Avionics system power failure emergency processing method and device
By employing a redundant power supply architecture and hierarchical load management, the airborne avionics system achieves orderly degradation and safe recovery in the event of a sudden power outage, solving the problem of functional interruption in traditional systems during sudden power outages and improving system reliability and data integrity.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-12-26
- Publication Date
- 2026-04-07
AI Technical Summary
Traditional airborne avionics systems cannot effectively differentiate the importance of modules during sudden power outages, and cannot achieve differentiated power supply guarantees, secure storage of critical data, and rapid and reliable recovery, leading to system function interruption or even endangering flight safety.
The system employs a redundant power architecture, hierarchical load management, and multi-level time threshold judgment. Through coordinated control of energy storage capacitors, it achieves orderly degradation, maintenance of critical modules, and safe recovery. This includes monitoring the external power supply status, dynamically adjusting the power supply range of the LRM module, prioritizing the operation of critical and important modules, and triggering data saving during emergency power switching.
It significantly improves the reliability, safety, and data integrity of avionics systems under abnormal power conditions, ensuring the continuous operation of critical functions and data security, and is suitable for system operation in various complex scenarios.
Smart Images
Figure CN121813656A_ABST
Abstract
Description
Technical Field
[0001] This invention belongs to the field of airborne computer system software and relates to an emergency handling method and device for power failure of avionics system. It is applicable to intelligent power management that enables the continuous operation of key functions and safe data storage through redundant power supply, hierarchical load management and energy storage support in the event of sudden failure of main power supply. Background Technology
[0002] Airborne avionics systems are the core systems for communication and computing in modern aircraft, undertaking tasks such as situational awareness, flight management, integrated navigation, fire control radar, display, and warning. As avionics systems become increasingly complex and intelligent, the requirements for power supply continuity, real-time response, and operational reliability are becoming increasingly stringent.
[0003] As a key component of avionics systems, power management not only needs to perform basic power supply and distribution functions, but also needs to have status awareness, fault diagnosis, health management and emergency response capabilities, playing a vital role in ensuring the high reliability of airborne avionics systems.
[0004] Traditional airborne avionics systems have relatively simple power management architectures, mainly focusing on power supply control under steady-state conditions, and lacking sophisticated response mechanisms for sudden power outages. In complex scenarios such as extreme environments, strong electromagnetic interference, or transient / continuous power system failures, existing solutions often fail to effectively distinguish the importance of modules, save critical data in a timely manner, or achieve orderly degradation and rapid recovery, which can easily lead to system malfunctions or even endanger flight safety. Summary of the Invention
[0005] To address the technical problems of existing avionics systems in failing to provide differentiated power supply assurance, securely preserve critical data, and achieve rapid and reliable recovery in the event of external power anomalies (such as main power supply interruption or voltage drop), this invention discloses an emergency handling method for avionics systems during power outages. The avionics system includes a power module and multiple field-replaceable power management modules (LRM modules). The LRM modules are categorized into critical modules, important modules, and general modules according to their importance. The method includes the following steps: S1. Monitor the status of the two external main power supplies, and when at least one external main power supply is normal, it supplies power to the avionics system. S2. When both external main power supplies are detected to be abnormal, the energy storage capacitors of the power modules are activated in stages according to the duration of the abnormality to supply power to the LRM modules, and the range of LRM modules supplied is dynamically adjusted to prioritize the operation of the key modules and the important modules. S3. If the external main power supply is abnormal for more than the second preset threshold and the emergency power supply is normal, switch to the emergency power supply to power the key module to maintain long-term operation, and send a power failure signal to the key module to trigger it to execute data saving and then power off. S4. During any power outage emergency handling phase, if any external main power supply is restored, immediately switch back to the restored external main power supply and restore normal power supply to all LRM modules.
[0006] Furthermore, the power module includes two redundant sub-power modules, employing a 1+1 redundancy architecture to centrally power all the LRM modules.
[0007] Furthermore, the external main power supply includes one 270V DC power supply, the emergency power supply is a 28V DC power supply, and the energy storage capacitor includes a 270V energy storage capacitor corresponding to the external main power supply and a 28V energy storage capacitor corresponding to the emergency power supply.
[0008] Further, in step S2, the energy storage capacitor of the power module is activated in stages according to the duration of the abnormality to supply power to the LRM module, including: When the abnormal duration of the external main power supply does not exceed the first preset threshold, the corresponding energy storage capacitor is activated to supply power to all LRM modules. When the abnormal duration of the external main power supply exceeds the first preset threshold but does not reach the second preset threshold, the corresponding energy storage capacitor is activated to supply power to the key module and the important module. Wherein, the first preset threshold is less than the second preset threshold.
[0009] In an improved embodiment of the above-mentioned emergency handling method for avionics system power failure, the method further includes: S5. If the avionics system has switched to the emergency power supply, but the emergency power supply subsequently malfunctions and the duration of the malfunction exceeds the third preset threshold, a power-down signal is sent to the critical module to trigger it to perform data saving. After the data saving is completed, the entire system is completely powered down.
[0010] Furthermore, the power failure signal is sent by the power module to the critical module through the communication interface to trigger it to perform a data saving operation.
[0011] This invention also provides an emergency handling device for avionics system power failure, including a power module and a power management system. The power module is used to connect to two external main power supplies and one emergency power supply, and to power multiple field-replaceable LRM modules. The power management system is integrated into the power module and is configured to: Monitor the status of the external main power supply; When both external main power supplies are abnormal, the power supply to the LRM module is controlled in stages according to the duration of the abnormality, giving priority to ensuring the operation of critical and important modules. When the external main power supply abnormally exceeds the second preset threshold and the emergency power supply is normal, switch to the emergency power supply to power the critical modules and send a power failure signal to the important modules to trigger their data saving and then power failure. When any external main power supply is restored, immediately switch back to the main power supply and restore normal power supply to all modules; The LRM modules are divided into key modules, important modules, and general modules according to their importance.
[0012] Furthermore, the power management system includes: The power supply status monitoring unit is used to monitor the voltage, current and on / off status of the external main power supply and emergency power supply in real time. An abnormal duration timing unit is used to calculate the duration of an abnormal external main power supply. The decision logic unit is used to determine the current power supply mode and generate control commands based on the inputs from the power supply status monitoring unit and the abnormal duration timing unit. The power-down signal output module is used to send a power-down signal to a specified LRM module to trigger data saving.
[0013] Furthermore, the power management system also includes: An energy storage unit is used to provide short-term power to the LRM module when the external main power supply and / or the emergency power supply is abnormal; The power switch array, controlled by the decision logic unit, is used to dynamically control the power supply on / off of each LRM module; The module physical interface is used to connect to the external power supply, communication bus, and each LRM module; A communication interface is connected to each LRM module to transmit the power-down signal.
[0014] Furthermore, the power module includes two redundant sub-power modules. The two sub-power modules synchronize their power supply status in real time through a communication link, and automatically switch to the other sub-power module to assume all power supply tasks when either sub-power module fails. The energy storage unit includes a main power supply energy storage capacitor and an emergency power supply energy storage capacitor, which are coupled to the external main power supply path and emergency power supply path, respectively, to provide short-term energy support during the corresponding power supply anomaly.
[0015] The method of this invention achieves full-process management of "orderly degradation - critical maintenance - safe recovery" during power failure through redundant power architecture, hierarchical load management, multi-level time threshold judgment and energy storage collaborative control, which significantly improves the reliability, safety and data integrity of avionics system under abnormal power conditions.
[0016] Furthermore, this method provides intelligence to airborne avionics systems, improving product stability and reliability, and ensuring system operation in various complex scenarios. It can be applied to power management in various airborne avionics systems, offering high flexibility, applicability, code reusability, low cost, and high reliability. Attached Figure Description
[0017] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0018] Figure 1 This is a diagram of the avionics system architecture. Figure 2 This is a flowchart of the emergency handling method for power failure of the avionics system according to the present invention; Figure 3 This is an emergency handling procedure for external power failure disclosed in an embodiment of the present invention; Figure 4 This is a schematic diagram of the avionics system power failure emergency handling device of the present invention. Detailed Implementation
[0019] The embodiments of this application will now be described in detail with reference to the accompanying drawings.
[0020] The following specific examples illustrate the implementation of this application. Those skilled in the art can easily understand other advantages and effects of this application from the content disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. This application can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this application. It should be noted that, in the absence of conflict, the following embodiments and features of the embodiments can be combined with each other. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0021] This invention discloses an emergency handling method for power failure of avionics systems, see [link to relevant documentation]. Figure 1As shown, the avionics system includes a power module and multiple field-replaceable LRM modules, which are classified into critical modules, important modules, and general modules according to their importance.
[0022] See Figure 2 and Figure 3 As shown, the method is performed in the power module and includes the following steps: S1. Monitor the status of the two external main power supplies, and when at least one external main power supply is normal, it supplies power to the avionics system. S2. When both external main power supplies are detected to be abnormal, the energy storage capacitors of the power modules are activated in stages according to the duration of the abnormality to supply power to the LRM modules, and the range of LRM modules supplied is dynamically adjusted to prioritize the operation of the key modules and the important modules. S3. If the external main power supply is abnormal for more than the second preset threshold and the emergency power supply is normal, switch to the emergency power supply to power the key module to maintain long-term operation, and send a power failure signal to the key module to trigger it to execute data saving and then power off. S4. During any power outage emergency handling phase, if any external main power supply is restored, immediately switch back to the restored external main power supply and restore normal power supply to all LRM modules.
[0023] Furthermore, the power module includes two redundant sub-power modules, employing a 1+1 redundancy architecture to centrally power all LRM modules. When at least one external power supply input is normal, the power module operates using only that external power supply, without drawing power from the emergency power input terminal, and the energy storage capacitors of both the external power supply and the emergency power supply do not discharge.
[0024] Furthermore, the emergency power supply will not be activated if either of the two sub-power modules has a normal 270V DC power supply. Furthermore, the external main power supply includes one 270V DC power supply, the emergency power supply is a 28V DC power supply, and the energy storage capacitor includes a 270V energy storage capacitor corresponding to the external main power supply and a 28V energy storage capacitor corresponding to the emergency power supply.
[0025] Further, in step S2, the energy storage capacitor of the power module is activated in stages according to the duration of the abnormality to supply power to the LRM module, including: When the abnormal duration of the external main power supply does not exceed the first preset threshold, the corresponding energy storage capacitor is activated to supply power to all LRM modules. When the abnormal duration of the external main power supply exceeds the first preset threshold but does not reach the second preset threshold, the corresponding energy storage capacitor is activated to supply power to the key module and the important module. Wherein, the first preset threshold is less than the second preset threshold.
[0026] In an improved embodiment of the above-mentioned emergency handling method for avionics system power failure, the method further includes: S5. If the avionics system has switched to the emergency power supply, but the emergency power supply subsequently malfunctions and the duration of the malfunction exceeds the third preset threshold, a power-down signal is sent to the critical module to trigger it to perform data saving. After the data saving is completed, the entire system is completely powered down.
[0027] Furthermore, the power failure signal is sent by the power module to the critical module through the communication interface to trigger it to perform a data saving operation.
[0028] In practical implementation, taking a power module comprising two redundant sub-power modules as an example, the emergency handling method for power failure of the above-mentioned avionics system will be explained: When at least one 270V power supply input is normal, the power module only uses 270V power to work and does not draw power from the 28V emergency power input terminal. When the abnormality of the two 270V power supply inputs does not exceed 5ms, the power module will supply power normally. When the abnormal input of the two 270V power supplies exceeds 5ms, the power module will only maintain the operation of the critical and important modules. If the abnormality of the two 270V power supply inputs exceeds 50ms, and the 28V emergency power supply is also abnormal, the power module sends a power-down signal. The 270V energy storage capacitor continues to discharge for 50ms to power critical modules and save data. After that, the entire system completely shuts down. If the 28V input power supply is normal, the power module switches to 28V power supply to maintain power to critical modules. At the same time, it sends a power-down signal to critical modules. The 270V energy storage capacitor continues to discharge for 50ms to save data. After that, critical modules no longer receive power, and critical modules continue to operate on 28V for an extended period. When the power module switches to 28V emergency input power and a 28V input power failure occurs, the 28V energy storage capacitor continues to discharge for 50ms. The power module sends a power-down signal to the critical modules so that the critical modules can save the power-down data. After that, the entire system completely shuts down. In the power management system, if any 270V power input is restored during a power outage, the power module will immediately switch to 270V power input, and all critical, important, and general modules will switch to normal power supply.
[0029] Based on the same inventive concept, this invention also provides an avionics system power failure emergency handling device, as described in the following embodiments. Since the principle by which the avionics system power failure emergency handling device solves the problem is similar to the avionics system power failure emergency handling method disclosed in the above embodiments, the implementation of the avionics system power failure emergency handling device can refer to the implementation of the avionics system power failure emergency handling method, and repeated details will not be elaborated further. As used below, the terms "unit" or "module" can refer to a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated.
[0030] Figure 4 This is a structural block diagram of an avionics system power failure emergency handling device disclosed in an embodiment of the present invention, such as... Figure 4 As shown, the device includes a power module and a power management system, and the structure is described below.
[0031] The power module is used to connect to two external main power supplies and one emergency power supply, and to power multiple field-replaceable LRM modules; the power management system is integrated into the power module and is configured as follows: Monitor the status of the external main power supply; When both external main power supplies are abnormal, the power supply to the LRM module is controlled in stages according to the duration of the abnormality, giving priority to ensuring the operation of critical and important modules. When the external main power supply abnormally exceeds the second preset threshold and the emergency power supply is normal, switch to the emergency power supply to power the critical modules and send a power failure signal to the important modules to trigger their data saving and then power failure. When any external main power supply is restored, immediately switch back to the main power supply and restore normal power supply to all modules; The LRM modules are divided into key modules, important modules, and general modules according to their importance.
[0032] Furthermore, the power management system includes: The power supply status monitoring unit is used to monitor the voltage, current and on / off status of the external main power supply and emergency power supply in real time. An abnormal duration timing unit is used to calculate the duration of an abnormal external main power supply. The decision logic unit is used to determine the current power supply mode and generate control commands based on the inputs from the power supply status monitoring unit and the abnormal duration timing unit. The power-down signal output module is used to send a power-down signal to a designated LRM module to trigger data saving; Furthermore, the power management system also includes: An energy storage unit is used to provide short-term power to the LRM module when the external main power supply and / or the emergency power supply is abnormal; The power switch array, controlled by the decision logic unit, is used to dynamically control the power supply on / off of each LRM module; The module physical interface is used to connect to the external power supply, communication bus, and each LRM module; A communication interface is connected to each LRM module to transmit the power-down signal.
[0033] Furthermore, the power module includes two redundant sub-power modules. The two sub-power modules synchronize their power supply status in real time through a communication link, and automatically switch to the other sub-power module to assume all power supply tasks when either sub-power module fails. The energy storage unit includes a main power supply energy storage capacitor and an emergency power supply energy storage capacitor, which are coupled to the external main power supply path and emergency power supply path, respectively, to provide short-term energy support during the corresponding power supply anomaly.
[0034] The embodiments of the present invention achieve the following technical effects: The method of this invention achieves full-process management of "orderly degradation - critical maintenance - safe recovery" during power failure through redundant power architecture, hierarchical load management, multi-level time threshold judgment and energy storage collaborative control, which significantly improves the reliability, safety and data integrity of avionics system under abnormal power conditions.
[0035] Furthermore, this method provides intelligence to airborne avionics systems, improving product stability and reliability, and ensuring system operation in various complex scenarios. It can be applied to power management in various airborne avionics systems, offering high flexibility, applicability, code reusability, low cost, and high reliability.
[0036] In this embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements any of the above-mentioned emergency handling methods for avionics system power failure.
[0037] Specifically, the computer device can be a computer terminal, a server, or a similar computing device.
[0038] In this embodiment, a computer-readable storage medium is provided, which stores a computer program that executes any of the above-described avionics system power failure emergency handling methods.
[0039] Specifically, computer-readable storage media, including both permanent and non-permanent, removable and non-removable media, can store information using any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer-readable storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable storage media does not include transient media, such as modulated data signals and carrier waves.
[0040] Obviously, those skilled in the art should understand that the modules or steps of the above-described embodiments of the present invention can be implemented using general-purpose computing devices. They can be centralized on a single computing device or distributed across a network of multiple computing devices. Optionally, they can be implemented using computer-executable program code, thereby storing them in a storage device for execution by a computing device. In some cases, the steps shown or described can be performed in a different order than those presented here, or they can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, the embodiments of the present invention are not limited to any particular hardware and software combination.
[0041] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, various modifications and variations can be made to the embodiments of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.
Claims
1. A method for emergency handling of avionics system power failure, characterized in that, The avionics system includes a power module and multiple field-replaceable LRM modules, which are classified into critical modules, important modules, and general modules according to their importance. The method includes: Monitor the status of the two external main power supplies, and when at least one external main power supply is normal, it supplies power to the avionics system; When both external main power supplies are detected to be abnormal, the energy storage capacitors of the power modules are activated in stages according to the duration of the abnormality to supply power to the LRM modules, and the range of LRM modules being powered is dynamically adjusted to prioritize the operation of the key modules and the important modules. If the external main power supply is abnormal for more than the second preset threshold, and the emergency power supply is normal, switch to the emergency power supply to power the key module to maintain long-term operation, and send a power failure signal to the key module to trigger it to execute data saving and then power off. During any power outage emergency handling phase, if any external main power supply is restored, the system will immediately switch back to the restored external main power supply and restore normal power supply to all LRM modules.
2. The emergency handling method for power failure of avionics system according to claim 1, characterized in that, The power module includes two redundant sub-power modules, which adopt a 1+1 redundancy architecture to centrally power all LRM modules.
3. The emergency handling method for power failure of avionics system according to claim 1, characterized in that, The external main power supply includes one 270V DC power supply, the emergency power supply is a 28V DC power supply, and the energy storage capacitor includes a 270V energy storage capacitor corresponding to the external main power supply and a 28V energy storage capacitor corresponding to the emergency power supply.
4. The emergency handling method for power failure of avionics system according to claim 1, characterized in that, The power supply module is powered by its energy storage capacitors according to the duration of the abnormality, including: When the abnormal duration of the external main power supply does not exceed the first preset threshold, the corresponding energy storage capacitor is activated to supply power to all LRM modules. When the abnormal duration of the external main power supply exceeds the first preset threshold but does not reach the second preset threshold, the corresponding energy storage capacitor is activated to supply power to the key module and the important module. Wherein, the first preset threshold is less than the second preset threshold.
5. The emergency handling method for power failure of avionics system according to any one of claims 1 to 4, characterized in that, The method further includes: If the avionics system has switched to the emergency power supply, but the emergency power supply subsequently malfunctions and the duration of the malfunction exceeds a third preset threshold, a power-down signal is sent to the critical module to trigger it to perform data saving. After the data saving is completed, the entire system is completely powered down.
6. The emergency handling method for power failure of avionics system according to claim 5, characterized in that, The power failure signal is sent by the power module to the critical module or the important module through the communication interface to trigger it to perform a data saving operation.
7. An emergency handling device for power failure of an avionics system, characterized in that, include: The power module is used to connect to two external main power supplies and one emergency power supply, and to power multiple field-replaceable LRM modules. The power management system, integrated within the power module, is configured as follows: Monitor the status of the external main power supply; When both external main power supplies are abnormal, the power supply to the LRM module is controlled in stages according to the duration of the abnormality, giving priority to ensuring the operation of critical and important modules. When the external main power supply abnormally exceeds the second preset threshold and the emergency power supply is normal, switch to the emergency power supply to power the critical modules and send a power failure signal to the important modules to trigger their data saving and then power failure. When any external main power supply is restored, immediately switch back to the main power supply and restore normal power supply to all modules; The LRM modules are divided into key modules, important modules, and general modules according to their importance.
8. The avionics system power failure emergency handling device according to claim 7, characterized in that, The power management system includes: The power supply status monitoring unit is used to monitor the voltage, current and on / off status of the external main power supply and emergency power supply in real time. An abnormal duration timing unit is used to calculate the duration of an abnormal external main power supply. The decision logic unit is used to determine the current power supply mode and generate control commands based on the inputs from the power supply status monitoring unit and the abnormal duration timing unit. The power-down signal output module is used to send a power-down signal to a specified LRM module to trigger data saving.
9. The avionics system power failure emergency handling device according to claim 7 or 8, characterized in that, The power management system also includes: An energy storage unit is used to provide short-term power to the LRM module when the external main power supply and / or the emergency power supply is abnormal; The power switch array, controlled by the decision logic unit, is used to dynamically control the power supply on / off of each LRM module; The module physical interface is used to connect to the external power supply, communication bus, and each LRM module; A communication interface is connected to each LRM module to transmit the power-down signal.
10. The avionics system power failure emergency handling device according to claim 7, characterized in that, The power module includes two redundant sub-power modules. The two sub-power modules synchronize their power supply status in real time through a communication link, and automatically switch to the other sub-power module to take over the power supply task when either sub-power module fails. The energy storage unit includes a main power supply energy storage capacitor and an emergency power supply energy storage capacitor, which are coupled to the external main power supply path and emergency power supply path, respectively, to provide short-term energy support during the corresponding power supply anomaly.