demand threshold, and synchronously generate a first control signal corresponding to the first electric pump and the second electric pump. The second generation module is used to shut down the second electric pump through the motor controller if it is determined in real time that the fuel demand is less than the preset demand threshold, and to simultaneously generate a second control signal adapted to the first electric pump. Both the first electric pump and the second electric pump are composed of a drive motor and a gear pump.
[0060] Furthermore, the fuel quantity control system also includes a parsing module, which is specifically used for: During the operation of the first electric pump and the second electric pump, the actual operating parameters generated by the first electric pump or the second electric pump are obtained. The actual operating parameters are dynamically analyzed to determine in real time whether the first electric pump or the second electric pump has malfunctioned. If a fault is detected in the first or second electric pump in real time, a corresponding fault pump stop command is generated, and corresponding emergency handling measures are executed.
[0061] Furthermore, the parsing module is specifically used for: The drive motor current, gear pump outlet pressure, motor speed and temperature of the first electric pump and the second electric pump are collected synchronously at a preset sampling frequency to form a corresponding multi-dimensional parameter sequence. The multi-dimensional parameter sequence is processed by a sliding window, and the mean, standard deviation and rate of change between adjacent windows are calculated for each sliding window. The mean, standard deviation and rate of change are then compared with a preset normal threshold. If the mean, standard deviation, and rate of change of three consecutive windows exceed the threshold range, the corresponding electric pump is determined to be faulty.
[0062] Furthermore, the parsing module is specifically used for: Four independent signal conditioning circuits are configured for the first electric pump and the second electric pump respectively, which amplify, filter and level convert the analog signals output by the current, pressure, speed and temperature sensors to generate corresponding standard voltage signals. The standard voltage signal is connected to a preset converter, and the pulse signal output by the preset position sensor is used as the acquisition synchronization trigger signal. After each sampling is completed, the four sets of parameter values of the first electric pump and the second electric pump are stored in the double buffer data queue in chronological order. When the length of the double buffer data queue reaches the preset length threshold, the data is output in chronological order as the multi-dimensional parameter sequence.
[0063] Furthermore, the parsing module is specifically used for: Extract the pump code identifier from the fault diagnosis results to determine whether the faulty pump is the first electric pump or the second electric pump; Record the operating parameters at the moment the fault occurs and read out the corresponding fault code; The pump code identifier, the operating parameters, and the fault code are written into a non-volatile memory to generate a corresponding fault pump shutdown confirmation frame, and the fault pump stop command is generated based on the fault pump shutdown confirmation frame.
[0064] Furthermore, the parsing module is specifically used for: According to the preset data frame format, the pump code identifier, the operating parameters and the fault code are sequentially encapsulated into a data block of fixed length, and a timestamp and a check bit are appended to the beginning of the data block; The data block is written into the contiguous address space of the non-volatile memory, and the starting address and data length are recorded simultaneously to generate a storage index. Based on the storage index, the data block is compared and verified byte by byte with the original data. If the comparison is consistent, the storage index is combined with the shutdown instruction identifier to form the fault pump shutdown confirmation frame and output it.
[0065] Furthermore, the parsing module is specifically used for: The fault pump shutdown confirmation frame is converted into corresponding binary data according to a preset fixed bit width to form the corresponding original instruction frame; The original instruction frame is subjected to cyclic redundancy check and byte accumulation check to generate a double check code, which is then appended to the end of the frame. A timestamp and instruction sequence number are inserted into the header of the original instruction frame to generate the fault pump stop instruction accordingly.
[0066] The fourth embodiment of the present invention provides a computer, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the fuel quantity control method as described above.
[0067] The fifth embodiment of the present invention provides a readable storage medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the fuel quantity control method as described above.
[0068] In summary, the fuel quantity control method and system provided in the above embodiments of the present invention can accurately control the fuel flow rate, thereby improving control efficiency.
[0069] It should be noted that the above modules can be functional modules or program modules, and can be implemented through software or hardware. For modules implemented through hardware, the above modules can reside in the same processor; or the above modules can be located in different processors in any combination.
[0070] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-including system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can contain, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device.
[0071] More specific examples of computer-readable media (a non-exhaustive list) include: electrical connections (electronic devices) having one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which the program can be printed, because the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.
[0072] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.
[0073] In the description of this specification, references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.
[0074] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the appended claims.
Claims
1. A method for controlling fuel quantity, characterized in that, The method includes: When the aircraft engine is detected to be in a constant speed state or an acceleration / deceleration state in real time, the fuel demand corresponding to the aircraft engine is detected in real time. Real-time determination of whether the fuel demand exceeds a preset demand threshold; If it is determined in real time that the fuel demand is greater than the preset demand threshold, the first electric pump and the second electric pump are activated simultaneously through the motor controller, and a first control signal corresponding to the first electric pump and the second electric pump is generated synchronously. If it is determined in real time that the fuel demand is less than the preset demand threshold, the second electric pump is shut down by the motor controller, and a second control signal adapted to the first electric pump is generated simultaneously. Both the first and second electric pumps are composed of a drive motor and a gear pump.
2. The fuel quantity control method according to claim 1, characterized in that, The fuel quantity control method further includes: During the operation of the first electric pump and the second electric pump, the actual operating parameters generated by the first electric pump or the second electric pump are obtained. The actual operating parameters are dynamically analyzed to determine in real time whether the first electric pump or the second electric pump has malfunctioned. If a fault is detected in the first or second electric pump in real time, a corresponding fault pump stop command is generated, and corresponding emergency handling measures are executed.
3. The fuel quantity control method according to claim 2, characterized in that, The step of dynamically analyzing the actual operating parameters to determine in real time whether the first electric pump or the second electric pump has malfunctioned includes: The drive motor current, gear pump outlet pressure, motor speed and temperature of the first electric pump and the second electric pump are collected synchronously at a preset sampling frequency to form a corresponding multi-dimensional parameter sequence. The multi-dimensional parameter sequence is processed by a sliding window, and the mean, standard deviation and rate of change between adjacent windows are calculated for each sliding window. The mean, standard deviation and rate of change are then compared with a preset normal threshold. If the mean, standard deviation, and rate of change of three consecutive windows exceed the threshold range, the corresponding electric pump is determined to be faulty.
4. The fuel quantity control method according to claim 3, characterized in that, The step of synchronously collecting the drive motor current, gear pump outlet pressure, motor speed, and temperature of the first and second electric pumps at a preset sampling frequency to form a corresponding multi-dimensional parameter sequence includes: Four independent signal conditioning circuits are configured for the first electric pump and the second electric pump respectively, which amplify, filter and level convert the analog signals output by the current, pressure, speed and temperature sensors to generate corresponding standard voltage signals. The standard voltage signal is connected to a preset converter, and the pulse signal output by the preset position sensor is used as the acquisition synchronization trigger signal. After each sampling is completed, the four sets of parameter values of the first electric pump and the second electric pump are stored in the double buffer data queue in chronological order. When the length of the double buffer data queue reaches the preset length threshold, the data is output in chronological order as the multi-dimensional parameter sequence.
5. The fuel quantity control method according to claim 2, characterized in that, The steps of generating a corresponding fault pump stop command and executing corresponding emergency handling measures if a fault is detected in the first or second electric pump in real time include: Extract the pump code identifier from the fault diagnosis results to determine whether the faulty pump is the first electric pump or the second electric pump; The fault information is reported to the upper-level controller, and the task is downgraded to work in single-pump mode, limiting system functions and performance, and continuing to execute the task. Record the operating parameters at the moment the fault occurs and read out the corresponding fault code; The pump code identifier, the operating parameters, and the fault code are written into a non-volatile memory to generate a corresponding fault pump shutdown confirmation frame, and the fault pump stop command is generated based on the fault pump shutdown confirmation frame.
6. The fuel quantity control method according to claim 5, characterized in that, The step of writing the pump code identifier, the operating parameters, and the fault code into a non-volatile memory to generate a corresponding fault pump shutdown confirmation frame includes: According to the preset data frame format, the pump code identifier, the operating parameters and the fault code are sequentially encapsulated into a data block of fixed length, and a timestamp and a check bit are appended to the beginning of the data block; The data block is written into the contiguous address space of the non-volatile memory, and the starting address and data length are recorded simultaneously to generate a storage index. Based on the storage index, the data block is compared and verified byte by byte with the original data. If the comparison is consistent, the storage index is combined with the shutdown instruction identifier to form the fault pump shutdown confirmation frame and output it.
7. The fuel quantity control method according to claim 6, characterized in that, The step of generating the fault pump stop command based on the fault pump stop confirmation frame includes: The fault pump shutdown confirmation frame is converted into corresponding binary data according to a preset fixed bit width to form the corresponding original instruction frame; The original instruction frame is subjected to cyclic redundancy check and byte accumulation check to generate a double check code, which is then appended to the end of the frame. A timestamp and instruction sequence number are inserted into the header of the original instruction frame to generate the fault pump stop instruction accordingly; When the faulty pump stops, the system switches to emergency control mode, reports an emergency control alarm for the fuel pump, and calculates the engine's operating status under different altitude and speed conditions supported by the maximum fuel supply capacity based on the fuel supply capacity of the first electric pump and the engine's real-time model. This limits the engine's operating status and alerts other aircraft systems via the communication bus.
8. A fuel quantity control system, characterized in that, The system includes: The detection module is used to detect the fuel demand corresponding to the aircraft engine in real time when the aircraft engine is detected to be in a constant speed state or an acceleration / deceleration state. The judgment module is used to determine in real time whether the fuel demand exceeds a preset demand threshold. The first generation module is used to simultaneously activate the first electric pump and the second electric pump through the motor controller if it is determined in real time that the fuel demand is greater than the preset demand threshold, and synchronously generate a first control signal corresponding to the first electric pump and the second electric pump. The second generation module is used to shut down the second electric pump through the motor controller if it is determined in real time that the fuel demand is less than the preset demand threshold, and to simultaneously generate a second control signal adapted to the first electric pump. Both the first electric pump and the second electric pump are composed of a drive motor and a gear pump.
9. A computer comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the fuel quantity control method as described in any one of claims 1 to 7.
10. A readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the fuel quantity control method as described in any one of claims 1 to 7.