Fault injection test system for transport plane cargo hold door control system
By designing a fault injection test system for the cargo door control system of a transport aircraft, timing verification and dynamic fault injection were achieved during the verification phase. This solved the problems of long testing cycles and lack of abnormal testing in existing technologies, and improved the efficiency and accuracy of system verification.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-12-30
- Publication Date
- 2026-04-14
AI Technical Summary
The testing process for cargo door control systems of transport aircraft in the current technology is lengthy and lacks fault injection testing under abnormal conditions. As a result, design flaws in the control system are discovered during aircraft delivery, test flights or use, which is costly.
Design a fault injection test system for a cargo hold door control system of a transport aircraft, including a door control system test platform, a data processing unit and a physical model of the door system. The fault injection module realizes the timing verification of door control commands and dynamic fault injection test.
During the verification phase of the cargo door control system, instruction timing verification was completed to shorten the test cycle, and the control function was verified under abnormal conditions to improve the system verification level.
Smart Images
Figure CN121857631A_ABST
Abstract
Description
Technical Field
[0001] This application belongs to the field of aircraft cabin door ground testing technology, and specifically relates to a fault injection test system for the cargo cabin door control system of a transport aircraft. Background Technology
[0002] Aircraft cabin door systems, comprising control systems, hydraulic systems, and door movement mechanisms, are integrated systems spanning multiple disciplines. Cargo doors for transport aircraft involve the interconnection of multiple sub-doors, making their control systems particularly complex. Existing technologies employ multi-stage testing methods for verification. The first stage verifies the door control logic by building exciters and data acquisition devices, and designs test cases to verify the control logic of each sub-door in detail. However, it cannot perform dynamic timing verification of the entire cargo door's opening or closing control. A second stage is needed, where a physical platform including the hydraulic system and door movement mechanism is built and tested in conjunction with the control system to complete the timing control verification of the entire cargo door opening or closing process. Existing multi-stage solutions result in long testing cycles, difficult upgrades and iterations, and primarily verify the normal opening or closing process of the cargo door, lacking fault injection testing under abnormal conditions. Design flaws in the control system under abnormal conditions are usually discovered during aircraft delivery flight testing or operation, which is costly. A technical solution is needed to address these issues. Summary of the Invention
[0003] The purpose of this application is to provide a fault injection test system for a transport aircraft cargo door control system to solve or mitigate at least one of the problems in the prior art.
[0004] The technical solution of this application is: a fault injection test system for a transport aircraft cargo door control system, comprising:
[0005] The test platform for the hatch control system is used to receive the hatch position switch excitation signal sent by the data processing unit to excite the hatch control system, and at the same time to collect the hatch control commands generated by the hatch control system.
[0006] A physical model of the hatch system, which is used to receive hatch control command signals sent by the data processing unit and generate hatch position switch signals according to the commands;
[0007] The data processing unit performs data cross-linking processing on the hatch control commands sent by the hatch control system test platform and the hatch position switch signals sent by the hatch system physical model. At the same time, it injects faults into the cross-linked data according to the fault mode, thereby realizing the timing verification and fault injection test of the hatch control commands of the hatch control system.
[0008] Preferably, the door control system test platform and the door system physical model are connected to the data processing unit via a reflective memory switch.
[0009] Preferably, the door control system test platform includes an exciter, a status acquisition device, and a door control system;
[0010] The actuator is constructed according to the electrical interface (ICD) requirements of the hatch control system. It receives reflected memory network data and parses it according to the protocol ICD to output the excitation signal of the hatch control system.
[0011] The status acquisition device is constructed according to the ICD (Integrated Device Diagram) requirements of the hatch control system. It acquires control command signals issued by the hatch control system and sends them to the reflective memory network in accordance with the ICD protocol.
[0012] Preferably, the physical model of the hatch system includes a control command receiving module, a hydraulic energy system model, a hatch load system model, and a hatch position status output module;
[0013] The control command receiving module receives the control command signal forwarded by the data processing unit through the reflective memory network, parses it according to the ICD protocol, and sends the command to the hydraulic energy system model and the hatch load system model.
[0014] The hydraulic energy system model is constructed based on the aircraft hydraulic system scheme. It controls the hydraulic system by receiving commands from the control command receiving module, and provides energy power for the operation of the cabin door system.
[0015] The hatch load system model is constructed based on the sub-hatch composition, sub-hatch hydraulic system scheme, and sub-hatch motion structure of the cargo hatch. Each sub-hatch has a corresponding sub-hatch load model, which consists of a sub-hatch hydraulic load model, a sub-hatch dynamic load model, and a sub-hatch electric switch signal judgment module. It receives control commands in real time, calculates and outputs hatch position electric switch signals, and sends them to the hatch position status output module.
[0016] The hatch position status output module receives the hatch position switch signal from the hatch load system model and sends it to the data processing unit through the reflective memory network according to the ICD protocol, thereby realizing the status feedback of the hatch system physical model.
[0017] Preferably, the data processing unit includes a data processing module, a fault injection module, and a real-time data monitoring module;
[0018] The data processing module is responsible for parsing or packaging the cross-linked data between the door control system test platform and the door system physical model according to the ICD protocol, and is used to provide an interface for real-time data monitoring and fault injection.
[0019] The fault injection module modifies and outputs all the interconnected data of the door control system test platform and the door system physical model through the interface provided by the data processing module, thereby realizing fault injection.
[0020] The real-time data monitoring module obtains all the cross-linking data of the physical model of the test platform and the hatch system through the interface provided by the data processing module, so as to provide a real-time data monitoring interface for testers to analyze.
[0021] Preferably, the process of timing verification of the hatch control commands of the hatch control system is as follows:
[0022] S11, initialize the physical model of the cargo door system according to the condition that all cargo doors are closed and locked, and after the data processing unit confirms that the airborne system under test has issued a door locking instruction, proceed to the next step;
[0023] S12, the exciter of the hatch control system test platform sends out the cargo hatch opening excitation, and the hatch control system begins to issue the opening control commands of each sub-hatch door in sequence according to the design timing. After the data processing unit confirms that the hatch control system has issued the cargo hatch opening instruction, the next step is executed.
[0024] S13, the exciter of the hatch control system test platform sends out the cargo hatch closing excitation, and the hatch control system begins to issue the closing control commands of each sub-hatch door in sequence according to the design timing. After the data processing unit confirms that the hatch control system has issued the cargo hatch locking instruction, the next step is executed.
[0025] S14: Obtain all the status data of the cargo door control commands through the data processing unit, generate the cargo door control command timing diagram according to the time dimension, and compare it with the expected control command timing value to evaluate whether the cargo door opening control timing and closing control timing are normal.
[0026] Preferably, the process of injecting faults into the hatch control system is as follows:
[0027] First, confirm that the timing of the control commands for opening and closing the cargo door is correct. After confirming the timing is correct, proceed with the following steps:
[0028] S21, an abnormal test of the opening control command is performed during the opening of the cargo door: During the opening of the cargo door, an invalid fault of the sub-door opening control command is injected through the fault injection module to obtain the door control command status data. Based on the data, a control command timing diagram is generated. The test result of whether the opening control command is abnormal is obtained by analyzing the control command timing diagram.
[0029] S22, Test the abnormality of the closing control command during the opening of the cargo door: During the opening of the cargo door, inject a valid fault of the sub-door closing control command through the fault injection module to obtain the door control command status data, generate a control command timing diagram based on the data, and obtain the test result of whether the closing control command is abnormal by analyzing the control command timing diagram;
[0030] S23, Test for abnormal opening control command during cargo door closing process: During cargo door closing process, inject a valid fault in the sub-door opening control command through the fault injection module to obtain the door control command status data, generate a control command timing diagram based on the data, and obtain the test result of whether the opening control command is abnormal by analyzing the control command timing diagram;
[0031] S24, Test the abnormality of the closing control command during the cargo door closing process: During the cargo door closing process, inject an invalid fault of the sub-door closing control command through the fault injection module, obtain the door control command status data, and generate a control command timing diagram based on the data. By analyzing the control command timing diagram, obtain the test result of whether the closing control command is abnormal.
[0032] S25, During the opening or closing of the cargo door, an abnormality test is performed on the electrical switch status of the opened or closed sub-door: During the opening or closing of the cargo door, an invalid fault of the electrical switch status of the opened or closed sub-door is injected through the fault injection module to obtain the door control command status data. Based on the data, a control command timing diagram is generated. By analyzing the control command timing diagram, the test result of whether the electrical switch status of the opened or closed sub-door is abnormal is obtained.
[0033] S26, During the opening or closing of the cargo door, an abnormality test is performed on the electrical switch status of the unopened or closed sub-door: During the opening or closing of the cargo door, a valid fault for the electrical switch status of the unopened or closed sub-door is injected through the fault injection module to obtain the door control command status data. Based on this data, a control command timing diagram is generated. By analyzing the control command timing diagram, the test result of whether the electrical switch status of the unopened or closed sub-door is abnormal is obtained.
[0034] The fault injection test system for the cargo hold door control system of the transport aircraft proposed in this application has the following advantages:
[0035] 1) The timing verification of cargo door control commands can be completed during the verification phase of the cargo door control system, making upgrades and iterations relatively simple and shortening the testing cycle;
[0036] 2) Dynamic fault injection testing of the cargo door control system was carried out, and the control function of the cargo door control system under abnormal conditions was verified, thereby improving the system verification level. Attached Figure Description
[0037] To more clearly illustrate the technical solutions provided in this application, the accompanying drawings will be briefly described below. Obviously, the drawings described below are merely some embodiments of this application.
[0038] Figure 1 This is a schematic diagram of the fault injection test system for the cargo door control system of the transport aircraft in this application.
[0039] Figure 2 This is a schematic diagram of the physical model of the hatch system in this application;
[0040] Figure 3 This is a schematic diagram of the door load system model in this application;
[0041] Figure 4 This is a schematic diagram of the fault injection process in this application. Detailed Implementation
[0042] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions in the embodiments of this application will be described in more detail below with reference to the accompanying drawings.
[0043] This application proposes a fault injection test system for a cargo door control system of a transport aircraft, which can perform timing verification of cargo door control commands during the control system verification phase, shortening the test cycle, and can perform dynamic fault injection tests on the cargo door control system, thereby improving the system verification level.
[0044] like Figure 1As shown, the fault injection test system for the cargo hold door control system of a transport aircraft provided in this application includes: a door control system test platform, a data processing unit, and a door system physical model. The door control system test platform receives door position switch excitation signals sent by the data processing unit to excite the door control system, and simultaneously acquires door control commands generated by the door control system. The door system physical model receives door control command signals sent by the data processing unit and generates door position switch signals according to the commands. The data processing unit performs data cross-linking processing on the door control commands sent by the door control system test platform and the door position switch signals sent by the door system physical model, and simultaneously injects faults into the cross-linked data according to fault modes, thereby realizing timing verification and fault injection testing of the door control commands of the door control system.
[0045] In this application, the door control system test platform includes an exciter, a status acquisition device, and a door control system (i.e., the airborne system under test). The exciter and the status acquisition device are connected to the door control system via hardwired cables and to the data processing unit via a reflective memory switch and fiber optic cables.
[0046] The actuator is constructed according to the requirements of the door control system's electrical interface ICD (Interface Control Document). It can receive data from the reflective memory network, parse it according to the protocol ICD, and output excitation signals for the door control system. In this embodiment of the application, the actuator receives control from the data processing unit through the reflective memory network and sends out physical signals of the door position switch status to excite the door control system.
[0047] The status acquisition device is constructed according to the ICD (Integrated Device Diagram) requirements of the hatch control system. It can acquire control command signals issued by the hatch control system and send them to the reflective memory network according to the ICD protocol. In this embodiment of the application, the status acquisition device acquires the hatch control commands output by the hatch control system and sends them to the data processing unit via the reflective memory network.
[0048] like Figure 2 As shown, the physical model of the hatch system in this application includes a control command receiving module, a hydraulic energy system model, a hatch load system model, and a hatch position status output module. The control command receiving module, hydraulic energy system model, hatch load system model, and hatch position status output module are connected sequentially. The control command receiving module transmits control command data to the hydraulic energy system model and the hatch load system model. The hydraulic energy system model transmits pressure and flow data to the hatch load system model and receives return oil pressure and flow data from the hatch load system. The hatch load system model transmits hatch electric switch signal data to the hatch position status output module.
[0049] The control command receiving module receives control command signals forwarded by the data processing unit through a reflective memory network, parses them according to the ICD protocol, and sends the commands to the hydraulic energy system model and the hatch load system model.
[0050] The hydraulic energy system model is constructed based on the aircraft hydraulic system scheme. It controls the hydraulic system by receiving commands from the control command receiving module, providing energy power for the cabin door system's operation. For example, in this embodiment of the application, a No. 1 hydraulic system model and a No. 2 hydraulic system model are constructed, improving system reliability through dual redundancy backup.
[0051] like Figure 3 As shown, the hatch load system model is constructed based on the sub-hatch components, sub-hatch hydraulic system scheme, and sub-hatch motion structure of the cargo hatch. It is the core part of the hatch system physical model. Each sub-hatch has a corresponding sub-hatch load model, which consists of a sub-hatch hydraulic load model, a sub-hatch dynamic load model, and a sub-hatch electrical switch signal judgment module. It receives control commands in real time, calculates and outputs hatch position electrical switch signals, and sends them to the hatch position status output module. For example, in... Figure 3 In the embodiment shown, the hydraulic load model receives control commands in real time to drive the dynamic load model to move, and sends the displacement information S to the switch signal judgment module. The switch signal judgment module sets the switch position judgment range (S1, S2). When S∈(S1, S2), the switch is output as valid; otherwise, the switch is output as invalid, and the result is sent to the hatch position status output module.
[0052] The hatch position status output module receives the hatch position switch signal from the hatch load system model and sends it to the data processing unit through the reflective memory network according to the ICD protocol, thereby realizing the status feedback of the hatch system physical model.
[0053] In some embodiments of this application, the various models or models of the hatch system physical model can be operated in parallel by a single integrated device or apparatus, or each sub-model or model can run independently to perform calculations in a single-machine or single-device manner, thereby improving the model's running speed to meet the system's real-time requirements. For example, in this embodiment of the application, the control command receiving module, two hydraulic system models, five hatch load system models, and hatch position status output module are separated into independently operating models. Each model runs independently on a computer, and the modules communicate with each other through a reflective memory network and synchronize their clocks.
[0054] The data processing unit includes a data processing module, a fault injection module, and a real-time data monitoring module.
[0055] Among them, the data processing module serves as an information relay station between the test platform and the physical model of the hatch control system. In accordance with the ICD protocol, it is responsible for parsing or packaging the cross-linked data. It not only realizes the virtual-real interaction between the test platform and the physical model of the hatch system, but also obtains management rights for all cross-linked data, providing an interface for real-time data monitoring and fault injection.
[0056] The fault injection module provides an operating interface for testers. Through the interface provided by the data processing module, all the cross-linking data of the physical model of the test platform and the hatch system can be modified and output to achieve fault injection.
[0057] The real-time data monitoring module acquires all the cross-linking data of the physical model of the test platform and the hatch system through the interface provided by the data processing module, provides testers with a real-time data monitoring interface, and stores the data information for testers to analyze.
[0058] In this application, the cabin door control system test platform and the cabin door system physical model are connected to the data processing unit through a reflective memory switch, thereby forming a fault injection test system for the cargo cabin door control system of a transport aircraft.
[0059] In this application, the timing verification of cargo door control commands is performed using a cargo door control system fault injection test system, including timing tests for normal cargo door opening and normal cargo door closing. The specific test process is as follows:
[0060] S11, initialize the physical model of the cargo door system according to the condition that all cargo doors are closed and locked, and after the data processing unit confirms that the airborne system under test has issued a door locking instruction, proceed to the next step;
[0061] S12, the exciter of the test platform of the cabin door control system sends out the excitation of the cargo door opening. The airborne system under test begins to send out the control commands for opening each sub-cabin door in sequence according to the design timing. After the data processing unit confirms that the airborne system under test has sent out the cargo door opening instruction, it proceeds to the next step.
[0062] S13, the exciter of the test platform of the cabin door control system sends out the cargo door closing excitation, and the airborne system under test begins to send out the closing control commands of each sub-cabin door in sequence according to the design timing. After the data processing unit confirms that the airborne system under test has issued the cargo door locking instruction, the next step is executed.
[0063] S14: Obtain all the status data of the cargo door control commands through the data processing unit, generate the cargo door control command timing diagram according to the time dimension, and compare it with the expected control command timing value to evaluate whether the cargo door opening control timing and closing control timing are normal.
[0064] like Figure 4As shown, after confirming the correct timing of the control commands for the opening and closing of the cargo door, a fault injection test was performed on the cargo door control system. The test process included:
[0065] S21, an abnormal test of the opening control command is performed during the opening of the cargo door: During the opening of the cargo door, an invalid fault of the sub-door opening control command is injected through the fault injection module to obtain the door control command status data. Based on the data, a control command timing diagram is generated. The test result of whether the opening control command is abnormal is obtained by analyzing the control command timing diagram.
[0066] S22, Test the abnormality of the closing control command during the opening of the cargo door: During the opening of the cargo door, inject a valid fault of the sub-door closing control command through the fault injection module to obtain the door control command status data, generate a control command timing diagram based on the data, and obtain the test result of whether the closing control command is abnormal by analyzing the control command timing diagram;
[0067] S23, Test for abnormal opening control command during cargo door closing process: During cargo door closing process, inject a valid fault in the sub-door opening control command through the fault injection module to obtain the door control command status data, generate a control command timing diagram based on the data, and obtain the test result of whether the opening control command is abnormal by analyzing the control command timing diagram;
[0068] S24, Test the abnormality of the closing control command during the cargo door closing process: During the cargo door closing process, inject an invalid fault of the sub-door closing control command through the fault injection module, obtain the door control command status data, and generate a control command timing diagram based on the data. By analyzing the control command timing diagram, obtain the test result of whether the closing control command is abnormal.
[0069] S25, During the opening or closing of the cargo door, an abnormality test is performed on the electrical switch status of the opened or closed sub-door: During the opening or closing of the cargo door, an invalid fault of the electrical switch status of the opened or closed sub-door is injected through the fault injection module to obtain the door control command status data. Based on the data, a control command timing diagram is generated. By analyzing the control command timing diagram, the test result of whether the electrical switch status of the opened or closed sub-door is abnormal is obtained.
[0070] S26, During the opening or closing of the cargo door, an abnormality test is performed on the electrical switch status of the unopened or closed sub-door: During the opening or closing of the cargo door, a valid fault for the electrical switch status of the unopened or closed sub-door is injected through the fault injection module to obtain the door control command status data. Based on this data, a control command timing diagram is generated. By analyzing the control command timing diagram, the test result of whether the electrical switch status of the unopened or closed sub-door is abnormal is obtained.
[0071] For example, in this embodiment of the application, the cargo hatch opening process is performed by opening hatch 1, hatch 2, hatch 3, hatch 4, and hatch 5 in sequence, and the closing process is performed by closing hatch 5, hatch 4, hatch 3, hatch 2, and hatch 1 in sequence. The abnormal test of the opening control command of hatch 1 to 5 is completed in sequence according to the above test process, and the test process is as follows:
[0072] 1) Test for abnormal opening control command during cargo door opening: During the cargo door opening process, after the opening control command of hatch 1 is seen to be valid through the real-time monitoring interface of the data processing center, it is changed to invalid through the fault injection module, the stored hatch control command status data is exported, and a control command timing diagram is generated for analysis and judgment.
[0073] Following this testing procedure, complete the abnormal test of the opening control command of hatches 2 to 5 in sequence.
[0074] 2) Test for abnormal closing control command during cargo door closing: During the cargo door closing process, after the closing control command of door 5 is seen to be valid through the real-time monitoring interface of the data processing center, it is changed to invalid through the fault injection module, the stored door control command status data is exported, and a control command timing diagram is generated for analysis and judgment.
[0075] Following this test procedure, complete the abnormal test of the closing control command of hatch 4 to 1 in sequence.
[0076] 3) Test for abnormal control command during cargo door opening: During the cargo door opening process, after the data processing center real-time monitoring interface shows that the door 1 opening control command is valid, the fault injection module changes the door 1 closing control command to a valid state, exports the stored door control command status data, and generates a control command timing diagram for analysis and judgment.
[0077] Following this testing procedure, complete the abnormal test of the closing control command for doors 2 to 5 in sequence.
[0078] 4) Test for abnormal control command during cargo door closing: During the cargo door closing process, after the data processing center's real-time monitoring interface shows that the door 5 closing control command is valid, the fault injection module changes the door 5 opening control command to a valid state, exports the stored door control command status data, and generates a control command timing diagram for analysis and judgment.
[0079] Following this test procedure, complete the abnormal test of the opening control command of hatch 4 to 1 in sequence.
[0080] 5) Test for abnormal status of sub-door open or closed switch during cargo door opening or closing: During the cargo door opening process, after the data processing center real-time monitoring interface shows that the switch signal of door 1 is open to the position is valid and the control command of door 2 is valid, the fault injection module changes the switch signal of door 1 to the position of open to the position to the invalid state, exports the stored door control command status data, and generates a control command timing diagram for analysis and judgment.
[0081] Following this testing procedure, sequentially complete the abnormal signal tests of the power switches for doors 2-5 when they are fully open, and the abnormal signal tests of the power switches for doors 5-1 when they are fully closed during the closing process.
[0082] 6) Test for abnormal status of sub-door switch not opening or closing during cargo door opening or closing: During the cargo door opening process, if the data processing center real-time monitoring interface shows that the door 1 opening control command is valid and the door 1 opening position switch signal is invalid, the fault injection module changes the door 2 opening position switch signal to valid, exports the stored door control command status data, and generates a control command timing diagram for analysis and judgment.
[0083] Following this testing procedure, sequentially complete the abnormal signal tests of the power switches for doors 3-5 when they are fully open, and the abnormal signal tests of the power switches for doors 4-1 when they are fully closed during the closing process.
[0084] The fault injection test system for the cargo hold door control system of the transport aircraft proposed in this application has the following advantages:
[0085] 1) The timing verification of cargo door control commands can be completed during the verification phase of the cargo door control system, making upgrades and iterations relatively simple and shortening the testing cycle;
[0086] 2) Dynamic fault injection testing of the cargo door control system was carried out, and the control function of the cargo door control system under abnormal conditions was verified, thereby improving the system verification level.
[0087] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.
Claims
1. A fault injection test system for a cargo hold door control system of a transport aircraft, characterized in that, include: The test platform for the hatch control system is used to receive the hatch position switch excitation signal sent by the data processing unit to excite the hatch control system, and at the same time to collect the hatch control commands generated by the hatch control system. A physical model of the hatch system, which is used to receive hatch control command signals sent by the data processing unit and generate hatch position switch signals according to the commands; The data processing unit performs data cross-linking processing on the hatch control commands sent by the hatch control system test platform and the hatch position switch signals sent by the hatch system physical model. At the same time, it injects faults into the cross-linked data according to the fault mode, thereby realizing the timing verification and fault injection test of the hatch control commands of the hatch control system.
2. The fault injection test system for the cargo hold door control system of a transport aircraft as described in claim 1, characterized in that, The door control system test platform and the door system physical model are connected to the data processing unit via a reflective memory switch.
3. The fault injection test system for the cargo hold door control system of a transport aircraft as described in claim 2, characterized in that, The door control system test platform includes an exciter, a status acquisition device, and a door control system. The actuator is constructed according to the electrical interface (ICD) requirements of the hatch control system. It receives reflected memory network data and parses it according to the protocol ICD to output the excitation signal of the hatch control system. The status acquisition device is constructed according to the ICD (Integrated Device Diagram) requirements of the hatch control system. It acquires control command signals issued by the hatch control system and sends them to the reflective memory network in accordance with the ICD protocol.
4. The fault injection test system for the cargo hold door control system of a transport aircraft as described in claim 3, characterized in that, The physical model of the hatch system includes a control command receiving module, a hydraulic energy system model, a hatch load system model, and a hatch position status output module; The control command receiving module receives the control command signal forwarded by the data processing unit through the reflective memory network, parses it according to the ICD protocol, and sends the command to the hydraulic energy system model and the hatch load system model. The hydraulic energy system model is constructed based on the aircraft hydraulic system scheme. It controls the hydraulic system by receiving commands from the control command receiving module, and provides energy power for the operation of the cabin door system. The hatch load system model is constructed based on the sub-hatch composition, sub-hatch hydraulic system scheme, and sub-hatch motion structure of the cargo hatch. Each sub-hatch has a corresponding sub-hatch load model, which consists of a sub-hatch hydraulic load model, a sub-hatch dynamic load model, and a sub-hatch electric switch signal judgment module. It receives control commands in real time, calculates and outputs hatch position electric switch signals, and sends them to the hatch position status output module. The hatch position status output module receives the hatch position switch signal from the hatch load system model and sends it to the data processing unit through the reflective memory network according to the ICD protocol, thereby realizing the status feedback of the hatch system physical model.
5. The fault injection test system for the cargo hold door control system of a transport aircraft as described in claim 4, characterized in that, The data processing unit includes a data processing module, a fault injection module, and a real-time data monitoring module. The data processing module is responsible for parsing or packaging the cross-linked data between the door control system test platform and the door system physical model according to the ICD protocol, and is used to provide an interface for real-time data monitoring and fault injection. The fault injection module modifies and outputs all the interconnected data of the door control system test platform and the door system physical model through the interface provided by the data processing module, thereby realizing fault injection. The real-time data monitoring module obtains all the cross-linking data of the physical model of the test platform and the hatch system through the interface provided by the data processing module, so as to provide a real-time data monitoring interface for testers to analyze.
6. The fault injection test system for the cargo hold door control system of a transport aircraft as described in claim 5, characterized in that, The process of timing verification for the hatch control commands of the hatch control system is as follows: S11, initialize the physical model of the cargo door system according to the condition that all cargo doors are closed and locked, and after the data processing unit confirms that the airborne system under test has issued a door locking instruction, proceed to the next step; S12, the exciter of the hatch control system test platform sends out the cargo hatch opening excitation, and the hatch control system begins to issue the opening control commands of each sub-hatch door in sequence according to the design timing. After the data processing unit confirms that the hatch control system has issued the cargo hatch opening instruction, the next step is executed. S13, the exciter of the hatch control system test platform sends out the cargo hatch closing excitation, and the hatch control system begins to issue the closing control commands of each sub-hatch door in sequence according to the design timing. After the data processing unit confirms that the hatch control system has issued the cargo hatch locking instruction, the next step is executed. S14: Obtain all the status data of the cargo door control commands through the data processing unit, generate the cargo door control command timing diagram according to the time dimension, and compare it with the expected control command timing value to evaluate whether the cargo door opening control timing and closing control timing are normal.
7. The fault injection test system for the cargo hold door control system of a transport aircraft as described in claim 6, characterized in that, The process of injecting faults into the hatch control system is as follows: First, confirm that the timing of the control commands for opening and closing the cargo door is correct. After confirming the timing is correct, proceed with the following steps: S21, an abnormal test of the opening control command is performed during the opening of the cargo door: During the opening of the cargo door, an invalid fault of the sub-door opening control command is injected through the fault injection module to obtain the door control command status data. Based on the data, a control command timing diagram is generated. The test result of whether the opening control command is abnormal is obtained by analyzing the control command timing diagram. S22, Test the abnormality of the closing control command during the opening of the cargo door: During the opening of the cargo door, inject a valid fault of the sub-door closing control command through the fault injection module to obtain the door control command status data, generate a control command timing diagram based on the data, and obtain the test result of whether the closing control command is abnormal by analyzing the control command timing diagram; S23, Test for abnormal opening control command during cargo door closing process: During cargo door closing process, inject a valid fault in the sub-door opening control command through the fault injection module to obtain the door control command status data, generate a control command timing diagram based on the data, and obtain the test result of whether the opening control command is abnormal by analyzing the control command timing diagram; S24, Test the abnormality of the closing control command during the cargo door closing process: During the cargo door closing process, inject an invalid fault of the sub-door closing control command through the fault injection module, obtain the door control command status data, and generate a control command timing diagram based on the data. By analyzing the control command timing diagram, obtain the test result of whether the closing control command is abnormal. S25, During the opening or closing of the cargo door, an abnormality test is performed on the electrical switch status of the opened or closed sub-door: During the opening or closing of the cargo door, an invalid fault of the electrical switch status of the opened or closed sub-door is injected through the fault injection module to obtain the door control command status data. Based on the data, a control command timing diagram is generated. By analyzing the control command timing diagram, the test result of whether the electrical switch status of the opened or closed sub-door is abnormal is obtained. S26, During the opening or closing of the cargo door, an abnormality test is performed on the electrical switch status of the unopened or closed sub-door: During the opening or closing of the cargo door, a valid fault for the electrical switch status of the unopened or closed sub-door is injected through the fault injection module to obtain the door control command status data. Based on this data, a control command timing diagram is generated. By analyzing the control command timing diagram, the test result of whether the electrical switch status of the unopened or closed sub-door is abnormal is obtained.