A method and system for trusted synthesis control of redundant analog output channels

Abstract

The application provides a kind of redundant analog output channel's reliable synthesis control method and system, the method includes: according to operating data, construct redundant analog output evaluation state vector;According to evaluation state vector, calculate the health degree score of each redundant analog output channel, and generate the reliable level of each channel according to the health degree score, generate reliable synthesis strategy according to preset control target and reliable level;According to reliable synthesis strategy, generate synthesis output reference value, and perform output before reliable check on synthesis output reference value, and output synthesis output reference value that reliable check passes to execution object, and perform non-disturbance transition control when synthesis strategy switches or channel reliable level changes;After output, collect channel back-reading value and post-execution feedback value, and perform closed-loop consistency verification;Log is recorded, and parameter correction suggestion is generated according to log statistical result.The application can improve the control continuity, output quality and operation and maintenance efficiency of redundant analog output link.

Description

Technical Field

[0001] This invention relates to the field of gas turbine control and actuator drive control technology, and in particular to a reliable synthetic control method and system for redundant analog output channels. Background Technology

[0002] In gas turbine control systems, analog output channels are typically used to output control commands to actuator drive modules or related regulated objects. The quality of this output directly affects the smoothness of actuator movement, control accuracy, and operational safety. To improve the availability and fault tolerance of the output link, redundant analog output channel structures are often used in engineering to maintain the continuity of control functions when some channels malfunction.

[0003] In real-world engineering scenarios, abnormal behavior of redundant analog output channels does not always manifest as complete failure. It can also present as "gradual anomalies" such as increased offset, enhanced fluctuation noise, chronic drift, decreased readback consistency, increased timing jitter, or abnormal saturation ratio. If only a binary method for determining channel failure / normality is used, or if output is based solely on fixed synthesis strategies such as mean or median, problems such as decreased output quality, strategy switching jitter, actuator impact, or deviations from expected control performance can easily occur under certain abnormal operating conditions.

[0004] Furthermore, existing solutions primarily focus on the status monitoring or redundancy switching of the analog output channels themselves, while neglecting the consistent closed-loop utilization of output commands, channel readback, and post-execution feedback. Even if the channel output and readback superficially meet the conditions, the actual control effect may differ from the expectation due to abnormalities in the drive link, abnormal response of the actuator, or feedback distortion, thereby affecting the correctness of the redundant output synthesis strategy and the engineering safety.

[0005] In existing technologies, there is usually a lack of a unified method for handling redundant analog output channels. This method can perform closed-loop management of channel health scoring, post-execution feedback consistency verification, target-oriented reliable synthesis strategy, and uninterrupted transition control during strategy switching. It is difficult to simultaneously take into account output stability, tracking accuracy, safety and conservatism, and engineering maintainability. Summary of the Invention

[0006] The purpose of this invention is to provide a reliable synthesis control method and system for redundant analog output channels. It aims to solve the problems in the prior art where the processing of redundant analog output channels mainly relies on binary fault judgment, static synthesis strategy, insufficient utilization of post-execution feedback, and imperfect control of shock and chatter during strategy switching. The invention achieves channel health scoring, post-execution feedback consistency verification, target-oriented reliable synthesis, and disturbance-free transition control closed-loop management, thereby improving the control continuity, output quality, and operation and maintenance efficiency of redundant analog output links.

[0007] In a first aspect, the present invention provides a reliable synthesis control method for redundant analog output channels, the method comprising: Collect runtime data of redundant simulation output channels and their associated execution objects, and construct a redundant simulation output evaluation state vector based on the runtime data; The health score of each redundant analog output channel is calculated based on the evaluation state vector, and the confidence level of each channel is generated based on the health score. Based on the preset control target and the confidence level, a target-oriented confidence synthesis strategy is generated. Generate a synthesis output reference value according to the trusted synthesis strategy, perform a pre-output trusted verification on the synthesis output reference value, output the synthesis output reference value that passes the trusted verification to the execution object, and perform uninterrupted transition control when the synthesis strategy is switched or the channel trusted level changes. After output, collect the channel readback value and the post-execution feedback value, perform closed-loop consistency verification between the channel readback value and the output command, and between the post-execution feedback value and the synthesized output reference value, and perform at least one of the following on abnormal channels: channel deweighting, channel isolation, policy downgrading, or manual confirmation request based on the consistency verification results. Record health scores, reliable synthesis strategies, non-disruptive transition processes, and anomaly handling logs, and generate parameter correction suggestions based on log statistics.

[0008] In some embodiments, the step of calculating the health score of each redundant analog output channel based on the evaluation state vector includes: Extract the output command value, channel readback value, and post-execution feedback value of each channel from the evaluation state vector; The output offset index is calculated based on the deviation between the output command value and the channel readback value. The fluctuation noise index is calculated based on the peak-to-peak value or variance of the readback value within the preset time window. The drift trend index is calculated based on the slope of the change of the readback value within the evaluation window. The readback consistency index is calculated based on the difference between the readback values ​​of each channel. The timing stability index is calculated based on channel readback delay fluctuations or sampling period jitter, and the saturation ratio index is calculated based on the proportion of channel outputs that are near the upper or lower limit within the evaluation window. The consistency index of post-execution feedback is calculated based on the consistency between the change in the synthetic output reference value and the direction of the change in the feedback after execution, the deviation in the proportional relationship between the change amount, and whether the post-execution feedback response delay is within the preset threshold range. The obtained indicators are summarized into a health score, and the channel reliability level is divided according to the score range in which the health score is located.

[0009] In some embodiments, the step of generating a trust level for each channel based on the health score, and generating a target-oriented trustworthy synthesis strategy based on a preset control target and the trust level, includes: Identify the current control target. If it is a stationarity priority target, select a weighted synthesis strategy or a robust statistical synthesis strategy. If it is a tracking accuracy priority target, select a high-confidence channel weighted synthesis strategy. If it is a safety and conservatism priority target, select a single-channel isolation output strategy or a restricted degradation output strategy. When there are multiple high-confidence channels, a weighted synthesis strategy is adopted. The synthesis weight is calculated according to the health score of each channel, the synthesis weight is normalized, and a synthesis output reference value is generated based on the weighted summation. When a single-channel abnormal offset or short-term outlier is detected, a robust statistical synthesis strategy is adopted, including at least one of median synthesis, truncated mean synthesis, or bias-limited weighted synthesis. When the health scores of all other channels are below the isolation threshold, a single-channel isolation output strategy is adopted, and only the target channel is retained for output. When all channel health scores are below the confidence threshold, a restricted degradation output strategy is adopted, including at least one of amplitude limiting, slope limiting, or safe fixed value output.

[0010] In some embodiments, the step of generating a synthesis output reference value according to the trusted synthesis strategy and performing a pre-output trusted verification on the synthesis output reference value includes: Perform a synthetic value boundary check on the synthetic output reference value to determine whether the synthetic output reference value exceeds the range boundary or the operating condition constraint boundary. If it exceeds the range boundary or the operating condition constraint boundary, the output is prohibited. A synthetic value change rate check is performed on the synthetic output reference value to determine whether the change rate of the synthetic output reference value exceeds a preset change rate upper limit. If it does, the output is prohibited. When a synthesis strategy switch occurs, a strategy switch legality check is performed to determine whether the strategy switch is allowed at the current moment. If it is not allowed, the switch is suspended and the current strategy is maintained. Perform a critical channel availability check to determine whether the critical channels involved in synthesis are available. If they are unavailable, trigger a policy degradation. If any check fails, the output of the current synthesized output reference value is prohibited and the exception handling process is triggered; if all checks pass, output is allowed.

[0011] In some embodiments, the step of outputting the synthesized output reference value that has passed the trust verification to the execution object, and performing perturbation-free transition control when switching synthesis strategies or changing channel trust levels includes: When a switching of synthesis strategy or a change in channel confidence level is detected, a transition trajectory is generated, and output limiting and output slope limiting are applied to the synthesis output reference value. When a weighted synthesis strategy is adopted and the channel weights are updated, the weight update is performed smoothly, including at least one of the following: weight increase / decrease rate limit, first-order weight filter update, or weight change dead zone control. Set a scoring hysteresis band for channel trust level switching; when the health score fluctuates near the threshold, trust level switching is prohibited. Set a minimum dwell time for switching synthesis strategies, and prohibit switching again within the minimum dwell time after the strategy switch.

[0012] In some embodiments, the step of performing closed-loop consistency verification between the channel readback value and the output command, and between the post-execution feedback value and the synthesized output reference value, and performing at least one of the following on abnormal channels based on the consistency verification result: channel deweighting, channel isolation, policy downgrading, or manual confirmation request: Calculate the deviation between the output command value and the channel readback value of the same channel. If the deviation exceeds the preset readback consistency threshold, the channel readback consistency is determined to be unsatisfactory. Calculate the change in the current synthesized output reference value relative to the previous synthesized output reference value, and calculate the change in the current feedback value relative to the previous feedback value. If the two changes are in opposite directions, or the proportional deviation of the changes exceeds the preset feedback consistency threshold, then the feedback consistency after execution is determined to be unsatisfactory. When it is determined that the readback consistency is not met or the post-execution feedback consistency is not met, an exception confirmation timer is started. If the consistency is not met within the confirmation time set by the exception confirmation timer, an exception is confirmed. If the consistency is met within the confirmation time, the exception confirmation timer is reset and monitoring continues. Once an anomaly is confirmed, its severity is determined based on the anomaly type and duration.

[0013] In some embodiments, the step of determining the severity of the anomaly based on the anomaly type and duration when the anomaly is confirmed includes: If the only issue is the readback consistency not being met and the deviation is within a preset multiple of the threshold, it is considered a minor anomaly, and the channel weight is reduced. If the readback consistency is not met and the deviation exceeds the threshold preset multiple, or if the feedback consistency is not met after execution but the response delay is still within the threshold range, it is judged as a medium anomaly and channel isolation is executed. If the feedback consistency is not met after execution and the response delay exceeds the threshold range, or if the same channel repeatedly causes anomalies more than the preset number of times within the preset time window, it is judged as a serious anomaly and the execution strategy is downgraded. If the above determinations fail to identify the cause of the anomaly, a manual confirmation request will be executed.

[0014] In some embodiments, the step of recording health scores, reliable synthesis strategies, non-intrusive transition processes, and anomaly handling logs, and generating parameter correction suggestions based on log statistical results, includes: Within the preset statistical period, the abnormality rate, strategy switching frequency, seamless transition success rate, and post-execution feedback consistency pass rate of each channel are statistically analyzed. Each statistical value is compared with its corresponding threshold. If any statistical value exceeds the threshold, the current parameter template is determined to need to be corrected. Based on the statistical items that exceed the limits, generate parameter correction suggestions for output offset threshold, time window length, evaluation window length, isolation threshold, rate of change upper limit, or transition time.

[0015] Secondly, the present invention provides a reliable synthesis control system with redundant analog output channels, the system comprising: The data acquisition module is used to collect the running data of the redundant simulation output channel and its associated execution objects, and to construct the redundant simulation output evaluation state vector based on the running data. The rating module is used to calculate the health score of each redundant analog output channel based on the evaluation state vector, generate the confidence level of each channel based on the health score, and generate a target-oriented confidence synthesis strategy based on the preset control target and the confidence level. The trusted verification module is used to generate a synthesis output reference value according to the trusted synthesis strategy, perform a pre-output trusted verification on the synthesis output reference value, output the synthesis output reference value that has passed the trusted verification to the execution object, and perform non-disruptive transition control when the synthesis strategy is switched or the channel trusted level changes. The consistency verification module is used to collect channel readback values ​​and post-execution feedback values ​​after output, perform closed-loop consistency verification between the channel readback values ​​and the output command, and between the post-execution feedback values ​​and the synthesized output reference values, and perform at least one of the following on abnormal channels based on the consistency verification results: channel deweighting, channel isolation, policy downgrading, or manual confirmation request. The logging module is used to record health scores, trusted synthesis strategies, non-disruptive transition processes, and anomaly handling logs, and to generate parameter correction suggestions based on log statistics.

[0016] Thirdly, the present invention provides a storage medium that stores one or more programs, which, when executed by a processor, implement the aforementioned reliable synthesis control method for redundant analog output channels.

[0017] Fourthly, the present invention provides an electronic device, the electronic device comprising a memory and a processor, wherein: The memory is used to store computer programs; When the processor executes the computer program stored in the memory, it implements the aforementioned reliable synthesis control method for redundant analog output channels.

[0018] Compared with the prior art, the present invention has the following advantages: This invention systematically solves the problems of existing technologies, such as reliance on binary fault determination, static synthesis strategies, insufficient utilization of post-execution feedback, and shock jitter during strategy switching, by incorporating multi-dimensional scoring of channel health, goal-oriented strategy synthesis, pre-output reliability verification, non-disruptive transition control, post-output closed-loop consistency verification, and log-driven parameter correction into a unified framework. It significantly improves the control continuity, output quality, and engineering adaptability of redundant analog output links. Specifically, firstly, the output command value, readback value, and post-execution feedback value of each channel are collected. A health score is calculated and a reliability level is assigned based on seven dimensions: output offset, fluctuation noise, drift trend, readback consistency, timing stability, saturation ratio, and post-execution feedback consistency. This upgrades channel status assessment from a traditional binary judgment of normal / fault to a multi-dimensional quantitative scoring, effectively identifying progressive anomalies. Based on this, according to control objectives such as prioritizing stability, tracking accuracy, or safety and conservatism, strategies such as weighted synthesis, robust statistical synthesis, single-channel isolated output, or restricted degraded output are dynamically selected based on the channel reliability level. Boundary checks, rate of change checks, switching legality checks, and critical channel availability checks are performed before synthesized output to prevent outlier outputs at the source. When a strategy switch or reliability level change occurs... During the transition, through perturbation-free transition control measures such as transition trajectory generation, output amplitude and slope limiting, weight smoothing update, scoring hysteresis band, and minimum dwell time, output abrupt changes and actuator shocks are effectively suppressed. After output, closed-loop consistency verification is further performed between the channel readback value and the output command, and between the post-execution feedback value and the synthesized reference value. The severity of anomalies is judged based on multi-dimensional indicators such as readback deviation, feedback change direction and proportional deviation, and response delay. Channel weight reduction, isolation, strategy downgrading, or manual confirmation are then implemented in stages, forming a complete closed loop of pre-output prevention, in-output smoothing, and post-output verification. Finally, by statistically analyzing indicators such as anomaly rate, strategy switching frequency, and transition success rate, parameter threshold correction is automatically triggered and written back to the parameter template, realizing continuous optimization of the control strategy and cross-condition adaptive capability. This invention transforms the control of redundant analog output channels from the traditional static, open-loop, and binarized mode to a dynamic, closed-loop, multi-dimensional quantized reliable synthesis mode, effectively improving the control accuracy, operational stability, and system availability of the actuator. Attached Figure Description

[0019] Figure 1 This is a flowchart of a reliable synthesis control method for redundant analog output channels according to an embodiment of the present invention; Figure 2 This is a schematic diagram of the structure of a reliable synthesis control system for redundant analog output channels according to an embodiment of the present invention.

[0020] The following detailed description, in conjunction with the accompanying drawings, will further illustrate the present invention. Detailed Implementation

[0021] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention. Unless otherwise defined, the technical or scientific terms used herein should have the ordinary meaning understood by those skilled in the art. The terms "comprising" and similar expressions used herein mean that the element or object preceding the word covers the element or object listed after the word and its equivalents, but does not exclude other elements or objects.

[0022] Example 1 like Figure 1 As shown, an embodiment of the present invention proposes a reliable synthesis control method for redundant analog output channels, the method comprising steps S101 to S105, wherein: Step S101: Collect the running data of the redundant simulation output channel and its associated execution object, and construct the redundant simulation output evaluation state vector based on the running data; It should be noted that in gas turbine control systems, analog output channels are typically used to output control commands to actuator drive modules, and their output quality directly affects the smoothness of actuator movements and control accuracy. To comprehensively evaluate the health status of each channel, multi-dimensional operational data needs to be collected. Specifically, for each redundant analog output channel, its output command value (i.e., the value the control system expects to output), channel readback value (i.e., the feedback value of the actual output), output change rate, saturation state, channel health status, timestamp, measurement point quality code, communication status, and power supply status are collected. Simultaneously, the post-execution feedback values ​​of the actuators associated with the analog output (such as actuator position feedback, valve position feedback, drive current feedback, etc.), post-execution feedback change rate, and post-execution feedback validity flags are also collected. After the above data collection is completed, it is structured according to the channel dimension to form a redundant analog output evaluation state vector. This state vector fully characterizes the output quality, readback accuracy, and actual response of the actuators for each channel, providing a unified data input for subsequent health scoring, reliability level classification, and synthesis strategy selection.

[0023] Step S102: Calculate the health score of each redundant analog output channel based on the evaluation state vector, generate the confidence level of each channel based on the health score, and generate a target-oriented confidence synthesis strategy based on the preset control target and the confidence level. It should be noted that since anomalies in redundant analog output channels are often not sudden complete failures, but rather manifest as gradual anomalies such as increased offset, enhanced fluctuation noise, chronic drift, and decreased readback consistency, a comprehensive evaluation of the channels is necessary from multiple dimensions. Specifically, the output command value, readback value, and post-execution feedback value of each channel are extracted from the evaluation state vector. The following metrics are then calculated sequentially: output offset (deviation between command and readback values), fluctuation noise (peak-to-peak value or variance of readback values ​​within a time window), drift trend (slope of readback value changes within the evaluation window), readback consistency (difference between readback values ​​of different channels), timing stability (readback delay fluctuations or sampling period jitter), saturation percentage (proportion of channel outputs near their upper or lower limits), and post-execution feedback consistency (directional consistency, proportional deviation, and response delay between changes in synthesized output and feedback). These seven metrics are then weighted and summarized into a health score (0-100 points), and the channels are classified into high-confidence, limited-confidence, low-confidence, or unreliable levels based on the score range. Based on this, identify the current control objective: if the objective is to prioritize stability, then a weighted synthesis strategy or a robust statistical synthesis strategy should be selected to smooth out output fluctuations; if the objective is to prioritize tracking accuracy, then a high-reliability channel weighted synthesis strategy should be selected to pursue rapid response; if the objective is to prioritize safety and conservatism, then a single-channel isolation output strategy or a restricted degradation output strategy should be selected to ensure system safety.

[0024] Specifically, in some embodiments, to obtain a health score, firstly, the output command value, channel readback value, and post-execution feedback value of each channel are extracted from the evaluation state vector; then, an output offset index is calculated based on the deviation between the output command value and the channel readback value; a fluctuation noise index is calculated based on the peak-to-peak value or variance of the readback value within a preset time window; a drift trend index is calculated based on the slope of the change in the readback value within the evaluation window; a readback consistency index is calculated based on the difference between the readback values ​​of each channel; a timing stability index is calculated based on the channel readback delay fluctuation or sampling period jitter; a saturation ratio index is calculated based on the proportion of time the channel output is near the upper or lower limit within the evaluation window; a post-execution feedback consistency index is calculated based on the consistency between the direction of change of the synthesized output reference value and the change of the post-execution feedback, the deviation in the proportional relationship between the change amount, and whether the post-execution feedback response delay is within a preset threshold range; finally, the obtained indices are summarized into a health score, and the channel reliability level is divided according to the score range in which the health score is located.

[0025] By weighting and summing the above seven indicators into a health score and then classifying the channel reliability level, a multi-dimensional quantitative evaluation of redundant analog output channels is achieved. Compared with the traditional approach that only uses a binary judgment method of channel failure / normality, this seven-dimensional scoring system can effectively identify progressive anomalies such as increased offset, enhanced fluctuation noise, chronic drift, decreased readback consistency, increased timing jitter, abnormal saturation ratio, and post-execution feedback mismatch. This upgrades the channel status evaluation from a qualitative judgment of whether it is faulty to a quantitative score of how healthy it is, providing a refined input basis for subsequent target-oriented reliable synthesis strategies.

[0026] Furthermore, in some embodiments, the current control target is first identified. If it is a stationarity-priority target, a weighted synthesis strategy or a robust statistical synthesis strategy is selected. If it is a tracking accuracy-priority target, a high-confidence channel weighted synthesis strategy is selected. If it is a safety-conservative-priority target, a single-channel isolation output strategy or a restricted degradation output strategy is selected. When multiple high-confidence channels exist, a weighted synthesis strategy is adopted. The synthesis weight is calculated according to the health score of each channel, the synthesis weight is normalized, and a synthesis output reference value is generated based on the weighted summation. When a single-channel abnormal offset or short-term outlier is detected, a robust statistical synthesis strategy is adopted, including at least one of median synthesis, truncated mean synthesis, or bias-limited weighted synthesis. When the health scores of the remaining channels are all below the isolation threshold, a single-channel isolation output strategy is adopted, retaining only the target channel output. When the health scores of all channels are below the confidence threshold, a restricted degradation output strategy is adopted, including at least one of amplitude limiting, slope limiting, or safety fixed value output.

[0027] By identifying different control objectives such as prioritizing stability, tracking accuracy, or safety and conservatism, and combining these with strategies such as dynamic selection of weighted synthesis, robust statistical synthesis, single-channel isolated output, or restricted degraded output based on channel reliability levels, the synthesis strategy is precisely matched with the operating conditions.

[0028] Step S103: Generate a synthesis output reference value according to the trusted synthesis strategy, perform a pre-output trusted verification on the synthesis output reference value, output the synthesis output reference value that has passed the trusted verification to the execution object, and perform uninterrupted transition control when the synthesis strategy is switched or the channel trusted level changes. It should be noted that in this step, firstly, a synthesis output reference value is generated based on the previously determined synthesis strategy: if a weighted synthesis strategy is adopted, the normalized weight is calculated according to the health score of each channel, and the output command value of each channel is weighted and summed; if a robust statistical synthesis strategy is adopted, the influence of outliers is suppressed by means of median synthesis, truncated mean synthesis, or bias-limited weighted synthesis; if a single-channel isolation output strategy is adopted, only the output of the target channel is retained; if a restricted degradation output strategy is adopted, amplitude preservation, slope following, or safe fixed value output is performed. After generating the synthesized output reference value, four reliability checks are performed before output: First, a synthesized value boundary check is performed to determine whether the synthesized output reference value exceeds the range boundary or operating condition constraint boundary; if so, output is prohibited. Second, a synthesized value change rate check is performed to determine whether the change rate of the synthesized output reference value exceeds a preset change rate upper limit; if so, output is prohibited (typically 1%–20% of the range / second) to avoid sudden changes impacting the actuator. Third, a strategy switching legality check is performed to determine whether a strategy switch is allowed at the current moment; if not, the switch is postponed and the current strategy is maintained. Fourth, a critical channel availability check is performed to determine whether the critical channels involved in the synthesis are available; if unavailable, strategy degradation is triggered. Only when all four checks pass is the synthesized output reference value allowed to be output to the execution object. Furthermore, to avoid actuator shocks and system chattering caused by abrupt output changes when the synthesis strategy switches or the channel confidence level changes, disturbless transition control is required. This includes generating a first- or second-order smooth transition trajectory, limiting the output amplitude and slope, smoothly updating channel weights (e.g., rate limiting or first-order filtering), setting a scoring hysteresis band for channel confidence level switching to avoid frequent switching, and setting a minimum dwell time for strategy switching. This process, through generation, verification, output, and transition, ensures the safety, stability, and continuity of the synthesized output.

[0029] In addition, in some embodiments, when a weighted synthesis strategy is adopted and the channel weights are updated, the weight update is performed smoothly, including at least one of weight increase / decrease rate limiting, weight first-order filter update, or weight change dead zone control. In addition, in some embodiments, a scoring hysteresis band needs to be set for channel trust level switching, and trust level switching is prohibited when the health score fluctuates near the threshold. In addition, in some embodiments, a minimum dwell time needs to be set for the switching of synthesis strategies, and switching again is prohibited within the minimum dwell time after the strategy switch.

[0030] Step S104: After output, collect the channel readback value and the post-execution feedback value, perform closed-loop consistency verification between the channel readback value and the output command, and between the post-execution feedback value and the synthesized output reference value, and perform at least one of the following on abnormal channels: channel deweighting, channel isolation, policy downgrading, or manual confirmation request based on the consistency verification result. It should be noted that even if the synthesized output reference value has passed various checks before output, the actual control effect may still deviate from the expected result due to abnormalities in the drive link, abnormal response of the actuator, or feedback distortion. Therefore, continuous verification is required after output.

[0031] After the synthesized output reference value is output to the execution object, two feedback data are collected: one is the channel readback value, reflecting whether the channel itself outputs as expected; the other is the post-execution feedback value (such as valve position feedback, drive current feedback, etc.), reflecting whether the execution object acts as expected. Then, based on these two data, dual verification is performed: First, the deviation between the output command value and the channel readback value of the same channel is calculated. If the deviation exceeds a preset readback consistency threshold, the channel readback consistency is deemed unsatisfactory, indicating a possible fault in the channel itself. Second, the change in the current synthesized output reference value relative to the previous value, and the change in the current post-execution feedback value relative to the previous value, are calculated. If the two changes are in opposite directions, or the proportional deviation of the changes exceeds a preset feedback consistency threshold, or the response delay exceeds a preset threshold range, the post-execution feedback consistency is deemed unsatisfactory, indicating a possible anomaly in the actuator or feedback link. When any consistency verification fails, an anomaly confirmation timer is started. If the failure continues within the confirmation time, the anomaly is confirmed. After confirming the anomaly, graded handling is performed according to the anomaly type and severity, specifically including: If the only issue is readback consistency failure with a deviation within a preset threshold multiple, it is classified as a minor anomaly, and channel weighting is reduced, i.e., the channel's weight in subsequent synthesis is decreased. If readback consistency failure occurs with a deviation exceeding a preset threshold multiple, or if post-execution feedback inconsistency fails but the response latency remains within the threshold range, it is classified as a moderate anomaly, and channel isolation is implemented, i.e., the channel is removed from the synthesis strategy. If post-execution feedback inconsistency fails with a response latency exceeding the threshold range, or if the same channel repeatedly exhibits anomalies more than a preset number of times within a preset time window, it is classified as a severe anomaly, and strategy downgrade is implemented to switch to a more conservative synthesis strategy, such as single-channel isolation or safe fixed-value output. If none of the above determinations can clearly identify the cause of the anomaly, a manual confirmation request is executed, awaiting intervention from operations and maintenance personnel. By designing a closed-loop mechanism of post-output verification, anomaly confirmation, and tiered handling, timely isolation of abnormal channels and system downgrade are achieved, effectively preventing the spread of faults.

[0032] Step S105: Record the health score, trusted synthesis strategy, non-disruptive transition process and anomaly handling logs, and generate parameter correction suggestions based on the log statistics results.

[0033] It should be noted that the health status and control strategy effectiveness of redundant analog output channels will slowly evolve with equipment aging and changes in the operating environment. Therefore, this embodiment designs a long-term data accumulation and parameter optimization mechanism. Specifically, the system continuously records the following log information: health score and reliability level change trajectory of each channel, changes in synthesis strategy type and weight, uninterrupted transition parameters and transition results (such as transition time and whether the transition was successful), post-execution feedback consistency verification results, anomaly handling actions and cause codes, manual intervention records, and parameter template version information. Within a preset statistical period, the log data is statistically analyzed to calculate the anomaly rate (the proportion of anomaly duration to total running time), strategy switching frequency (the number of strategy switches per unit time), uninterrupted transition success rate (the proportion of transitions without impact or jitter), and post-execution feedback consistency pass rate (the proportion of successful feedback verifications to the total number of verifications). The above statistical values ​​are compared with their corresponding preset thresholds. If any statistical value exceeds the threshold, the current parameter template is determined to need correction. For example, if the anomaly rate of a certain channel is too high, its isolation threshold may need to be lowered; if the strategy switching frequency is too high, the scoring hysteresis band or minimum dwell time may need to be increased; if the success rate of disturbance-free transition is too low, the transition time may need to be extended or the slope limit relaxed. Based on the statistical items exceeding the limits, the system automatically generates correction suggestions for parameters such as output offset threshold, time window length, evaluation window length, isolation threshold, upper limit of change rate, or transition time, and writes the corrected parameters back to the parameter template, while ensuring that the corrected parameters are still within the preset safety range (e.g., the safe fixed value output strategy or untrustworthy level judgment rule must not be canceled). Through the closed-loop design of log recording, statistical analysis, threshold comparison, parameter correction, and template writing back, the control strategy can continuously evolve with changes in equipment status and operating environment, improving the system's adaptability under different units and operating conditions and its long-term maintainability.

[0034] In summary, based on the aforementioned reliable synthesis control method for redundant analog output channels, this embodiment has the following advantages: 1) This invention comprehensively evaluates indicators such as output offset, fluctuation noise, drift trend, readback consistency, timing stability, saturation ratio, and post-execution feedback consistency of redundant analog output channels, and generates channel health scores and reliability levels. This transforms the evaluation of redundant channels from a binary fault judgment method to a multi-dimensional scoring and hierarchical reliability management method, which is beneficial to improving the accuracy of channel status identification and the ability to identify progressive anomalies.

[0035] 2) This invention, by prioritizing stability, tracking accuracy, or safety and conservatism, and combining channel reliability levels with dynamic selection of reliable synthesis strategies such as weighted synthesis, robust statistical synthesis, single-channel isolated output, or restricted degraded output, transforms the redundant analog output control from a fixed synthesis method into a goal-oriented strategy control process. This is beneficial for improving the output adaptability and control effect consistency under different operating conditions and different object characteristics.

[0036] 3) This invention introduces non-disruptive transition control measures such as transition trajectory generation, output limiting, output slope limitation, weight smoothing update, strategy switching hysteresis and dwell time control when switching synthesis strategies or changing channel confidence levels. These measures can reduce the risks of output abrupt changes, actuator shocks and strategy chatter caused by strategy switching, and improve the stability and dynamic quality of redundant analog output links in abnormal and recovery scenarios.

[0037] 4) This invention incorporates output commands, channel readback, and post-execution feedback into a unified closed-loop consistency check, and performs actions such as channel demotion, channel isolation, policy downgrading, or manual confirmation requests in abnormal situations. At the same time, it combines log recording and parameter correction mechanisms for continuous optimization, which can improve the pertinence of abnormal handling, the convenience of event tracing, and the efficiency of subsequent policy iteration, and enhance the feasibility and maintenance convenience of the project under different unit types, different execution objects, and different operating conditions.

[0038] like Figure 2 As shown, one embodiment of the present invention proposes a reliable synthesis control system with redundant analog output channels, the system comprising: Data acquisition module 10 is used to acquire the running data of redundant analog output channels and their associated execution objects, and to construct a redundant analog output evaluation state vector based on the running data; The rating module 20 is used to calculate the health score of each redundant analog output channel based on the evaluation state vector, generate the confidence level of each channel based on the health score, and generate a target-oriented confidence synthesis strategy based on the preset control target and the confidence level. The trusted verification module 30 is used to generate a synthesis output reference value according to the trusted synthesis strategy, perform a pre-output trusted verification on the synthesis output reference value, output the synthesis output reference value that has passed the trusted verification to the execution object, and perform non-disruptive transition control when the synthesis strategy is switched or the channel trusted level changes. The consistency verification module 40 is used to collect channel readback values ​​and post-execution feedback values ​​after output, perform closed-loop consistency verification between the channel readback values ​​and the output command, and between the post-execution feedback values ​​and the synthesized output reference values, and perform at least one of the following on abnormal channels based on the consistency verification results: channel deweighting, channel isolation, policy downgrading, or manual confirmation request. The logging module 50 is used to record health scores, trusted synthesis strategies, non-disruptive transition processes, and anomaly handling logs, and to generate parameter correction suggestions based on log statistics.

[0039] Example 3 An embodiment of the present invention also proposes a storage medium storing one or more programs that, when executed by a processor, implement the aforementioned reliable synthesis control method for redundant analog output channels.

[0040] Example 4 An embodiment of the present invention also proposes an electronic device, including a memory and a processor, wherein the memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory to realize the above-mentioned reliable synthesis control method for redundant analog output channels.

[0041] Those skilled in the art will understand that the logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can mean any means that can contain stored, communicated, propagated, or transmitted programs for use by, or in conjunction with, an instruction execution system, apparatus, or device.

[0042] More specific examples of computer-readable media (a non-exhaustive list) include: electrical connections (electronic devices) having one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which the program can be printed, because the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0043] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0044] While embodiments of the present invention have been described in detail above, it will be apparent to those skilled in the art that various modifications and variations can be made to these embodiments. However, it should be understood that such modifications and variations fall within the scope and spirit of the invention as set forth in the claims. Furthermore, the invention described herein may have other embodiments and can be implemented or carried out in various ways.

Claims

1. A reliable synthesis control method for redundant analog output channels, characterized in that, The method includes: Collect runtime data of redundant simulation output channels and their associated execution objects, and construct a redundant simulation output evaluation state vector based on the runtime data; The health score of each redundant analog output channel is calculated based on the evaluation state vector, and the confidence level of each channel is generated based on the health score. Based on the preset control target and the confidence level, a target-oriented confidence synthesis strategy is generated. Generate a synthesis output reference value according to the trusted synthesis strategy, perform a pre-output trusted verification on the synthesis output reference value, output the synthesis output reference value that passes the trusted verification to the execution object, and perform uninterrupted transition control when the synthesis strategy is switched or the channel trusted level changes. After output, collect the channel readback value and the post-execution feedback value, perform closed-loop consistency verification between the channel readback value and the output command, and between the post-execution feedback value and the synthesized output reference value, and perform at least one of the following on abnormal channels: channel deweighting, channel isolation, policy downgrading, or manual confirmation request based on the consistency verification results. Record health scores, reliable synthesis strategies, non-disruptive transition processes, and anomaly handling logs, and generate parameter correction suggestions based on log statistics.

2. The reliable synthesis control method for redundant analog output channels according to claim 1, characterized in that, The step of calculating the health score of each redundant analog output channel based on the evaluation state vector includes: Extract the output command value, channel readback value, and post-execution feedback value of each channel from the evaluation state vector; The output offset index is calculated based on the deviation between the output command value and the channel readback value. The fluctuation noise index is calculated based on the peak-to-peak value or variance of the readback value within the preset time window. The drift trend index is calculated based on the slope of the change of the readback value within the evaluation window. The readback consistency index is calculated based on the difference between the readback values ​​of each channel. The timing stability index is calculated based on channel readback delay fluctuations or sampling period jitter, and the saturation ratio index is calculated based on the proportion of channel outputs that are near the upper or lower limit within the evaluation window. The consistency index of post-execution feedback is calculated based on the consistency between the change in the synthetic output reference value and the direction of the change in the feedback after execution, the deviation in the proportional relationship between the change amount, and whether the post-execution feedback response delay is within the preset threshold range. The obtained indicators are summarized into a health score, and the channel reliability level is divided according to the score range in which the health score is located.

3. The reliable synthesis control method for redundant analog output channels according to claim 1, characterized in that, The step of generating a trust level for each channel based on the health score, and generating a target-oriented trustworthy synthesis strategy based on a preset control target and the trust level, includes: Identify the current control target. If it is a stationarity priority target, select a weighted synthesis strategy or a robust statistical synthesis strategy. If it is a tracking accuracy priority target, select a high-confidence channel weighted synthesis strategy. If it is a safety and conservatism priority target, select a single-channel isolation output strategy or a restricted degradation output strategy. When there are multiple high-confidence channels, a weighted synthesis strategy is adopted. The synthesis weight is calculated according to the health score of each channel, the synthesis weight is normalized, and a synthesis output reference value is generated based on the weighted summation. When a single-channel abnormal offset or short-term outlier is detected, a robust statistical synthesis strategy is adopted, including at least one of median synthesis, truncated mean synthesis, or bias-limited weighted synthesis. When the health scores of all other channels are below the isolation threshold, a single-channel isolation output strategy is adopted, and only the target channel is retained for output. When all channel health scores are below the confidence threshold, a restricted degradation output strategy is adopted, including at least one of amplitude limiting, slope limiting, or safe fixed value output.

4. The reliable synthesis control method for redundant analog output channels according to claim 1, characterized in that, The steps of generating a synthesis output reference value according to the trusted synthesis strategy and performing a pre-output trusted verification on the synthesis output reference value include: Perform a synthetic value boundary check on the synthetic output reference value to determine whether the synthetic output reference value exceeds the range boundary or the operating condition constraint boundary. If it exceeds the range boundary or the operating condition constraint boundary, the output is prohibited. A synthetic value change rate check is performed on the synthetic output reference value to determine whether the change rate of the synthetic output reference value exceeds a preset change rate upper limit. If it does, the output is prohibited. When a synthesis strategy switch occurs, a strategy switch legality check is performed to determine whether the strategy switch is allowed at the current moment. If it is not allowed, the switch is suspended and the current strategy is maintained. Perform a critical channel availability check to determine whether the critical channels involved in synthesis are available. If they are unavailable, trigger a policy degradation. If any check fails, the output of the current synthesized output reference value is prohibited and the exception handling process is triggered; if all checks pass, output is allowed.

5. The reliable synthesis control method for redundant analog output channels according to claim 3, characterized in that, The steps of outputting the synthesized output reference value that has passed the trust verification to the execution object, and performing unobstructed transition control when switching synthesis strategies or changing channel trust levels, include: When a switching of synthesis strategy or a change in channel confidence level is detected, a transition trajectory is generated, and output limiting and output slope limiting are applied to the synthesis output reference value. When a weighted synthesis strategy is adopted and the channel weights are updated, the weight update is performed smoothly, including at least one of the following: weight increase / decrease rate limitation, first-order weight filter update, or weight change dead zone control. Set a scoring hysteresis band for channel trust level switching; when the health score fluctuates near the threshold, trust level switching is prohibited. Set a minimum dwell time for switching synthesis strategies, and prohibit switching again within the minimum dwell time after the strategy switch.

6. The reliable synthesis control method for redundant analog output channels according to claim 1, characterized in that, The step of performing closed-loop consistency verification between the channel readback value and the output command, and between the post-execution feedback value and the synthesized output reference value, and performing at least one of the following on abnormal channels based on the consistency verification results: channel deweighting, channel isolation, policy downgrading, or manual confirmation request: Calculate the deviation between the output command value and the channel readback value of the same channel. If the deviation exceeds the preset readback consistency threshold, the channel readback consistency is determined to be unsatisfactory. Calculate the change in the current synthesized output reference value relative to the previous synthesized output reference value, and calculate the change in the current feedback value relative to the previous feedback value. If the two changes are in opposite directions, or the proportional deviation of the changes exceeds the preset feedback consistency threshold, then the feedback consistency after execution is determined to be unsatisfactory. When it is determined that the readback consistency is not met or the post-execution feedback consistency is not met, an exception confirmation timer is started. If the consistency is not met within the confirmation time set by the exception confirmation timer, an exception is confirmed. If the consistency is met within the confirmation time, the exception confirmation timer is reset and monitoring continues. Once an anomaly is confirmed, its severity is determined based on the anomaly type and duration.

7. The reliable synthesis control method for redundant analog output channels according to claim 6, characterized in that, When an anomaly is confirmed, the step of determining the severity of the anomaly based on its type and duration includes: If the only issue is the readback consistency not being met and the deviation is within a preset multiple of the threshold, it is considered a minor anomaly, and the channel weight is reduced. If the readback consistency is not met and the deviation exceeds the threshold preset multiple, or if the feedback consistency is not met after execution but the response delay is still within the threshold range, it is judged as a medium anomaly and channel isolation is executed. If the feedback consistency is not met after execution and the response delay exceeds the threshold range, or if the same channel repeatedly experiences anomalies more than the preset number of times within the preset time window, it is judged as a serious anomaly and the execution strategy is downgraded. If the above determinations fail to identify the cause of the anomaly, a manual confirmation request will be executed.

8. The reliable synthesis control method for redundant analog output channels according to claim 1, characterized in that, The steps of recording health scores, reliable synthesis strategies, non-intrusive transition processes, and anomaly handling logs, and generating parameter correction suggestions based on log statistical results, include: Within the preset statistical period, the abnormality rate, strategy switching frequency, seamless transition success rate, and post-execution feedback consistency pass rate of each channel are statistically analyzed. Each statistical value is compared with its corresponding threshold. If any statistical value exceeds the threshold, the current parameter template is determined to need to be corrected. Based on the statistical items that exceed the limits, generate parameter correction suggestions for output offset threshold, time window length, evaluation window length, isolation threshold, rate of change upper limit, or transition time.

9. A reliable synthesis control system with redundant analog output channels, characterized in that, The system includes: The data acquisition module is used to collect the running data of the redundant simulation output channel and its associated execution objects, and to construct the redundant simulation output evaluation state vector based on the running data. The rating module is used to calculate the health score of each redundant analog output channel based on the evaluation state vector, generate the confidence level of each channel based on the health score, and generate a target-oriented confidence synthesis strategy based on the preset control target and the confidence level. The trusted verification module is used to generate a synthesis output reference value according to the trusted synthesis strategy, perform a pre-output trusted verification on the synthesis output reference value, output the synthesis output reference value that has passed the trusted verification to the execution object, and perform non-disruptive transition control when the synthesis strategy is switched or the channel trusted level changes. The consistency verification module is used to collect channel readback values ​​and post-execution feedback values ​​after output, perform closed-loop consistency verification between the channel readback values ​​and the output command, and between the post-execution feedback values ​​and the synthesized output reference values, and perform at least one of the following on abnormal channels based on the consistency verification results: channel deweighting, channel isolation, policy downgrading, or manual confirmation request. The logging module is used to record health scores, trusted synthesis strategies, non-disruptive transition processes, and anomaly handling logs, and to generate parameter correction suggestions based on log statistics.

10. An electronic device comprising a memory and a processor, wherein: The memory is used to store computer programs; When the processor executes the computer program stored in the memory, it implements the reliable synthesis control method for redundant analog output channels as described in any one of claims 1-8.

Images