METHOD AND DEVICE FOR MONITORING AN ELECTRICAL ENERGY SUPPLY NETWORK IN A TECHNICAL FIELD

Abstract

The present invention relates to a method and a system for monitoring an electrical power supply network of an aircraft in which the electrical power supply network comprises a plurality of protection and distribution devices connected to each other by at least one communication bus. According to the invention, each protection and distribution device: - determines its location in the network, - selects a configuration table associated with its location, - receives a status table from each other protection and cut-off device, - applies at least part of the status tables to a business rule determining whether a contactor of the protection and cut-off device must be open or closed, - controls the contactor according to the business rule, - transfers an updated status table to each other device. Figure to be published with the abstract: Fig. 3

Description

Title of the invention: METHOD AND DEVICE FOR MONITORING AN ELECTRICAL ENERGY SUPPLY NETWORK IN A TECHNICAL FIELD

[0001] The present invention relates to a method, a system and a device for monitoring an electrical power supply network of an aircraft. STATE OF PRIOR ART

[0002] In the field of aeronautics, the supply of electrical energy to the various equipment of an aircraft is ensured by at least one source of electrical energy supply, preferably by several sources of electrical energy supply so as to compensate for a possible malfunction of one or more sources of electrical energy supply. Depending on the operation or malfunction of a power source, a contactor or a load, a centralized monitoring system controls the opening or closing of remote contactors to reconfigure the electrical energy supply network so as to isolate the malfunction and guarantee the proper operation of the other elements connected to the electrical energy supply network.

[0003] For security reasons, the centralized surveillance system is often duplicated.

[0004] The wiring and configuration of the various elements of the electrical power supply network freeze the software embedded in the centralized monitoring system. This makes it difficult to upgrade the electrical power supply network over time. For each type or version of aircraft, it is necessary to develop a centralized monitoring system dedicated to the configuration of the various elements of the electrical power supply network.

[0005] In addition, the maintenance of centrally controlled electrical power supply networks is also complex.

[0006] It is particularly desirable to provide a solution which makes it possible to manage an electrical power supply network of an aircraft in a more flexible manner over time while reducing the wiring of the different elements of the electrical power supply network. Statement of the invention

[0007] A method for managing and monitoring an electrical power supply network of an aircraft is proposed, the electrical power supply network comprising a plurality of protection and distribution devices connected to each other by at least one communication bus, characterized in that the method comprises the steps, executed by each protection and distribution device, of:

[0008] - determination of the location of the protection and distribution device in the electrical power supply network of an aircraft,

[0009] - selection, from a set of configuration tables stored in the device protection and distribution, a configuration table associated with the location of the protection and distribution device in the electrical power supply network of an aircraft,

[0010] - reception of each other protection and cut-off device from a state table,

[0011] - applying at least part of the state tables to a business rule determining whether a contactor of the protection and cut-off device must be opened or closed,

[0012] - control of the contactor according to the result of the business rule,

[0013] - transfer to each other protection and cut-off device of a state table update.

[0014] The invention also relates to a protection and distribution device included in an electrical energy supply network of an aircraft comprising a plurality of protection and distribution devices connected to each other by at least one communication bus, characterized in that the protection and distribution device comprises:

[0015] - means for determining the location of the protection device and distribution in the electrical power supply network of an aircraft,

[0016] - means for selecting, from a set of stored configuration tables in the protection and distribution device, of a configuration table associated with the location of the protection and distribution device in the electrical power supply network of an aircraft,

[0017] - means for receiving each other protection and cut-off device from a state table,

[0018] - means for applying at least part of the state tables to a business rule determining whether the contactor of the protection and disconnection device must be open or closed,

[0019] - means for controlling the contactor according to the result of the business rule,

[0020] - means for transferring to each other protection and cutting device a updated state table.

[0021] The invention also relates to a protection and distribution system included in an electrical energy supply network of an aircraft comprising a plurality of protection and distribution devices, characterized in that the protection and distribution devices are connected to each other by at least one communication bus, each protection and distribution device comprises:

[0022] - means for determining the location of the protection device and distribution in the electrical power supply network of an aircraft,

[0023] - selection means, from a set of stored configuration tables in the protection and distribution device, of a configuration table associated with the location of the protection and distribution device in the electrical power supply network of an aircraft,

[0024] - means for receiving each other protection and cut-off device from a state table,

[0025] - means for applying at least part of the state tables to a business rule determining whether the contactor of the protection and disconnection device must be open or closed,

[0026] - means for controlling the contactor according to the result of the business rule,

[0027] - means for transferring to each other protection and cutting device a updated state table.

[0028] Thus, the present invention makes it possible to manage an electrical power supply network of an aircraft in a more flexible manner over time while reducing the wiring of the different elements of the electrical power supply network.

[0029] Furthermore, the present invention, by using the same type of protection and distribution device regardless of its location in the electrical power supply network, the wiring of the electrical power supply network is simplified and simple to implement.

[0030] Monitoring the electrical power supply network, thanks to its decentralized structure, reduces the complexity of the electrical power supply network. The complexity is reduced by simplifying the wiring through the use of the communication bus.

[0031] According to a particular embodiment, the method further comprises a step of testing the integrity of the protection and distribution device and the steps of determination, selection, reception, application, control and transfer are executed if the integrity test is positive.

[0032] According to a particular embodiment, the business rule determining whether the contactor of the protection and cut-off device must be open or closed further takes into account at least one current and / or one voltage measured by the protection and cut-off device and maximum and / or minimum current and / or voltage values included in the selected configuration table.

[0033] According to a particular embodiment, the method further comprises the steps of:

[0034] - checking whether an update of the configuration tables must be carried out,

[0035] - update of configuration tables prior to selection.

[0036] Thus, the present invention makes it possible to simply adapt to possible modifications to the aircraft's electrical power supply network.

[0037] According to a particular embodiment, the network comprises a plurality of voltage sources, a plurality of loads consuming electrical energy and a plurality of power supply buses and a protection and cut-off device is arranged between each voltage source and a power supply bus, a protection and cut-off device is arranged between each load and a power supply bus and at least one protection and cut-off device is arranged between two power supply buses.

[0038] Also provided is a program that can be stored on a medium and / or downloaded from a communication network, in order to be read by a processor. This program comprises instructions for implementing the method performed by each protection and distribution device, as mentioned above, when said program is executed by the processor. The invention also relates to an information storage medium storing such a program. Brief description of the drawings

[0039] The characteristics of the invention mentioned above, as well as others, will appear more clearly on reading the following description of at least one exemplary embodiment, said description being made in relation to the attached drawings, among which:

[0040] [Fig.l] illustrates an example of an architecture of an electrical power supply network of an aircraft in which the monitoring of the electrical power supply network of an aircraft is ensured in a distributed manner by a plurality of protection and distribution devices;

[0041] [Fig.2] illustrates an example of architecture of a protection and dis tribute according to the present invention;

[0042] [Fig.3] illustrates an example of an algorithm executed by each protection device and distribution according to the present invention;

[0043] [Fig.4] illustrates a particular example of a simplified architecture of a network of supplying electrical energy to an aircraft according to the present invention.

[0044] DETAILED DESCRIPTION OF EMBODIMENTS

[0045] [Fig.l] illustrates an example of an architecture of an electrical power supply network of an aircraft in which the monitoring of the electrical power supply network of an aircraft is ensured in a distributed manner by a plurality of protection and distribution devices.

[0046] In the example of [Fig.l], the electrical power supply network of the aircraft comprises two voltage sources Soi and So2, four loads Chi to Ch4 and a plurality of protection and distribution devices CPi to CP8 also called C / P modules.

[0047] The protection and distribution devices CPi to CP8 are connected to each other by two communication buses Bcei and Bce2. The communication buses Bcei and Bce2 are identical and there are two of them for reliability reasons in case one of them fails.

[0048] The communication buses Bcei and Bce2 allow data exchanges between the protection and distribution devices CPi to CP8 and are respectively connected by an interface to a communication system of the aircraft not shown in [Fig. 1].

[0049] The protection and distribution devices CPi to CP8 are powered by two power supplies Alii and Ali2.

[0050] The power supplies Alii and Ali2 are connected to external power supplies of the aircraft not shown in [Fig.l].

[0051] In a particular mode, an analog I / Fa interface is connected to the communication buses Bcei and Bce2. The analog I / Fa interface allows the exchange of data with sensors or actuators of the aircraft.

[0052] In a particular mode, a discrete I / Fd interface is connected to the communication buses Bcei and Bce2. The discrete I / Fd interface allows the exchange of data with control or notification elements of the aircraft.

[0053] An isolation barrier BI provides galvanic isolation between the electrical power supply network and other electrical elements of the aircraft.

[0054] The protection and distribution device CPi is connected to the voltage source Soiet, depending on the state of the contactor that it comprises internally, connects or does not connect a positive termination of the voltage source Soi to a positive power supply bus Ali+.

[0055] The connection between the positive termination of the voltage source Soi and the positive power supply bus Alu is denoted L1 and the connection between the negative termination of the voltage source Soi and the negative power supply bus Alb is denoted L2.

[0056] A negative termination of the voltage source Soi is connected to a negative power supply bus Alb.

[0057] The protection and distribution device CP2 is connected to the voltage source So2 and, depending on the state of the contactor that it comprises internally, connects or does not connect a positive termination of the voltage source So2 to a positive power supply bus Al2+.

[0058] A negative termination of the voltage source So2 is connected to a negative power supply bus Al2.

[0059] The protection and distribution devices CP3 and CP4 allow, depending on the state of the contactor they contain internally, the positive power supply buses Ab+ and Al2+ to be connected or not.

[0060] The protection and distribution device CP5 is connected to the load Chi and, depending on the state of the contactor it contains internally, connects or does not connect a positive termination of the load Chi to the positive power supply bus Ah+.

[0061] The protection and distribution device CP6 is connected to the load Ch2 and, according to the state of the contactor that it contains internally, connects or not a positive termination of the load Ch2 to the positive power supply bus Ali+.

[0062] The protection and distribution device CP7 is connected to the load Ch3 and, depending on the state of the contactor it contains internally, connects or does not connect a positive termination of the load Ch3 to the positive power supply bus Al2+.

[0063] The protection and distribution device CP8 is connected to the load Ch4 and, depending on the state of the contactor it contains internally, connects or does not connect a positive termination of the load Ch4 to the positive power supply bus Al2+.

[0064] [Fig.2] illustrates an example of the protection and distribution device CPp

[0065] It should be noted here that the protection and distribution devices CPi to CP8 have an identical architecture.

[0066] The protection and distribution device CPi comprises a microcontroller 200, a programming interface 201, a power supply module 202, an analog interface 203, a power control stage 204, a contactor 250, a communication interface 210 and an interface 206 for obtaining the state of the contactor 250.

[0067] The interface 206 for obtaining the state of the contactor 250 comprises an auxiliary contactor not shown in [Fig.2] which is controlled by the coil which controls the contactor 250. When the contactor 250 is closed, the auxiliary contactor is also closed. When the contactor 250 is open, the auxiliary contactor is also open. For example, when the auxiliary contactor is closed, a high logic level is present on an input of the interface for obtaining the state of the contactor 250. When the auxiliary contactor is open, a low logic level is present on the input of the interface for obtaining the state of the contactor 250.

[0068] The microcontroller 200 comprises, not shown in [Fig.2], a random access memory (RAM); a read only memory (ROM) or a Flash memory; and at least one set of inputs / outputs.

[0069] The microcontroller 200 is capable of executing instructions loaded into the RAM memory from the ROM memory, or from one of the communication buses Bcei or Bcei. When the microcontroller 200 is powered up, the microcontroller 200 is capable of reading instructions from the RAM memory and executing them. These instructions form a program causing the microcontroller 200 to implement all or part of the behaviors of the algorithm and steps described herein.

[0070] Thus, all or part of the algorithms and steps described herein may be implemented in software form by executing a set of instructions by a programmable machine, such as a DSP (Digital Signal Processor) or the microcontroller 200. All or part of the algorithms and steps described herein may also be implemented in software form by executing a set of instructions by a programmable machine, such as a DSP (Digital Signal Processor) or the microcontroller 200. implemented in hardware form by a machine or a component (“chip” in English), such as an FPGA (“Field-Programmable Gate Array” in English) or an ASIC (“Application-Specific Integrated Circuit” in English). Thus, the microcontroller 200 comprises electronic circuitry adapted and configured to implement the behaviors, the algorithm and steps described below.

[0071] The ROM memory comprises a plurality of equations for closing or opening the contactor 250.

[0072] Each business rule, also called operating rule, for closing or opening the contactor 250 corresponds to an assignment of the protection and distribution device in the electrical power supply network of the aircraft. Each business rule for closing or opening the contactor takes into account the state of at least some of the contactors included in the other protection and distribution devices of the electrical power supply network of the aircraft. Each business rule for closing is included respectively in a configuration table.

[0073] The programming interface 201 makes it possible to indicate, via programming pins, the assignment, in other words the position of the protection and distribution device.

[0074] The power supply module 202 makes it possible to supply the protection and distribution device from the power supplies Alii or Ali2.

[0075] Via the analog interface 203, the microcontroller 200 receives voltage and / or current measurements measured in the links L1 and L2.

[0076] The power control stage 204 makes it possible to control the opening or closing of the contactor 250.

[0077] The interface 206 for obtaining the state of the contactor 250 allows the microcontroller 200 to know the state of the contactor 250.

[0078] Via the communication interface 210, the microcontroller 200 transfers, on the communication bus Bcei or Bce2, status tables of the contactor 250 to each protection and distribution device and receives, from each protection and distribution device and via the communication bus Bcei or Bce2, status tables of their respective contactor.

[0079] [Fig.3] illustrates an example of an algorithm executed by each device of protection and distribution according to the present invention.

[0080] The present algorithm is for example executed with a periodicity of the order of a millisecond.

[0081] The present algorithm is described in an example in which it is executed by the protection and distribution device CPi.

[0082] In step E300, the microcontroller 200 checks whether the aircraft is on the ground. The microcontroller 200 is informed of the presence of the aircraft on the ground via the bus Bcei or Bce2 communication or via the discrete I / Fd interface.

[0083] If so, the microcontroller 200 goes to step E301. If not, the microcontroller 200 goes to step E302.

[0084] In step E301, the microcontroller carries out an integrity test of the operation of the protection and distribution device.

[0085] The integrity test consists for example of a verification of the consistency of the inputs, the outputs of the analog acquisition chain included in the analog interface 203, the correct functioning of the communication interface 210, the communication buses and the correct access to the memory.

[0086] In step E302, the microcontroller 200 checks whether the integrity test is negative. If the integrity test is negative, the microcontroller 200 proceeds to step E312.

[0087] If the integrity test is positive, the microcontroller 200 goes to step E303.

[0088] In step E303, the microcontroller 200 obtains from the interface 201 a binary word indicating the allocation of the protection and distribution device. The binary word is defined by micro switches or jumpers or given wiring.

[0089] In step E304, the microcontroller 200 checks whether a software download must be performed. For example, a software download is notified to the protection and distribution device via the communication bus Bcei or Bce2

[0090] If so, the microcontroller 200 goes to step E305. If not, the microcontroller 200 goes to step E306.

[0091] In step E305, the microcontroller 200 proceeds to download the software via the communication bus Bcei or Bce2.

[0092] In step E306, the microcontroller 200 reads the configuration table associated with the binary word indicating the allocation of the protection and distribution device.

[0093] The configuration table includes, for example, information indicating whether a voltage measurement and / or one or more current measurements must be carried out, a tripping current, a maximum difference between the currents flowing in lines L1 and L2, a minimum value of the voltage measured between lines L1 and L2, a maximum value of the voltage measured between lines L1 and L2, a business rule determining whether the contactor 250 must be open or closed.

[0094] In the following step E307, the microcontroller 200 obtains from the communication interface 210, data received via the I / Fd interface of control or notification elements of the aircraft as well as, for each other protection and distribution device CP2 to CP8, a status table of the contactor of the protection and distribution device CP2 to CP8.

[0095] In the following step E308, the microcontroller 200 obtains from the analog interface, according to the content of the configuration table, at least one measurement of current and / or tension.

[0096] In the following step E309, the microcontroller 200 checks whether the measurements obtained in step E308 are compatible with the minimum and maximum values included in the configuration table.

[0097] If the measurements obtained are compatible with the minimum and maximum values included in the configuration table, the microcontroller 200 goes to step E310.

[0098] If not, the microcontroller 200 goes to step E313.

[0099] In step E310, the microcontroller 200 uses the measured current, the tripping current, the state tables of at least part of the protection and distribution devices CP2 to CP8 and applies these to the business rule determining whether the contactor 250 must be open or closed.

[0100] In step E311, the microcontroller 200 controls the power control stage 204 to apply to the contactor 250, the state obtained from the business rule determining whether the contactor 250 must be open or closed.

[0101] In step E312, the microcontroller 200 controls the transfer via the communication interface 210 of the updated state table with the state obtained from the business rule determining whether the contactor 250 must be open or closed.

[0102] In step E313, the microcontroller 200 considers that the protection and distribution device CPi is defective and updates the status table.

[0103] If the communication interface 210 is operational, in step E314, the microcontroller 200 commands the transfer via the communication interface 210 of the updated state table with the state obtained from the business rule determining whether the contactor 250 must be open or closed.

[0104] [Fig.4] illustrates a particular example of a simplified architecture of an electrical power supply network for an aircraft according to the present invention.

[0105] In the example of [Fig.4], only two voltage sources Sor and So2-, two loads Chr and Ch2-, two positive supply buses Alr+ and Al[2 + and five protection and distribution devices CPr to CP5' are represented.

[0106] The protection and distribution device CPr is arranged between the voltage source Sor and the positive power supply bus Alr+.

[0107] The protection and distribution device CP2 is arranged between the voltage source So2- and the positive power supply bus Al2 +.

[0108] The protection and distribution device CP3' is arranged between the positive power supply bus AU + and the load Chr.

[0109] The protection and distribution device CP4 is arranged between the positive power supply bus Al2 + and the load Ch2.

[0110] The protection and distribution device CP5' is arranged between the positive power supply bus AU + and the positive power supply bus Al2 +.

[0111] In a conventional operation, the contactor of the protection and distribution device CPi' is closed, the contactor of the protection and distribution device CP2' is closed, the contactor of the protection and distribution device CP3 is closed, the contactor of the protection and distribution device CP4 is closed and the contactor of the protection and distribution device CP5' is open.

[0112] The result of the business rule for closing the contactor of the protection and distribution device CP5' is closing the contactor if the contactor of the protection and distribution device CPr is open, the contactor of the protection and distribution device CP2' is closed, the contactor of the protection and distribution device CP3' is closed, and the contactor of the protection and distribution device CP4- is closed.

[0113] If the protection and distribution device CP detects a voltage delivered by the voltage source Sor lower than a maximum value, it commands the opening of its contactor and transfers an updated state table.

[0114] When the protection and distribution device CP5' receives the updated state table from each protection and distribution device CPi CP4, the protection and distribution device CP5' applies it to the business rule determining whether the contactor 250 must be open or closed, commands the power stage to close the contactor and transfers an updated state table.

[0115] The present invention is described in an environment in which the voltage sources are direct current. The present invention is also applicable when the voltage sources provide alternating voltage.

Claims

Claims

1. A method for monitoring an electrical power supply network of an aircraft in which the electrical power supply network comprises a plurality of protection and distribution devices connected to each other by at least one communication bus, characterized in that the method comprises the steps, executed by each protection and distribution device, of: - determining the location of the protection and distribution device in the electrical power supply network of an aircraft, - selecting, from a set of configuration tables stored in the protection and distribution device, a configuration table associated with the location of the protection and distribution device in the electrical power supply network of an aircraft, - receiving from each other protection and cut-off device a status table,- application of at least part of the state tables to a business rule determining whether a contactor of the protection and cut-off device must be opened or closed, - control of the contactor according to the business rule - transfer to each other protection and cut-off device of an updated state table.,

2. Method according to claim 1, characterized in that the business rule determining whether the contactor of the protection and cut-off device must be open or closed further takes into account at least one current and / or one voltage measured by the protection and cut-off device and maximum and / or minimum current and / or voltage values included in the selected configuration table.

3. Method according to any one of claims 1 to 2, characterized in that the method further comprises the steps of: - checking whether an update of the configuration tables must be carried out, - updating the configuration tables prior to the selection.

4. Method according to any one of claims 1 to 3, characterized in that the method further comprises a step of testing the integrity of the protection and distribution device and in that the steps of determination, selection, reception, application, control and transfer are executed if the integrity test is positive.

5. Protection and distribution device included in an electrical energy supply network of an aircraft comprising a plurality of protection and distribution devices connected to each other by at least one communication bus, characterized in that the protection and distribution device comprises: - means of determining the location of the protection and distribution device in the electrical power supply network of an aircraft, - means for selecting, from a set of configuration tables stored in the protection and distribution device, a configuration table associated with the location of the protection and distribution device in the electrical power supply network of an aircraft, - means of receiving each other protection and cut-off device from a state table, - means of applying at least part of the state tables to a business rule determining whether the contactor of the protection and cut-off device must be open or closed, - means of controlling the contactor based on the result of the business rule, - means of transferring to each other protection and cut-off device an updated state table.

6. . Protection and distribution system included in a network of supply of electrical energy to an aircraft comprising a plurality of protection and distribution devices characterized in that the protection and distribution devices are connected to each other by at least one communication bus, each protection and distribution device comprises: - means of determining the location of the protection and distribution device in the electrical power supply network of an aircraft, - means for selecting, from a set of configuration tables stored in the protection and distribution device, a configuration table associated with the location of the protection and distribution device in the electrical power supply network of an aircraft, - means of receiving each other protection and cut-off device from a state table, - means for applying at least part of the state tables to a business rule determining whether the contactor of the protection and cut-off device must be open or closed, - means for controlling the contactor according to the result of the business rule, - means for transferring an updated state table to each other protection and cut-off device.

7. System according to claim 6, characterized in that the network comprises a plurality of voltage sources, a plurality of loads consuming electrical energy and a plurality of power supply buses and in that a protection and cut-off device is arranged between each voltage source and a power supply bus, a protection and cut-off device is arranged between each load and a power supply bus and at least one protection and cut-off device is arranged between two power supply buses.

8. Computer program product comprising instructions for implementing, by a processor, the method according to any one of claims 1 to 4, when said program is executed by said processor.

9. An information storage medium storing a computer program comprising instructions for implementing, by a processor, the method according to any one of claims 1 to 4, when said program is read and executed by said processor.

Images