A function reconstruction-based redundancy management method, device and equipment for an all-electric landing gear and a storage medium

Abstract

This application discloses a method, apparatus, device, and storage medium for all-electric landing gear redundancy management based on functional reconfiguration, relating to the field of aircraft technology. The method includes: defining all-electric landing gear hardware modules as resource units; constructing a system topology diagram based on connection relationships and data flow; determining the top-level functions; setting path start and end point constraints; enumerating candidate resource units and their combined paths using a backtracking algorithm; generating a functional resource mapping table by priority sorting; identifying function execution instructions using a control module; reading the corresponding candidate resource group list based on the current health status; and setting all resource units in the list as target resource groups if all resource units in the list are healthy. The control module then collaboratively executes function execution instructions based on the resource units in the target resource group, thereby improving the efficiency of all-electric landing gear redundancy management.

Description

Technical Field

[0001] This invention relates to the field of aircraft technology, and in particular to a method, apparatus, device, and storage medium for all-electric landing gear redundancy management based on functional reconfiguration. Background Technology

[0002] Currently, all-electric landing gear systems are a key technology in the development of modern aircraft. They use electrical signals and actuations to replace traditional hydraulic drives and cylinder transmissions, enabling landing gear retraction and extension, braking, and nose wheel steering functions. They offer advantages such as light weight, easy maintenance, and ease of integration. To improve system reliability, existing medium and large aircraft all-electric landing gear systems generally adopt an electrical dual-redundancy design. This typically includes a dual-redundancy controller (with dual power supply, communication, control, and drive modules) and multiple dual-redundancy actuators (such as the nose wheel control actuator, landing gear retraction / extension actuator, and brake actuator; the core motor module is also dual-redundant).

[0003] The current mainstream redundancy management strategy is "primary / backup channel switching," which simply divides all dual-redundancy modules into two independent channels: the primary channel and the backup channel. When the system is normal, the primary channel operates; however, if any node in the primary channel (such as the power supply, control module, or even the motor of an actuator within the primary channel) fails, the entire system switches to the backup channel. This "one-size-fits-all" switching logic has significant resource waste and reliability issues, specifically: 1. Fault propagation: A single point of failure in a non-critical component can render the entire primary channel unusable, wasting all other healthy modules in that channel. 2. System vulnerability: If both motors in the primary and backup channels of the nose wheel control actuator fail, both channels will completely fail, paralyzing the system. However, landing gear retraction and braking functions will still be operational. 3. Suboptimal reliability: This coarse-grained management approach cannot fully utilize the system's inherent redundancy resources and cannot maximize the maintenance of core flight safety functions under multiple failures.

[0004] As can be seen from the above, how to improve the efficiency of managing the redundancy of all-electric landing gear in the process of redundancy management based on functional reconfiguration is an urgent problem to be solved. Summary of the Invention

[0005] In view of this, the purpose of this invention is to provide a method, apparatus, device, and storage medium for all-electric landing gear redundancy management based on functional reconfiguration, which can improve the efficiency of managing all-electric landing gear redundancy during the functional reconfiguration-based all-electric landing gear redundancy management process. The specific solution is as follows: Firstly, this application provides a method for managing the redundancy of all-electric landing gear based on functional reconfiguration, including: Each hardware module in the all-electric landing gear system is defined as a corresponding resource unit, and a system topology diagram including node type and directed connection edge is determined based on the physical connection relationship and data flow between the resource units. The target top-level function is determined, then the path start constraint and path end constraint are set, and then the backtracking algorithm is used to enumerate candidate resource units and corresponding candidate resource unit combination paths based on the system topology graph, the path start constraint and the path end constraint. The candidate resource units are sorted in descending order of priority to obtain a corresponding list of candidate resource groups, and a functional resource mapping table is generated based on the list of candidate resource groups and the combination path of the candidate resource units. The control module identifies the top-level function corresponding to the function execution instruction, then reads the candidate resource group list corresponding to the top-level function based on the current health status information, and checks whether all resource units in each candidate resource group list are in a healthy state. If all are in a healthy state, the candidate resource group list is set as the target resource group, so that the control module and each resource unit in the target resource group can collaboratively execute the function execution instruction.

[0006] Optionally, defining each hardware module in the all-electric landing gear system as a corresponding resource unit, and determining a system topology graph including node types and directed connection edges based on the physical connection relationships and data flow directions between the resource units, includes: Each hardware module in the all-electric landing gear system is defined as a corresponding resource unit; each hardware module has independent functions and can be monitored individually; each hardware module includes a control module, a power supply module, a communication module, a drive module, and a motor module. Each resource unit is assigned a corresponding logical identifier and functional classification type to determine the physical connection relationship and data flow direction between each resource unit based on the logical identifier and the functional classification type, and to construct a system topology graph including node type and directed connection edge based on the physical connection relationship and the data flow direction.

[0007] Optionally, the construction of a system topology graph, including node types and directed connection edges, based on the physical connection relationships and the data flow direction includes: The node type is determined based on the physical connection relationship; the node type includes entry node, computing and decision node, driving node, execution node, and energy node; The communication module is set as the entry node, the power supply module is set as the energy node, the control module is set as the computing decision node, the drive module is set as the drive node, and the motor module is set as the execution node. Based on the data flow direction, a directed connection edge is constructed to define the power binding relationship between each energy node and other nodes within the power supply range, and to define the bidirectional data synchronization connection between the control modules located in different channels, so as to construct a system topology based on the node type and the directed connection edge. In the system topology diagram, the communication module located in the same channel only transmits data to the control module in the same channel; the control module only transmits data to the drive module in the same channel; and the drive module only transmits data to the motor module in the same channel.

[0008] Optionally, the step of determining the target top-level function, then setting path start constraints and path end constraints, and then using a backtracking algorithm based on the system topology graph, the path start constraints, and the path end constraints to enumerate candidate resource units and corresponding candidate resource unit combination paths includes: The top-level functions of each objective are determined, and then path start constraints and path end constraints are set; the path start constraints include a first entry module and a second entry module; the path end constraints are to use the execution module to drive the first actuator, the second actuator, and the third actuator. The execution logic corresponding to the target top-level function is determined; wherein, the execution logic includes a unidirectional data flow from the entry module to the control module, a unidirectional data flow from the control module to the drive module, and a unidirectional data flow from the drive module to the execution module in the same channel; the data between the control modules in the two channels is synchronized bidirectionally, and the power supply module of each channel only supplies power to all modules in the same channel; The candidate resource units that satisfy the path start constraint and the path end constraint are enumerated using a backtracking algorithm and a depth-first search, along with the corresponding candidate resource unit combination paths. Then, each power module is bound to all the communication modules, control modules, drive modules, and motor modules within the channel. The candidate resource unit combination paths include single-channel paths, cross-channel paths, and hybrid drive paths.

[0009] Optionally, the step of enumerating candidate resource units and corresponding candidate resource unit combination paths using a backtracking algorithm based on the system topology graph, the path start constraint, and the path end constraint includes: The communication module that satisfies the path starting point constraint is set as the path search starting point, and the path is extended based on the directed connection edge corresponding to the data flow direction. The power supply module is added to the path extension result to obtain the power supply module addition result. Based on the power binding relationship, check whether the power module corresponding to the power module addition result has been included in the current candidate resource unit combination path. If the power module is not included in the current candidate resource unit combination path, then force the power module to be set as a preceding dependent node to be added to the path. Determine whether the set of motor modules in the current candidate resource unit combination path satisfies the endpoint Boolean expression defined by the path endpoint constraint. If it does, set each resource unit combination corresponding to the current candidate resource unit combination path as a candidate resource unit.

[0010] Optionally, the step of sorting the candidate resource units according to their priority from high to low to obtain a corresponding candidate resource group list includes: The control module corresponding to each candidate resource unit is determined, and the priority of the candidate resource unit corresponding to the main control module that meets the preset main control conditions is set to be higher than that of the candidate resource unit corresponding to the backup control module that meets the preset backup control conditions, so as to obtain the corresponding first priority allocation result. The priority of resource units belonging to the same physical channel in each candidate resource unit is set to be higher than the priority of resource units that do not belong to the same physical channel, and the corresponding second priority allocation result is obtained. The number of resource units in the candidate resource group of each candidate resource unit is determined, and each candidate resource unit is allocated based on the number of resource units to obtain the corresponding third priority allocation result; the numerical value of the number of resource units is negatively correlated with the priority level. A candidate resource group list is constructed based on the first priority allocation result, the second priority allocation result, and the third priority allocation result.

[0011] Optionally, the step of using the control module to identify the top-level function corresponding to the function execution instruction, then reading the candidate resource group list corresponding to the top-level function based on the current health status information, and checking whether all resource units in each candidate resource group list are in a healthy state. If all are in a healthy state, the candidate resource group list is set as the target resource group, so as to use the control module and based on each resource unit in the target resource group to collaboratively execute the function execution instruction, includes: The control module uses its identification function to execute the top-level function corresponding to the instruction, and reads the candidate resource group list corresponding to the top-level function from the storage module based on the current health status information. Then, it checks whether all resource units in each candidate resource group list are in a healthy state in descending order of priority, and obtains the health status detection result. If the health status detection result indicates that all resource units in the candidate resource group list of the first control module are in a healthy state, then the first control module is used to identify, read and check the function execution instruction to obtain the corresponding target resource group. When the first control module fails, the second control module, in which all resource units are in a healthy state, is used to identify, read, and check the function execution instructions based on the function resource mapping table in the storage module to obtain the corresponding target resource group; the priority of the first control module is higher than the priority of the second control module. When the target resource group includes resource units belonging to different channels, bidirectional data synchronization is performed using the control modules corresponding to each channel. Based on the data synchronization results and the connection relationship and execution order between the resource units in the target resource group, each resource unit is activated to execute the function execution instructions.

[0012] Secondly, this application provides a fully electric landing gear redundancy management device based on functional reconfiguration, comprising: The system topology graph construction module is used to define each hardware module in the all-electric landing gear system as a corresponding resource unit, and to determine the system topology graph including node types and directed connection edges based on the physical connection relationship and data flow between the resource units. The combined path generation module is used to determine the target top-level function, then set the path start constraint and the path end constraint, and then use a backtracking algorithm to enumerate candidate resource units and corresponding candidate resource unit combined paths based on the system topology graph, the path start constraint and the path end constraint; The function resource mapping table generation module is used to sort each of the candidate resource units in descending order of priority to obtain a corresponding candidate resource group list, and to generate a function resource mapping table based on the combination path of each candidate resource group list and the candidate resource unit. The instruction execution module is used to identify the top-level function corresponding to the function execution instruction by the control module, and then read the candidate resource group list corresponding to the top-level function based on the current health status information. It also checks whether all resource units in each candidate resource group list are in a healthy state. If all are in a healthy state, the candidate resource group list is set as the target resource group, so that the function execution instruction can be executed collaboratively by the control module and based on each resource unit in the target resource group.

[0013] Thirdly, this application provides an electronic device, comprising: Memory, used to store computer programs; A processor is used to execute the computer program to implement the aforementioned all-electric landing gear redundancy management method based on functional reconfiguration.

[0014] Fourthly, this application provides a computer-readable storage medium for storing a computer program, wherein the computer program, when executed by a processor, implements the aforementioned all-electric landing gear redundancy management method based on functional reconfiguration.

[0015] As can be seen from the above, before performing redundancy management of the all-electric landing gear based on functional reconfiguration, this application needs to define each hardware module in the all-electric landing gear system as a corresponding resource unit, and determine the system topology graph including node types and directed connection edges based on the physical connection relationship and data flow between each resource unit; determine the target top-level function, then set path start constraints and path end constraints, and then use a backtracking algorithm to enumerate candidate resource units and corresponding candidate resource unit combination paths based on the system topology graph, path start constraints and path end constraints; sort each candidate resource unit in descending order of priority to obtain the corresponding candidate resource group list, and generate a functional resource mapping table based on each candidate resource group list and candidate resource unit combination path; use the control module to identify the top-level function corresponding to the function execution instruction, then read the candidate resource group list corresponding to the top-level function based on the current health status information, and check whether all resource units in each candidate resource group list are in a healthy state. If all are in a healthy state, the candidate resource group list is set as the target resource group, so that the control module can collaboratively execute the function execution instruction based on each resource unit in the target resource group.

[0016] Therefore, this application first needs to define each hardware module in the all-electric landing gear system as a corresponding resource unit, and determine the system topology graph, including node types and directed connection edges, based on the physical connection relationship and data flow between each resource unit. Then, the target top-level function is determined, and path start constraints and path end constraints are set. Then, a backtracking algorithm is used to enumerate candidate resource units and their corresponding combination paths based on the system topology graph, path start constraints, and path end constraints. Furthermore, each candidate resource unit is sorted in descending order of priority to obtain a corresponding candidate resource group list, and a function resource mapping table is generated based on the candidate resource group list and the candidate resource unit combination paths. Finally, the control module identifies the top-level function corresponding to the function execution instruction, and then reads the candidate resource group list corresponding to the top-level function based on the current health status information. It checks whether all resource units in each candidate resource group list are in a healthy state. If all are, the candidate resource group list is set as the target resource group, and the control module is used to collaboratively execute the function execution instruction based on the resource units in the target resource group. This improves the efficiency of managing all-electric landing gear redundancy during the process of functional reconfiguration-based all-electric landing gear redundancy management, thereby enhancing the safety of the production process. Attached Figure Description

[0017] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0018] Figure 1 This application discloses a flowchart of a fully electric landing gear redundancy management method based on functional reconfiguration. Figure 2 This is a schematic diagram of a specific landing gear system architecture disclosed in this application; Figure 3 This is a schematic diagram of a specific dynamic reconfiguration process disclosed in this application; Figure 4 This is a schematic diagram of a fully electric landing gear redundancy management device based on functional reconfiguration disclosed in this application; Figure 5 This is a structural diagram of an electronic device disclosed in this application. Detailed Implementation

[0019] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0020] Currently, all-electric landing gear systems are a key technology in the development of modern aircraft. The mainstream redundancy management strategy is "primary / backup channel switching," which simply divides all dual-redundancy modules into two independent channels: the primary channel and the backup channel. When the system is normal, the primary channel operates; if any node in the primary channel fails, the entire system switches to the backup channel. This "one-size-fits-all" switching logic has obvious problems of resource waste and insufficient reliability. To address this, this application provides an all-electric landing gear redundancy management method based on functional reconfiguration, which can improve the efficiency of managing all-electric landing gear redundancy in the process of functional reconfiguration-based all-electric landing gear redundancy management.

[0021] See Figure 1 As shown, this invention discloses a method for managing redundancy of all-electric landing gear based on functional reconfiguration, comprising: Step S11: Define each hardware module in the all-electric landing gear system as a corresponding resource unit, and determine the system topology diagram including node type and directed connection edge based on the physical connection relationship and data flow between the resource units.

[0022] In this embodiment, the landing gear system architecture diagram is as follows: Figure 2 As shown, the arrows connecting the modules represent the data flow, and the overall process can be divided into four stages: system modeling, functional decomposition, path enumeration, and encapsulation verification.

[0023] First, system modeling: abstracting the physical system into a manageable logical model: first, traversing all hardware modules of the system (control, power, communication, drive, actuator, etc.), defining each physical unit with independent function and that can be monitored individually as a "resource unit" → assigning a unique logical identifier to each resource unit and classifying it according to its function (e.g., power supply, computing, drive, actuation) → drawing in conjunction with the system hardware schematic.

[0024] It is worth mentioning that, in this application embodiment, the following modules are all regarded as independent "resource units": Landing gear controller side resource unit: communication module A10, power module A20, control module A30, drive module A41, drive module A42, drive module A43, drive module A44, drive module A45, drive module A46, communication module B10, power module B20, control module B30, drive module B41, drive module B42, drive module B43, drive module B44, drive module B45, drive module B46; Actuator-side resource units: Motor module A51, Motor module A52, Motor module A53, Motor module A54, Motor module A55, Motor module A56, Motor module B51, Motor module B52, Motor module B53, Motor module B54, Motor module B55, Motor module B56.

[0025] The health status of all resource units is monitored in real time through control module A30 and control module B30, and shared in real time through board dual-redundancy communication.

[0026] Specifically, each hardware module in the all-electric landing gear system is defined as a corresponding resource unit, and a system topology diagram including node types and directed edges is determined based on the physical connection relationships and data flow between the resource units. This can include: defining each hardware module in the all-electric landing gear system as a corresponding resource unit; each hardware module has independent functions and can be monitored individually; the hardware modules include control modules, power modules, communication modules, drive modules, and motor modules; assigning corresponding logical identifiers and functional classification types to each resource unit, determining the physical connection relationships and data flow between the resource units based on the logical identifiers and functional classification types, and constructing a system topology diagram including node types and directed edges based on the physical connection relationships and data flow.

[0027] In one specific implementation, the entry nodes are: A10, B10; the computing / decision nodes are: A30, B30; the driving nodes are: A41-A46, B41-B46; the execution nodes are: A51-A56, B51-B56; and the energy nodes are: A20, B20.

[0028] It is worth mentioning that the data flow rule is: "from left to right" with the following specific flow: communication module → control module in the same channel; control module → drive module in the same channel; drive module → motor module in the same channel. Vertical interaction: control module A30 and control module B30 can perform bidirectional data synchronization. Furthermore, horizontal communication is used for status sharing and collaborative decision-making, which is the key to realizing cross-channel resource combination.

[0029] Specifically, constructing a system topology diagram based on physical connections and data flow, including node types and directed connection edges, can include: determining node types based on physical connections; node types include entry nodes, computational decision nodes, drive nodes, execution nodes, and energy nodes; setting the communication module as the entry node, the power supply module as the energy node, and the control module as the computational decision node, thereby setting the drive module as the drive node and the motor module as the execution node; constructing directed connection edges based on data flow to define the power binding relationships between each energy node and other nodes within the power supply range, and to define bidirectional data synchronization connections between control modules located in different channels, thereby constructing the system topology diagram based on node types and directed connection edges; wherein, in the system topology diagram, communication modules located in the same channel only transmit data to control modules in the same channel; control modules only transmit data to drive modules in the same channel; and drive modules only transmit data to motor modules in the same channel.

[0030] Step S12: Determine the target top-level function, then set the path start constraint and path end constraint, and then use the backtracking algorithm to enumerate candidate resource units and corresponding candidate resource unit combination paths based on the system topology graph, the path start constraint and the path end constraint.

[0031] In this embodiment, the present application requires functional decomposition: clarifying what the system needs to "do" and what is needed to do these things. That is, listing all the top-level safety-critical functions that the system must implement (e.g., landing gear retraction and extension, wheel braking, nose wheel steering) → for each top-level function, outlining its execution chain (landing gear retraction and extension example: communication reception → control calculation → drive output → actuator execution → position feedback (optional)) → obtaining the basic resource units required for function implementation.

[0032] Subsequently, path enumeration is performed: all paths are identified using a backtracking algorithm combined with depth-first search and constraint checks. In one specific implementation, the feed-and-release system can generate paths: First, define the start and end points of the path (input / output constraints).

[0033] Starting point: A module that can accept external instructions, and has one and only one starting point, namely (A10∨B10).

[0034] Endpoint: The module that can drive the mechanical movement of the landing gear. A path must simultaneously include and successfully drive these three actuators. For each actuator, at least one of its dual-redundant motors must be included, i.e., (A54∨B54)∧(A55∨B55)∧(A56∨B56).

[0035] Secondly, define the nodes and connection rules (topological constraints) of the path.

[0036] Key node types are categorized as follows: Entry nodes: A10, B10; Computation / Decision nodes: A30, B30; Driver nodes: A41-A46, B41-B46; Execution nodes: A51-A56, B51-B56; Energy nodes: A20, B20.

[0037] The power binding rule is as follows: power module A20 supplies power to all modules (A10, A30, A41-A46, A51-A56) in its corresponding A channel. It's worth noting that for these modules to function, A20 must be in good working order. Similarly, power module B20 is bound to the B channel.

[0038] Finally, based on the landing gear system architecture diagram, specific path enumeration is performed: Pure single-channel path (all modules are on the same channel): either pure A channel or pure B channel. Instructions enter from A10, are processed by A30, and drive A44, A45, and A46, which in turn actuate motors A54, A55, and A56 respectively. Power supply A20 is implicit. That is, A10 ∧ (A20 ∧ A30) ∧ ((A44 ∧ A54) ∧ (A45 ∧ A55) ∧ (A46 ∧ A56)). The B channel is similar: B10 ∧ (B20 ∧ B30) ∧ ((B44 ∧ B54) ∧ (B45 ∧ B55) ∧ (B46 ∧ B56)).

[0039] Cross-channel path (this mainly refers to cross-channel commands, i.e., after A10 fails, A30 can communicate via the B10→B30→A30 path): B10∧B30∧(A20∧A30)∧((A44∧A54)∧(A45∧A55)∧(A46∧A56);A10∧A30∧(B20∧B30)∧((B44∧B54)∧(B45∧B55)∧(B46∧B56))。 Hybrid drive / motor path: A10∧(A20∧A30)∧((A45∧A55)∧(A46∧A56))∧((B20∧B30)∧(B44∧B54)); A10∧(A20∧A30)∧((A44∧A54)∧(A46∧A56))∧((B20∧B30)∧(B45∧B55)); A10∧(A20∧A30)∧((A44∧A54)∧(A45∧A55))∧((B20∧B30)∧(B46∧B55)); A10∧(A20∧A30)∧((A44∧A54)∧(A45∧A55))∧((B20∧B30)∧(B46∧B55)) 56)); B10∧(B20∧B30)∧((B45∧B55)∧(B46∧B56))∧((A20∧A30)∧(A44∧A54))); B10∧(B20∧B30)∧((B44∧B54)∧(B46∧B56))∧((A20∧A30)∧(A45∧A55))); B10∧(B20∧B30)∧((B44∧B54)∧(B45∧B55))∧((A20∧A30)∧(A46∧A56))).

[0040] Specifically, the process involves determining the target top-level functions, setting path start and end constraints, and then using a backtracking algorithm based on the system topology, path start and end constraints to enumerate candidate resource units and their corresponding combination paths. This can include: determining each target top-level function and setting path start and end constraints; the path start constraint includes a first entry module and a second entry module; the path end constraint is to use the execution module to drive the first actuator, the second actuator, and the third actuator; determining the execution logic corresponding to the target top-level functions; wherein, the execution logic includes unidirectional data flow from the entry module to the control module, from the control module to the drive module, and from the drive module to the execution module in the same channel; bidirectional data synchronization between the control modules in the two channels, and each channel power module only supplies power to all modules in the same channel; using a backtracking algorithm based on depth-first search to enumerate candidate resource units that satisfy the path start and end constraints and their corresponding combination paths, and then binding each power module to all communication modules, control modules, drive modules, and motor modules in the channel; the candidate resource unit combination paths include single-channel paths, cross-channel paths, and hybrid drive paths.

[0041] Furthermore, using a backtracking algorithm and based on the system topology graph, path start constraints, and path end constraints, enumerating candidate resource units and their corresponding candidate resource unit combination paths can include: setting communication modules that satisfy the path start constraints as the path search start point, extending the path based on the directed connection edges corresponding to the data flow direction, and adding power supply modules to the path extension results to obtain the power supply module addition results; checking whether the power supply modules corresponding to the power supply module addition results have been included in the current candidate resource unit combination path based on the power binding relationship; if the power supply modules have not been included in the current candidate resource unit combination path, then forcibly setting the power supply modules as prerequisite dependent nodes to be added to the path; determining whether the set of motor modules in the current candidate resource unit combination path satisfies the endpoint Boolean expression defined by the path end constraints; if it does, then setting each resource unit combination corresponding to the current candidate resource unit combination path as a candidate resource unit.

[0042] Step S13: Sort each candidate resource unit in descending order of priority to obtain a corresponding candidate resource group list, and generate a functional resource mapping table based on the candidate resource group list and the candidate resource unit combination path.

[0043] In this embodiment, the dynamic reconstruction process diagram is as follows: Figure 3 As shown, a functional resource mapping table is then generated based on the candidate resource group list and the candidate resource unit combination path, and the corresponding functional resource mapping table is shown below: Table 1 Function-Resource Mapping Table

[0044] Among them, the priority of resource utilization decreases from left to right and from top to bottom; when the landing gear retraction function is implemented, only one of the many resource groups can be used at a time, and the same applies to braking and front wheel turning; there can only be one main control module, namely A30 or B30, and A30 has a higher control priority.

[0045] Specifically, the candidate resource units are sorted in descending order of priority to obtain a corresponding candidate resource group list. This may include: determining the control module corresponding to each candidate resource unit, and setting the priority of candidate resource units that include a main control module that meets preset main control conditions to be higher than that of candidate resource units that include a backup control module that meets preset backup control conditions, thus obtaining a first priority allocation result; setting the priority of resource units belonging to the same physical channel to be higher than that of resource units that do not belong to the same physical channel, thus obtaining a second priority allocation result; determining the number of resource units in each candidate resource unit's candidate resource group, and allocating each candidate resource unit based on the number of resource units, thus obtaining a third priority allocation result; the number of resource units is negatively correlated with the priority level; and constructing a candidate resource group list based on the first, second, and third priority allocation results.

[0046] Step S14: Use the control module to identify the top-level function corresponding to the function execution instruction, then read the candidate resource group list corresponding to the top-level function based on the current health status information, and check whether all resource units in each candidate resource group list are in a healthy state. If they are, set the candidate resource group list as the target resource group, so as to use the control module and coordinate the execution of the function execution instruction based on each resource unit in the target resource group.

[0047] In this embodiment, the present application requires encapsulation verification: the function-candidate resource group-priority relationship generated in the above steps is encapsulated in the form of structured data, thereby forming a "function-resource" mapping table that can be queried and executed by the system, and injected into the redundancy management module to verify the function execution path through software instrumentation. In this way, through such systematic analysis, all paths to function implementation can be identified, and the various modes of "cross-channel combination" (instruction cross-channel, control cross-channel, driver cross-channel, execution cross-channel) can be clearly defined, proving that the present application can achieve resource scheduling capabilities with extremely fine granularity that far exceed traditional master-slave switching.

[0048] In one specific implementation, the equivalent "function-resource" mapping table for switching traditional faults is shown in Table 2: Table 2 Equivalent "Function-Resource" Mapping Table for Traditional Fault Switching

[0049] Among them, the priority of resource utilization decreases from top to bottom.

[0050] Furthermore, the system dynamic fault reconstruction process is as follows: Status monitoring: Control module A30 and control module B30 monitor the health status (normal / fault) of all "resource units" in each operating cycle.

[0051] Fault Assessment: When a fault is detected in a resource unit, the management system does not immediately switch the overall channel. Control module A30 (higher priority) or control module B30 (B30 only performs fault assessment in the case of A30 module handover or failure) assesses which "resource groups" are affected by the fault through the "function-resource" mapping table.

[0052] Command execution: After receiving a command, the landing gear controller A30 first determines the command type (whether it is landing gear retraction / extension, braking, or front wheel turning), and then determines whether the command can still be executed based on the available "function-resource" mapping group after fault assessment. If it can, the corresponding "resource unit" is called to execute the command according to the resource group priority and resource group usage logic; if the resource group for executing the command is not available after the assessment, the corresponding function implementation fault is reported.

[0053] Specifically, the control module identifies the top-level function corresponding to the execution instruction, then reads the candidate resource group list corresponding to the top-level function based on the current health status information, and checks whether all resource units in each candidate resource group list are in a healthy state. If all are, the candidate resource group list is set as the target resource group, so that the control module can collaboratively execute the execution instruction based on the resource units in the target resource group. This can include: using the control module to identify the top-level function corresponding to the execution instruction, reading the candidate resource group list corresponding to the top-level function from the storage module based on the current health status information, and then checking whether all resource units in each candidate resource group list are in a healthy state in descending order of priority to obtain a health status detection result; if the health status detection result indicates that the first control module... If all resource units in the candidate resource group list of each block are in a healthy state, the first control module is used to identify, read, and check the function execution instructions to obtain the corresponding target resource group. When the first control module fails, the second control module, where all resource units are in a healthy state, is used to identify, read, and check the function execution instructions based on the function resource mapping table in the storage module to obtain the corresponding target resource group. The first control module has a higher priority than the second control module. When the target resource group includes resource units belonging to different channels, the control modules corresponding to each channel are used for bidirectional data synchronization. Based on the data synchronization results and the connection relationship and execution order between the resource units in the target resource group, each resource unit is activated to execute the function execution instructions.

[0054] In one specific implementation, if the front wheel control actuator "motor module A51" of the main channel fails, in the conventional method: the entire system is switched to the backup channel, the front wheel control actuator "motor module B51" is activated, and the task is performed using resource group 2 in Table 2. B10∧(B20∧B30)∧(B41∧B51)∧((B42∧B52)∧(B43∧B53))∧((B44∧B54)∧(B45∧B55)∧(B46∧B56))).

[0055] In this invention: First, the control module A30 determines the command type. If it is a landing gear retraction / extension command or a braking command, then according to the "Function-Resource" mapping table in Table 1, it prioritizes using landing gear retraction / extension resource group 1 A10 ∧ (A20 ∧ A30) ∧ ((A44 ∧ A54) ∧ (A45 ∧ A55) ∧ (A46 ∧ A56)) or braking resource group 1 A10 ∧ (A20 ∧ A30) ∧ ((A42 ∧ A52) ∧ (A43 ∧ A53)) to implement the landing gear retraction / extension or braking function. If it's a front wheel turn command, the "Function-Resource" mapping table shows that front wheel turn resource group 1 and resource group 2 are invalid, so front wheel turn resource group 3 is used instead: B10∧B20∧B30∧B41∧B51 to execute the front wheel turn command. Furthermore, when multiple faults occur: the main channel's front wheel control actuator "motor module A51" fails, and subsequently the backup channel's brake "motor module B52" also fails.

[0056] In another specific implementation, the traditional method is to switch to the backup channel during the first failure; the second failure causes the backup channel to fail entirely, paralyzing the landing gear system. However, according to the "function-resource" mapping table, the present invention can find that the landing gear retraction function has 10 resource groups that are not affected, the braking function has 4 resource groups remaining out of 8, and the front wheel turning function has 2 resource groups remaining out of 4. It can be clearly seen that the system has a safety margin of 72.7%. Ultimately, the system prioritizes the remaining resource groups according to the "function-resource" mapping table. The landing gear retraction function uses resource group 1: A10 ∧ (A20 ∧ A30) ∧ ((A44 ∧ A54) ∧ (A45 ∧ A55) ∧ (A46 ∧ A56)); the braking function uses resource group 1: A10 ∧ (A20 ∧ A30) ∧ ((A42 ∧ A52) ∧ (A43 ∧ A53)); and the front wheel turning function uses resource group 3: (B10 ∧ B20 ∧ B30 ∧ B41 ∧ B51). Therefore, this invention patent can still maintain full functionality even under dual failures.

[0057] As can be seen from the above, the embodiments of this application first need to define each hardware module in the all-electric landing gear system as a corresponding resource unit, and determine the system topology graph including node types and directed connection edges based on the physical connection relationship and data flow between each resource unit; then, determine the target top-level function, and then set path start constraints and path end constraints; then, use a backtracking algorithm and based on the system topology graph, path start constraints and path end constraints to enumerate candidate resource units and corresponding candidate resource unit combination paths; furthermore, sort each candidate resource unit in descending order of priority to obtain the corresponding candidate resource group list, and generate a function resource mapping table based on each candidate resource group list and candidate resource unit combination path; finally, use the control module to identify the top-level function corresponding to the function execution instruction, and then read the candidate resource group list corresponding to the top-level function based on the current health status information, and check whether all resource units in each candidate resource group list are in a healthy state. If all are in a healthy state, the candidate resource group list is set as the target resource group, and the control module is used to collaboratively execute the function execution instruction based on each resource unit in the target resource group. This improves the efficiency of managing all-electric landing gear redundancy during the process of functional reconfiguration-based all-electric landing gear redundancy management, thereby enhancing the safety of the production process.

[0058] Accordingly, see Figure 4 As shown, this application also provides a fully electric landing gear redundancy management device based on functional reconfiguration, comprising: The system topology construction module 11 is used to define each hardware module in the all-electric landing gear system as a corresponding resource unit, and to determine the system topology diagram including node type and directed connection edge based on the physical connection relationship and data flow between the resource units. The combined path generation module 12 is used to determine the target top-level function, then set the path start constraint and the path end constraint, and then use a backtracking algorithm to enumerate candidate resource units and corresponding candidate resource unit combined paths based on the system topology graph, the path start constraint and the path end constraint. The function resource mapping table generation module 13 is used to sort each of the candidate resource units in descending order of priority to obtain a corresponding candidate resource group list, and to generate a function resource mapping table based on the combination path of each candidate resource group list and the candidate resource unit. The instruction execution module 14 is used to identify the top-level function corresponding to the function execution instruction by the control module, and then read the candidate resource group list corresponding to the top-level function based on the current health status information, and check whether all resource units in each candidate resource group list are in a healthy state. If they are all in a healthy state, the candidate resource group list is set as the target resource group, so as to use the control module and the resource units in the target resource group to collaboratively execute the function execution instruction.

[0059] In some specific embodiments, the system topology construction module 11 may specifically include: The hardware module definition unit is used to define each hardware module in the all-electric landing gear system as a corresponding resource unit; each hardware module has independent functions and can be monitored individually; the hardware module includes a control module, a power module, a communication module, a drive module, and a motor module. The system topology graph construction sub-unit is used to assign corresponding logical identifiers and functional classification types to each resource unit, so as to determine the physical connection relationship and data flow direction between each resource unit based on each logical identifier and the functional classification type, and to construct a system topology graph including node types and directed connection edges based on the physical connection relationship and the data flow direction.

[0060] In some specific embodiments, the system topology construction module 11 may specifically include: A node type determination unit is used to determine the node type based on the physical connection relationship; the node type includes entry node, computing decision node, driving node, execution node, and energy node; An execution node setting unit is used to set the communication module as the entry node, the power supply module as the energy node, the control module as the calculation and decision node, the drive module as the drive node, and the motor module as the execution node; A directed connection edge construction unit is used to construct directed connection edges based on the data flow direction to define the power binding relationship between each energy node and other nodes within the power supply range, and to define the bidirectional data synchronization connection between the control modules located in different channels, so as to construct a system topology based on the node type and the directed connection edges; wherein, in the system topology, the communication module located in the same channel only transmits data to the control module in the same channel; the control module only transmits data to the drive module in the same channel; and the drive module only transmits data to the motor module in the same channel.

[0061] In some specific embodiments, the combined path generation module 12 may specifically include: The top-level function determination unit is used to determine the top-level function of each target, and then set the path start constraint and the path end constraint; the path start constraint includes a first entry module and a second entry module; the path end constraint is to use the execution module to drive the first actuator, the second actuator and the third actuator. An execution logic determination unit is used to determine the execution logic corresponding to the target top-level function; wherein, the execution logic includes a unidirectional data flow from the entry module to the control module, a unidirectional data flow from the control module to the drive module, and a unidirectional data flow from the drive module to the execution module in the same channel; the data between the control modules in the two channels is synchronized bidirectionally, and each channel power module only supplies power to all modules in the same channel; The module binding unit is used to enumerate candidate resource units that satisfy the path start constraint and the path end constraint using a backtracking algorithm and based on depth-first search, and then bind each power module to all communication modules, control modules, drive modules and motor modules in the channel; the candidate resource unit combination path includes single-channel path, cross-channel path and hybrid drive path.

[0062] In some specific embodiments, the combined path generation module 12 may specifically include: The path extension unit is used to set the communication module that satisfies the path starting point constraint as the path search starting point, extend the path based on the directed connection edge corresponding to the data flow direction, and add the power supply module to the path extension result to obtain the power supply module addition result. The power supply module addition result checking unit is used to check whether the power module corresponding to the power supply module addition result has been included in the current candidate resource unit combination path based on the power binding relationship. If the power module is not included in the current candidate resource unit combination path, the power module is forcibly set as a preceding dependent node to be added to the path. The candidate resource unit determination unit is used to determine whether the set of motor modules in the current candidate resource unit combination path satisfies the endpoint Boolean expression defined by the path endpoint constraint. If it does, the resource unit combination corresponding to the current candidate resource unit combination path is set as a candidate resource unit.

[0063] In some specific embodiments, the function resource mapping table generation module 13 may specifically include: The control module determination unit is used to determine the control module corresponding to each candidate resource unit, and set the priority of the candidate resource unit that includes the main control module that meets the preset main control conditions to be higher than that of the candidate resource unit that includes the backup control module that meets the preset backup control conditions, so as to obtain the corresponding first priority allocation result. The priority setting unit is used to set the priority of resource units belonging to the same physical channel in each candidate resource unit to be higher than the priority of resource units that do not belong to the same physical channel, so as to obtain the corresponding second priority allocation result. The resource unit quantity determination unit is used to determine the number of resource units in the candidate resource group of each candidate resource unit, and to allocate each candidate resource unit based on the number of resource units to obtain the corresponding third priority allocation result; the numerical value of the number of resource units is negatively correlated with the priority level. The candidate resource group list construction unit is used to construct a candidate resource group list based on the first priority allocation result, the second priority allocation result, and the third priority allocation result.

[0064] In some specific embodiments, the instruction execution module 14 may specifically include: The health status detection result generation unit is used to use the top-level function corresponding to the control module's identification function execution instruction, and read the candidate resource group list corresponding to the top-level function from the storage module based on the current health status information. Then, it checks whether all resource units in each candidate resource group list are in a healthy state in order of priority from high to low, and obtains the health status detection result. The first function execution instruction processing unit is used to identify, read and check the function execution instruction using the first control module if the health status detection result indicates that all resource units in the candidate resource group list of the first control module are in a healthy state, so as to obtain the corresponding target resource group. The target resource group determination unit is used to, when the first control module fails, utilize the second control module where all resource units are in a healthy state and, based on the function resource mapping table in the storage module, identify, read, and check the function execution instructions to obtain the corresponding target resource group; the priority of the first control module is higher than the corresponding priority of the second control module; The second function execution instruction processing unit is used to perform bidirectional data synchronization using the control modules corresponding to each channel when the target resource group includes resource units belonging to different channels, and to activate each resource unit based on the data synchronization result and the connection relationship and execution order between each resource unit in the target resource group, so as to execute the function execution instruction using each resource unit.

[0065] Furthermore, embodiments of this application also disclose an electronic device, Figure 5This is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content of the diagram should not be construed as limiting the scope of this application. Specifically, the electronic device 20 may include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 stores a computer program, which is loaded and executed by the processor 21 to implement the relevant steps in the functional reconfiguration-based all-electric landing gear redundancy management method disclosed in any of the foregoing embodiments. Furthermore, the electronic device 20 in this embodiment may specifically be an electronic computer.

[0066] In this embodiment, the power supply 23 is used to provide operating voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and external devices, and the communication protocol it follows can be any communication protocol applicable to the technical solution of this application, and is not specifically limited here; the input / output interface 25 is used to acquire external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs, and is not specifically limited here.

[0067] In addition, the memory 22, as a carrier for resource storage, can be a read-only memory, random access memory, disk or optical disk, etc. The resources stored thereon can include operating system 221, computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0068] The operating system 221 is used to manage and control the various hardware devices on the electronic device 20 and the computer program 222, which may be Windows Server, Netware, Unix, Linux, etc. In addition to including a computer program capable of performing the functional reconfiguration-based all-electric landing gear redundancy management method disclosed in any of the foregoing embodiments, the computer program 222 may further include computer programs capable of performing other specific tasks.

[0069] Furthermore, this application also discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, it implements the aforementioned disclosed all-electric landing gear redundancy management method based on functional reconfiguration. Specific steps of this method can be found in the corresponding content disclosed in the foregoing embodiments, and will not be repeated here.

[0070] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. For the apparatus disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple; relevant parts can be referred to in the method section.

[0071] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0072] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein can be implemented directly by hardware, a software module executed by a processor, or a combination of both. The software module can be located in random access memory (RAM), main memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art.

[0073] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0074] The technical solutions provided in this application have been described in detail above. Specific examples have been used to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the methods and core ideas of this application. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of this application. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. A method for managing redundancy in all-electric landing gear based on functional reconfiguration, characterized in that, include: Each hardware module in the all-electric landing gear system is defined as a corresponding resource unit, and a system topology diagram including node type and directed connection edge is determined based on the physical connection relationship and data flow between the resource units. The target top-level function is determined, then the path start constraint and path end constraint are set, and then the backtracking algorithm is used to enumerate candidate resource units and corresponding candidate resource unit combination paths based on the system topology graph, the path start constraint and the path end constraint. The candidate resource units are sorted in descending order of priority to obtain a corresponding list of candidate resource groups, and a functional resource mapping table is generated based on the list of candidate resource groups and the combination path of the candidate resource units. The control module identifies the top-level function corresponding to the function execution instruction, then reads the candidate resource group list corresponding to the top-level function based on the current health status information, and checks whether all resource units in each candidate resource group list are in a healthy state. If all are in a healthy state, the candidate resource group list is set as the target resource group, so that the control module and each resource unit in the target resource group can collaboratively execute the function execution instruction.

2. The all-electric landing gear redundancy management method based on functional reconfiguration according to claim 1, characterized in that, The process of defining each hardware module in the all-electric landing gear system as a corresponding resource unit, and determining a system topology graph including node types and directed connection edges based on the physical connection relationships and data flow directions between the resource units, includes: Each hardware module in the all-electric landing gear system is defined as a corresponding resource unit; each hardware module has independent functions and can be monitored individually; each hardware module includes a control module, a power supply module, a communication module, a drive module, and a motor module. Each resource unit is assigned a corresponding logical identifier and functional classification type to determine the physical connection relationship and data flow direction between each resource unit based on the logical identifier and the functional classification type, and to construct a system topology graph including node type and directed connection edge based on the physical connection relationship and the data flow direction.

3. The all-electric landing gear redundancy management method based on functional reconfiguration according to claim 2, characterized in that, The construction of a system topology graph based on the physical connectivity and data flow direction, including node types and directed edges, includes: The node type is determined based on the physical connection relationship; the node type includes entry node, computing and decision node, driving node, execution node, and energy node; The communication module is set as the entry node, the power supply module is set as the energy node, the control module is set as the computing decision node, the drive module is set as the drive node, and the motor module is set as the execution node. Based on the data flow direction, a directed connection edge is constructed to define the power binding relationship between each energy node and other nodes within the power supply range, and to define the bidirectional data synchronization connection between the control modules located in different channels, so as to construct a system topology based on the node type and the directed connection edge. In the system topology diagram, the communication module located in the same channel only transmits data to the control module in the same channel; the control module only transmits data to the drive module in the same channel; and the drive module only transmits data to the motor module in the same channel.

4. The all-electric landing gear redundancy management method based on functional reconfiguration according to claim 2, characterized in that, The process involves determining the target top-level function, setting path start and end constraints, and then using a backtracking algorithm based on the system topology graph, the path start constraints, and the path end constraints to enumerate candidate resource units and their corresponding combination paths. The top-level functions of each objective are determined, and then path start constraints and path end constraints are set; the path start constraints include a first entry module and a second entry module; the path end constraints are to use the execution module to drive the first actuator, the second actuator, and the third actuator. The execution logic corresponding to the target top-level function is determined; wherein, the execution logic includes a unidirectional data flow from the entry module to the control module, a unidirectional data flow from the control module to the drive module, and a unidirectional data flow from the drive module to the execution module in the same channel; the data between the control modules in the two channels is synchronized bidirectionally, and the power supply module of each channel only supplies power to all modules in the same channel; The candidate resource units that satisfy the path start constraint and the path end constraint are enumerated using a backtracking algorithm and a depth-first search, along with the corresponding candidate resource unit combination paths. Then, each power module is bound to all the communication modules, control modules, drive modules, and motor modules within the channel. The candidate resource unit combination paths include single-channel paths, cross-channel paths, and hybrid drive paths.

5. The all-electric landing gear redundancy management method based on functional reconfiguration according to claim 4, characterized in that, The process of enumerating candidate resource units and corresponding candidate resource unit combination paths using a backtracking algorithm based on the system topology graph, the path start constraint, and the path end constraint includes: The communication module that satisfies the path starting point constraint is set as the path search starting point, and the path is extended based on the directed connection edge corresponding to the data flow direction. The power supply module is added to the path extension result to obtain the power supply module addition result. Based on the power binding relationship, check whether the power module corresponding to the power module addition result has been included in the current candidate resource unit combination path. If the power module is not included in the current candidate resource unit combination path, then force the power module to be set as a preceding dependent node to be added to the path. Determine whether the set of motor modules in the current candidate resource unit combination path satisfies the endpoint Boolean expression defined by the path endpoint constraint. If it does, set each resource unit combination corresponding to the current candidate resource unit combination path as a candidate resource unit.

6. The all-electric landing gear redundancy management method based on functional reconfiguration according to claim 1, characterized in that, The process of sorting the candidate resource units according to their priority from high to low to obtain a corresponding list of candidate resource groups includes: The control module corresponding to each candidate resource unit is determined, and the priority of the candidate resource unit corresponding to the main control module that meets the preset main control conditions is set to be higher than that of the candidate resource unit corresponding to the backup control module that meets the preset backup control conditions, so as to obtain the corresponding first priority allocation result. The priority of resource units belonging to the same physical channel in each candidate resource unit is set to be higher than the priority of resource units that do not belong to the same physical channel, and the corresponding second priority allocation result is obtained. The number of resource units in the candidate resource group of each candidate resource unit is determined, and each candidate resource unit is allocated based on the number of resource units to obtain the corresponding third priority allocation result; the numerical value of the number of resource units is negatively correlated with the priority level. A candidate resource group list is constructed based on the first priority allocation result, the second priority allocation result, and the third priority allocation result.

7. The all-electric landing gear redundancy management method based on functional reconfiguration according to any one of claims 1 to 6, characterized in that, The process involves using the control module to identify the top-level function corresponding to the function execution instruction, then reading the candidate resource group list corresponding to the top-level function based on the current health status information, and checking whether all resource units in each candidate resource group list are in a healthy state. If all are in a healthy state, the candidate resource group list is set as the target resource group. This allows the control module to collaboratively execute the function execution instruction based on each resource unit in the target resource group. The control module uses its identification function to execute the top-level function corresponding to the instruction, and reads the candidate resource group list corresponding to the top-level function from the storage module based on the current health status information. Then, it checks whether all resource units in each candidate resource group list are in a healthy state in descending order of priority, and obtains the health status detection result. If the health status detection result indicates that all resource units in the candidate resource group list of the first control module are in a healthy state, then the first control module is used to identify, read and check the function execution instruction to obtain the corresponding target resource group. When the first control module fails, the second control module, in which all resource units are in a healthy state, is used to identify, read, and check the function execution instructions based on the function resource mapping table in the storage module to obtain the corresponding target resource group; the priority of the first control module is higher than the priority of the second control module. When the target resource group includes resource units belonging to different channels, bidirectional data synchronization is performed using the control modules corresponding to each channel. Based on the data synchronization results and the connection relationship and execution order between the resource units in the target resource group, each resource unit is activated to execute the function execution instructions.

8. A fully electric landing gear redundancy management device based on functional reconfiguration, characterized in that, include: The system topology graph construction module is used to define each hardware module in the all-electric landing gear system as a corresponding resource unit, and to determine the system topology graph including node types and directed connection edges based on the physical connection relationship and data flow between the resource units. The combined path generation module is used to determine the target top-level function, then set the path start constraint and the path end constraint, and then use a backtracking algorithm to enumerate candidate resource units and corresponding candidate resource unit combined paths based on the system topology graph, the path start constraint and the path end constraint; The function resource mapping table generation module is used to sort each of the candidate resource units in descending order of priority to obtain a corresponding candidate resource group list, and to generate a function resource mapping table based on the combination path of each candidate resource group list and the candidate resource unit. The instruction execution module is used to identify the top-level function corresponding to the function execution instruction by the control module, and then read the candidate resource group list corresponding to the top-level function based on the current health status information. It also checks whether all resource units in each candidate resource group list are in a healthy state. If all are in a healthy state, the candidate resource group list is set as the target resource group, so that the function execution instruction can be executed collaboratively by the control module and based on each resource unit in the target resource group.

9. An electronic device, characterized in that, include: Memory, used to store computer programs; A processor for executing the computer program to implement the all-electric landing gear redundancy management method based on functional reconfiguration as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, Used to store a computer program, wherein the computer program, when executed by a processor, implements the all-electric landing gear redundancy management method based on functional reconfiguration as described in any one of claims 1 to 7.

Images