Signal monitoring and voting method and system for dual-redundancy knob device of flight mode control panel (FMCP)
By employing a dual-redundant independent architecture and differential monitoring, the accuracy and stability issues of FMCP knob signal detection were resolved. This enabled real-time monitoring and fault isolation of the knob signal, reduced the false alarm rate, and ensured the continuity and reliability of the signal output.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- COMMERCIAL AIRCRAFT CORP OF CHINA LTD
- Filing Date
- 2026-01-22
- Publication Date
- 2026-04-17
AI Technical Summary
Existing technologies struggle to accurately detect whether the FMCP knob signal on the flight mode control panel is faulty, especially when signal characteristics change rapidly, which can easily lead to false alarms. Furthermore, it is difficult to achieve real-time output and fault isolation.
It adopts a dual-redundant independent architecture. The knob signal value and validity identifier are received by the FMCP knob signal monitor, and independent summation and difference comparison are performed. Combined with threshold monitoring, fault signal and restart signal are output, and the knob signal voter performs the voting output.
It improves the accuracy and reliability of signal monitoring, reduces the false alarm rate, ensures the stability and continuity of signal output, and adapts to rapid changes in knob signals.
Smart Images
Figure CN121879425A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of airborne equipment design for civil aircraft, and in particular to a method and system for signal monitoring and voting of a dual-redundant rotary knob device for a flight mode control panel (FMCP). Background Technology
[0002] In order to lift restrictions on the use of FMCP at low altitudes, meet the crew's demand for early use of automatic flight functions, and meet the development needs of CAT IIIa automatic landing functions, it is necessary to improve the integrity of FMCP signals.
[0003] Regarding redundancy signal voting algorithms, engineering practices often employ simple and practical methods such as median voting, arithmetic mean voting, and majority consensus voting. For knob signals, clockwise rotation outputs positive values and counter-clockwise rotation outputs negative values. Furthermore, the voting algorithm must output signals in real-time, allowing the pilot to perceive changes in the current target value. Therefore, a complete voting scheme needs to be designed to output the FMCP knob signal.
[0004] For dual-redundant signals, the consistency of the signals is often determined by subtracting the redundant signals, which in turn determines whether a fault has occurred. However, this method is difficult to accurately isolate the fault. Furthermore, due to the characteristics of FMCP knob signals, which involve rapid rotation and time delay, this method can easily generate false alarms. Therefore, a comprehensive monitoring solution is needed to detect faults in FMCP knob signals. Summary of the Invention
[0005] This summary is provided to introduce, in a simplified form, some concepts that will be further described in the following detailed description. This summary is not intended to identify key or essential features of the claimed subject matter, nor is it intended to help determine the scope of the claimed subject matter.
[0006] The present invention aims to provide a method and system for signal monitoring and voting of the FMCP dual-redundant knob device on a flight mode control panel.
[0007] According to one aspect of the present invention, a method for signal monitoring and voting of a dual-redundant rotary knob device of a flight mode control panel (FMCP) is provided. The method may include: receiving rotary knob signal values from different channels and validity identifiers of the rotary knob signal values by an FMCP knob signal monitor; during a knob movement cycle, the FMCP knob signal monitor independently summing the rotary knob signal values of each of the different channels based on the received rotary knob signal values from the different channels and the validity identifiers to obtain a sum of rotary knob signal values for each channel, and comparing and monitoring the sums of the rotary knob signal values from the different channels by subtracting them; if the absolute value of the difference in the sums exceeds a threshold, outputting an FMCP knob fault signal and an FMCP restart signal; and an FMCP knob signal voter voting to output FMCP knob signal values and the validity identifiers of the FMCP knob signal values based on the rotary knob signal values from the different channels, the validity identifiers of the rotary knob signal values, and the FMCP knob fault signal.
[0008] According to one embodiment of the present invention, the FMCP knob fault signal may include one of the following: a single fault signal, a permanent fault signal, and a fault latch signal, wherein the method may further include: counting the number of times the absolute value of the difference between the sums exceeds a threshold and the number of FMCP restart signals; in response to the number of times the absolute value of the difference between the sums exceeds the threshold exceeding an upper limit, outputting a permanent fault signal, and the FMCP being in a restartable state; and in response to the number of times the FMCP restart signal exceeds the upper limit of the number of restarts, outputting a fault latch signal, and the FMCP no longer restarting.
[0009] According to one embodiment of the present invention, the process of independently summing the knob signal values of each of the different channels to obtain the sum of the knob signal values of each channel may further include: determining the start of a summation period when all the knob signal values of all channels are valid and a non-zero value is detected in any channel; and determining the end of a summation period when all the knob signal values of all channels are valid and a continuous M-times knob signal value of 0 is detected in any channel.
[0010] According to one embodiment of the present invention, the comparative monitoring by subtracting the sums of the rotation signal values of the different channels may further include: calculating the sum of the knob signal values in each channel respectively, calculating the absolute value of the difference between the sums of the different channels, and comparing the absolute value of the difference with the threshold, wherein the threshold is based on the maximum value among the sums of all channels.
[0011] According to one embodiment of the present invention, the FMCP knob signal monitor is not output in real time, while the FMCP knob signal voter is output in real time.
[0012] According to one embodiment of the present invention, the voting output of the FMCP knob signal value and the validity identifier of the FMCP knob signal value based on the knob signal values of the different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal may further include: when all channel knob signal values are valid and no FMCP knob fault signal is received, when the knob signal values of the different channels have the same sign or the knob signal value of any channel is 0, the average value of all channel knob signal values rounded up is output as the voting value of the FMCP knob signal value, and the validity identifier of the FMCP knob signal value is set to valid; or when the knob signal values of the different channels have different signs, a safety value is output as the voting value of the FMCP knob signal value, and the validity identifier of the FMCP knob signal value is set to valid.
[0013] According to one embodiment of the present invention, the voting output of the FMCP knob signal value and the validity identifier of the FMCP knob signal value by the FMCP knob signal voter based on the knob signal values of the different channels, the validity identifier of the knob signal value and the FMCP knob fault signal may further include: when all channel knob signal values are valid and the FMCP knob fault signal is received, outputting a safety value as the voting value of the FMCP knob signal value, and setting the validity identifier of the FMCP knob signal value to invalid.
[0014] According to one embodiment of the present invention, the voting output of the FMCP knob signal value and the validity identifier of the FMCP knob signal value by the FMCP knob signal voter based on the knob signal values of the different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal may further include: if the knob signal value of one of all channels is invalid and no FMCP knob fault signal is received, outputting the knob signal values identified as valid in all channels as the voting value of the FMCP knob signal value, and setting the validity identifier of the FMCP knob signal value to valid; and if the knob signal value of one of all channels is invalid and the FMCP knob fault signal is received, outputting a safety value as the voting value of the FMCP knob signal value, and setting the validity identifier of the FMCP knob signal value to invalid.
[0015] According to one embodiment of the present invention, the voting output of the FMCP knob signal value and the validity identifier of the FMCP knob signal value based on the knob signal values of the different channels, the validity identifier of the knob signal value and the FMCP knob fault signal may further include: if the knob signal value in all channels is invalid, outputting a safety value as the voting value of the FMCP knob signal value, and setting the validity identifier of the FMCP knob signal value to invalid.
[0016] According to another aspect of the present invention, a system for monitoring and voting on the signal of a dual-redundant rotary knob device of a flight mode control panel (FMCP) is provided. The system may include: an FMCP knob signal monitor configured to: receive knob signal values from different channels and validity indicators of the knob signal values; during a knob movement cycle, independently summing the knob signal values of each of the different channels based on the received knob signal values from the different channels and the validity indicators to obtain a sum of knob signal values for each channel, and comparing and monitoring by subtracting the sums of the rotation signal values from the different channels; outputting an FMCP knob fault signal and an FMCP restart signal if the absolute value of the difference in the sums exceeds a threshold; and an FMCP knob signal voter configured to: vote on and output the FMCP knob signal values and the validity indicators of the FMCP knob signal values based on the knob signal values from the different channels, the validity indicators of the knob signal values, and the FMCP knob fault signal.
[0017] Compared with existing solutions, the method and system for signal monitoring and voting of the FMCP dual-redundant knob device on a flight mode control panel provided by the present invention have at least the following advantages: 1. Dual-redundant independent architecture ensures reliability: Dual-channel independent detection, transmission and upstream voting, combined with the FMCP downstream dual-layer monitoring and voting mechanism, greatly reduces the risk of signal failure caused by single-channel failure.
[0018] 2. Improved adaptability through interpolation monitoring: Based on the comparison of signal and value differences during the knob's motion cycle, and combined with a sum-driven one-dimensional interpolation threshold, signal characteristics can be dynamically matched, and non-real-time monitoring balances accuracy and false alarm rate control.
[0019] 3. Intelligent voting output ensures continuity: During the summation period, the voting strategy is adapted based on the channel signal symbol. When the signal is different, the historical effective value is used to avoid signal jumps and ensure output stability.
[0020] These and other features and advantages will become apparent from the following detailed description and with reference to the accompanying drawings. It should be understood that the foregoing general description and the following detailed description are illustrative only and do not limit the scope of the claims. Attached Figure Description
[0021] To gain a more detailed understanding of the manner in which the features of the present invention are described above, reference can be made to various embodiments to provide a more specific description of the above-briefly summarized aspects, some of which are illustrated in the accompanying drawings. However, it should be noted that the drawings illustrate only certain typical aspects of the invention and should not be considered as limiting its scope, as this description may allow for other equivalent and effective aspects.
[0022] Figure 1 This is a schematic diagram of a method for signal monitoring and voting of a dual-redundant knob device for a flight mode control panel (FMCP) according to one aspect of the present invention.
[0023] Figure 2 This is a schematic diagram of the FMCP knob signal processing framework according to an embodiment of the present invention.
[0024] Figure 3 This is a schematic diagram of the FMCP knob signal monitoring and voting processing steps according to an embodiment of the present invention.
[0025] Figure 4 This is a flowchart of the FMCP knob signal monitoring and voting process according to an embodiment of the present invention.
[0026] Figure 5 This is a schematic diagram of a system for monitoring and voting signals of a dual-redundant rotary knob device for a flight mode control panel according to another aspect of the present invention. Detailed Implementation
[0027] The present invention will now be described in detail with reference to the accompanying drawings, and its features will become further apparent in the following specific description.
[0028] Figure 1 A schematic diagram illustrating a method 100 for signal monitoring and voting of a dual-redundant rotary knob device for a flight mode control panel according to one aspect of the present invention is provided. Figure 1As shown, the method 100 for monitoring and voting signals of the dual-redundant knob device in the Flight Mode Control Panel (FMCP) may include step 102, whereby the FMCP knob signal monitor receives knob signal values from different channels and the validity indicators of those knob signal values. Specifically, the dual-redundant (channel A and channel B) within the FMCP hardware independently detects, processes, and transmits signals. In one embodiment of the invention, the channel A signal is transmitted to actuator control electronics ACE 1 and ACE 2, and upstream monitoring and voting are performed within the FMCP to output the channel A knob signal value and its validity. The channel B signal is transmitted to actuator control electronics ACE 3 and ACE 4, and upstream monitoring and voting are performed within the FMCP to output the channel B knob signal value and its validity. The FMCP knob signal monitor can receive the channel A knob signal value and a value indicating the validity of the channel A knob signal from FMCP channel A, and can receive the channel B knob signal value and a value indicating the validity of the channel B signal from FMCP channel B.
[0029] The method 100 for monitoring and voting on the FMCP dual-redundant knob device signal of the flight mode control panel may include step 104: During the knob movement cycle, the FMCP knob signal monitor independently sums the knob signal values of each channel based on the received knob signal values and validity identifiers from different channels to obtain the sum of the knob signal values of each channel, and compares and monitors the sums by subtracting the sums of the rotation signal values of different channels. The FMCP knob signal monitor is not a real-time output. During the knob movement cycle of the dual-channel knob signal, the FMCP knob signal monitor independently sums the knob signal values of different channels and compares and monitors the sums by subtracting the sums. In one embodiment of the invention, the summation cycle for the knob signal values of channels A and B begins when either channel A or B has a non-zero value; the summation cycle for the knob signal values of channels A and B ends when either channel A or B is zero for M consecutive frames. In one embodiment of this application, the FMCP knob signal monitor can calculate the sum of the knob signal values in each channel, and can calculate the absolute value of the difference between the sums of different channels, and compare the absolute value of the difference with a threshold. This threshold can be based on the maximum value among the sums of all channels. Specifically, the larger of the absolute values of the sums of the knob signals in channel A and channel B can be taken and input into a one-dimensional interpolation table to obtain the threshold. Assuming SA is the sum of the knob signal counts in channel A and SB is the sum of the knob signal counts in channel B, the absolute values of SA and SB are calculated, and the larger value is selected as the input variable of the one-dimensional interpolation table, denoted as Smax. The one-dimensional interpolation table is pre-fixed in the system, storing discrete correspondences between "absolute value of signal sum - monitoring threshold" (based on experimental calibration, satisfying the positive correlation characteristic of "the larger the sum, the larger the threshold"), thus obtaining the final threshold.
[0030] The method 100 for monitoring and voting on the FMCP dual-redundancy knob device signal of the flight mode control panel may include step 106, whereby, if the absolute value of the difference between the sums exceeds a threshold, an FMCP knob fault signal and an FMCP restart signal are output. The FMCP knob fault signal may include: a single fault signal, a permanent fault signal, and a fault latch signal. When the absolute value of the difference between the sums exceeds the threshold, the output FMCP knob fault signal is a single fault signal, indicating a single FMCP fault. In one embodiment of the invention, the number of times the absolute value of the difference between the sums exceeds the threshold can be counted, and it can be determined whether the count exceeds an upper limit. If it exceeds the upper limit, the output FMCP knob fault signal is a permanent fault signal. At this time, the FMCP is indicated as permanently faulty, but is still in a restartable state. In another embodiment of the invention, the number of times the output FMCP restart signal is counted can also be counted. When the output FMCP restart signal exceeds the upper limit of the restart count, the FMCP knob signal monitor will stop outputting the FMCP restart signal. At this time, the FMCP is no longer allowed to be restarted, but is fault latched, and the fault information will be recorded and stored.
[0031] The method 100 for monitoring and voting on the FMCP dual-redundant knob device signal of the flight mode control panel may include step 108, in which the FMCP knob signal voter votes on the output of the FMCP knob signal value and the validity identifier of the FMCP knob signal value based on the knob signal value of different channels, the validity identifier of the knob signal value and the FMCP knob fault signal. In one embodiment of the present invention, the voting output of the FMCP knob signal value and the validity identifier of the FMCP knob signal value based on the knob signal values of different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal further includes: when all channel knob signal values are valid and no FMCP knob fault signal is received, when the knob signal values of different channels have the same sign or the knob signal value of any channel is 0, the average value of all channel knob signal values rounded up is output as the voting value of the FMCP knob signal value, and the validity identifier of the FMCP knob signal value is set to valid; or when the knob signal values of different channels have different signs, a safety value (e.g., 0) is output as the voting value of the FMCP knob signal value, and the validity identifier of the FMCP knob signal value is set to valid.
[0032] In another embodiment of the present invention, the voting output of the FMCP knob signal value and the validity identifier of the FMCP knob signal value based on the knob signal values of different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal further includes: when all channel knob signal values are valid and an FMCP knob fault signal is received, outputting a safe value as the voting value of the FMCP knob signal value, and setting the validity identifier of the FMCP knob signal value to invalid.
[0033] In yet another embodiment of the present invention, the voting output of the FMCP knob signal value and the validity identifier of the FMCP knob signal value based on the knob signal value of different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal further includes: when the knob signal value of one of all channels is invalid and no FMCP knob fault signal is received, outputting the knob signal values identified as valid in all channels as the voting value of the FMCP knob signal value, and setting the validity identifier of the FMCP knob signal value to valid; and when the knob signal value of one of all channels is invalid and an FMCP knob fault signal is received, outputting a safe value as the voting value of the FMCP knob signal value, and setting the validity identifier of the FMCP knob signal value to invalid.
[0034] In yet another embodiment of the present invention, the voting output of the FMCP knob signal value and the validity identifier of the FMCP knob signal value based on the knob signal values of different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal further includes: in the case that the knob signal value in all channels is invalid, outputting a safety value as the voting value of the FMCP knob signal value, and setting the validity identifier of the FMCP knob signal value to invalid.
[0035] Figure 2 The FMCP knob signal processing framework diagram 200 according to an embodiment of the present invention is explained. Figure 2As shown, the automatic flight control system receives FMCP button status signals and knob selection signals. The FMCP button status signals are used for flight mode operation control functions; the FMCP knob selection signals are converted into reference values set by the pilot, used to calculate target values for control law calculations and display on the PFD. The automatic flight control system FMCP knob signal data processing module receives FMCP knob signal values transmitted through channel A, the validity of FMCP knob signals transmitted through channel A, FMCP knob signal values transmitted through channel B, the validity of FMCP knob signals transmitted through channel B, and fault latch reset signals output by the maintenance system. Based on the input signals, the automatic flight control system FMCP knob signal data processing module performs dual-redundancy monitoring and voting, selecting output FMCP knob signals for target value calculation, outputting an FMCP hardware restart signal for FMCP hardware restart, and simultaneously outputting a fault latch signal for ground maintenance.
[0036] Figure 3 A schematic diagram illustrating the FMCP knob signal monitoring voting processing step 300 according to an embodiment of the present invention is provided. Figure 3As shown, a method for monitoring and voting on knob signals of a civil aircraft flight mode control panel may include: comparing and monitoring knob signals of channels A and B, latching faults in knob signals of channels A and B, and outputting voting results for knob signals of channels A and B. The FMCP knob signal monitoring and voting processing step 300 may include: receiving the knob signals of channels A and B of the FMCP and their validity at step 302; receiving the original knob signals of channels A and B in the FMCP hardware; and simultaneously obtaining the validity identifiers of these two channel signals, which can be used to subsequently determine whether the signals are reliable; performing upstream monitoring and voting on the knob signals of channels A and B of the FMCP at step 304; within the FMCP, independently performing upstream monitoring on the knob signals of channels A and B to verify the integrity and rationality of the signals, and outputting "verified A-channel knob signal value and validity" and "verified B-channel knob signal value and validity" through voting logic; and outputting the knob signal values and validity of channels A and B of the FMCP at step 306; specifically, outputting the voting results of the upstream monitoring and voting... The output results in the preliminary verification of independent signals and validity information for the A and B dual channels. Downstream knob signal comparison monitoring of the FMCP dual-channel device is performed at 308. Based on the verified knob signal values and validity of the A and B dual channels, downstream monitoring between the A and B channels is conducted within the FMP. After knob signal comparison monitoring at 310, fault determination and latching of the knob signals are performed based on the monitoring results. Specifically, based on the downstream channel comparison monitoring results, it is determined whether a fault exists in the knob signal (e.g., inconsistency between dual-channel signals, exceeding threshold, etc.), and the fault status is latched and recorded. Finally, at 312, the FMCP knob signal and validity are voted on and output. This involves combining the fault determination results to perform a final vote on the signals of the A and B dual channels, outputting usable FMCP knob signal values and validity for use by downstream equipment.
[0037] Figure 4 A flowchart 400 for monitoring and voting the FMCP knob signal according to an embodiment of the present invention has been explained. Figure 4As shown, the FMCP knob signal monitoring and voting flowchart 400 begins at 402. At 404, the counter is cleared and the latch is cleared. At 406, the knob signals of channels A and B and their validity are read. At 408, it is determined whether both channels A and B are valid. If neither channel A nor B is valid, the process proceeds to 424 to determine whether only channel A or channel B is valid. If both channels A and B are invalid, the process proceeds to 426, where the FMCP knob signal voting device outputs a safe value (e.g., 0), and the process ends at 440. If either channel A or channel B is valid, the process proceeds to 428, where the FMCP knob signal voting device outputs the signal value of the valid channel, and the process ends at 440. If both channels A and B are valid, the process proceeds to 410 to determine if the signal value of channel A or B is not 0. If the signal value of channel A or B is not 0, the process proceeds to... 412 Start summing the knob signal values of channels A and B. Then proceed to 414 to determine if the signal value of channel A or B is not 0 for M consecutive beats. If the condition is met, return to 412 to continue summing the knob signal values of channels A and B. If the condition is not met, proceed to 416 to stop summing the knob signals of channels A and B and calculate the difference between the sums. Then proceed to 418 to determine if the difference exceeds a threshold. If the difference exceeds the threshold, proceed to 420 to determine a fault and count the number of times the difference exceeds the threshold. Then continue to 422 to restart the FMCP hardware and increment the FMCP hardware restart count by 1. At 436, determine if the number of FMCP hardware restarts exceeds N (for example, N is 5). If the number of FMCP hardware restarts exceeds N, proceed to 438 to latch the FMCP fault. The FMCP knob signal voter outputs the voting value of the previous beat. Then the process ends at 440. If the difference does not exceed the threshold when checking at 418, the process proceeds to 430 to check if the inputs of channels A and B have opposite signs. If the inputs of channels A and B have the same sign or one of the inputs of channels A and B is 0, the process proceeds to 432, the FMCP knob signal voter outputs the average value of channels A and B, the value is rounded up, and then the process proceeds to 440 to end. If the inputs of channels A and B have opposite signs, the process proceeds to 434, the FMCP knob signal voter outputs a safe value, and then the process proceeds to 440 to end.
[0038] Figure 5 A schematic diagram of a system 500 for monitoring and voting signals of a dual-redundant rotary knob device for a flight mode control panel according to another aspect of the present invention is provided. Figure 5As shown, a system 500 for monitoring and voting signals of a dual-redundant rotary knob device for a flight mode control panel (FMCP) may include: an FMCP knob signal monitor 502, which may be configured to: receive knob signal values and validity identifiers of knob signal values from different channels; during a knob movement cycle, independently sum the knob signal values of each channel based on the received knob signal values and validity identifiers to obtain the sum of knob signal values for each channel, and compare and monitor the sums of the rotation signal values of different channels by subtracting them; if the absolute value of the difference exceeds a threshold, output an FMCP knob fault signal and an FMCP restart signal; and an FMCP knob signal voter 504, which may be configured to: vote and output FMCP knob signal values and validity identifiers based on the knob signal values of different channels, the validity identifiers of knob signal values, and the FMCP knob fault signal. In one embodiment of the present invention, the FMCP knob signal monitor 502 is a non-real-time output, while the FMCP knob signal voter 504 is a real-time output. The FMCP knob signal monitor 502 achieves non-real-time monitoring based on the signal sum and difference comparison during the knob movement cycle, eliminating the need for sequential judgment of each knob signal. On one hand, it converts discretely sampled signals into cumulative sums within a period for monitoring, filtering out occasional fluctuations in single-cycle signals and preventing accidental fault restarts due to instantaneous fluctuations. On the other hand, the non-real-time periodic processing significantly reduces the frequency of FCMP operations, freeing up hardware computing power for real-time operations of the FMCP knob signal voter 504, making it particularly suitable for scenarios with stringent requirements for computing power allocation, such as aerospace and industrial control. Simultaneously, based on the threshold of one-dimensional interpolation of the sum, it can accurately match the monitoring needs under different knob movement intensities, further improving the reliability of non-real-time monitoring. The FMCP knob signal voting unit 504 employs a real-time output strategy, adaptively voting based on the A / B channel signal symbols during the counting and summing process. This real-time processing method ensures that downstream execution units such as ACE 1-ACE 4 continuously receive stable and uninterrupted knob command signals, avoiding command interruptions caused by monitoring cycle delays. This meets the core requirements of low latency and high continuity of signal output in scenarios such as flight control and precision equipment operation. Simultaneously, the decoupling design of real-time voting and non-real-time monitoring allows the voting output to be unconstrained by the monitoring cycle, balancing the real-time nature of command execution with the accuracy of fault diagnosis.
[0039] The foregoing description includes examples of various aspects of the claimed subject matter. It is certainly impossible to describe every conceivable combination of components or methods for the purpose of depicting the claimed subject matter, but those skilled in the art will recognize that many further combinations and arrangements of the claimed subject matter are possible. Thus, the disclosed subject matter is intended to cover all such changes, modifications, and variations that fall within the spirit and scope of the appended claims.
Claims
1. A method for signal monitoring and voting of a dual-redundant rotary knob device for a flight mode control panel FMCP, characterized in that, The method includes: The FMCP knob signal monitor receives knob signal values from different channels and validity indicators of the knob signal values; During the knob movement cycle, the FMCP knob signal monitor independently sums the knob signal values of each channel based on the received knob signal values of the different channels and the validity identifier to obtain the sum of the knob signal values of each channel, and compares and monitors the sums of the rotation signal values of the different channels by subtracting them. If the absolute value of the difference between the sums exceeds a threshold, an FMCP knob fault signal and an FMCP restart signal are output; and The FMCP knob signal voter outputs the FMCP knob signal value and the validity identifier of the FMCP knob signal value based on the knob signal value of the different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal.
2. The signal monitoring voting method as described in claim 1, characterized in that, The FMCP knob fault signal includes one of the following: a single fault signal, a permanent fault signal, and a fault latch signal, wherein the method further includes: counting the number of times the absolute value of the difference between the sums exceeds a threshold and the number of FMCP restart signals; in response to the number of times the absolute value of the difference between the sums exceeds the threshold exceeding an upper limit, outputting a permanent fault signal, and the FMCP is in a restartable state; and in response to the number of FMCP restart signals exceeding the upper limit of the number of restarts, outputting a fault latch signal, and the FMCP no longer restarts.
3. The signal monitoring voting method as described in claim 1, characterized in that, The process of independently summing the knob signal values of each of the different channels to obtain the sum of the knob signal values of each channel further includes: The summation cycle begins when all channel knob signal values are valid and a non-zero value is detected in any channel knob signal value; and The summation cycle ends when all channel knob signal values are valid and a continuous M-beat knob signal value of 0 is detected in any channel.
4. The signal monitoring voting method as described in claim 1, characterized in that, Monitoring by comparing the sum and difference of the rotation signal values from the different channels further includes: The sum of the knob signal values in each channel is calculated separately, the absolute value of the difference between the sums of different channels is calculated, and the absolute value of the difference is compared with the threshold, wherein the threshold is based on the maximum value of the sums of all channels.
5. The signal monitoring voting method as described in claim 1, characterized in that, The FMCP knob signal monitor is not a real-time output device, while the FMCP knob signal voter is a real-time output device.
6. The signal monitoring voting method as described in claim 1, characterized in that, The FMCP knob signal voter outputs the FMCP knob signal value based on the knob signal values of the different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal. The validity identifier of the FMCP signal value further includes: If all channel knob signal values are valid and no FMCP knob fault signal is received. When the knob signal values of different channels have the same sign or the knob signal value of any channel is 0, the average value of all knob signal values rounded up is output as the voting value of the FMCP knob signal value, and the validity flag of the FMCP knob signal value is set to valid; or When the knob signal values of different channels have different signs, the safety value output is used as the voting value of the FMCP knob signal value, and the validity flag of the FMCP knob signal value is set to valid.
7. The signal monitoring voting method as described in claim 1, characterized in that, The FMCP knob signal voter outputs the FMCP knob signal value based on the knob signal values of the different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal. The validity identifier of the FMCP signal value further includes: If all channel knob signal values are valid and a fault signal is received from the FMCP knob, the safety value is output as the voting value of the FMCP knob signal value, and the validity flag of the FMCP knob signal value is set to invalid.
8. The signal monitoring voting method as described in claim 1, characterized in that, The FMCP knob signal voter outputs the FMCP knob signal value based on the knob signal values of the different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal. The validity identifier of the FMCP signal value further includes: If the knob signal value of one of all channels is invalid and no FMCP knob fault signal is received, output the valid knob signal values of all channels as the voting value of the FMCP knob signal value, and set the validity flag of the FMCP knob signal value to valid; and If the knob signal value of one of the channels is invalid and a fault signal of the FMCP knob is received, a safety value is output as the voting value of the FMCP knob signal value, and the validity flag of the FMCP knob signal value is set to invalid.
9. The signal monitoring voting method as described in claim 1, characterized in that, The FMCP knob signal voter outputs the FMCP knob signal value based on the knob signal values of the different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal. The validity identifier of the FMCP signal value further includes: If the knob signal value is invalid in all channels, the safety value output is used as the voting value of the FMCP knob signal value, and the validity flag of the FMCP knob signal value is set to invalid.
10. A system for monitoring and voting on the signal of a dual-redundant rotary knob device for a flight mode control panel (FMCP), characterized in that, The system includes: FMCP knob signal monitor, the FMCP knob signal monitor being configured to: Receive knob signal values from different channels and the validity indicators of the knob signal values; During the knob movement cycle, the knob signal values of each channel in the different channels are independently summed based on the received knob signal values of the different channels and the validity identifier to obtain the sum of the knob signal values of each channel, and the difference between the sums of the rotation signal values of the different channels is used for comparison and monitoring. If the absolute value of the difference between the sums exceeds a threshold, an FMCP knob fault signal and an FMCP restart signal are output; and FMCP knob signal voting device, wherein the FMCP knob signal monitor is configured to: The FMCP knob signal value and the validity identifier of the FMCP knob signal value are voted on based on the knob signal value of the different channels, the validity identifier of the knob signal value, and the FMCP knob fault signal.