METHOD AND DEVICE FOR MONITORING AN ELECTRICAL POWER SUPPLY NETWORK IN A TECHNICAL DOMAIN

Abstract

The present invention relates to a method and system for monitoring an aircraft's electrical power supply network, in which the electrical power supply network comprises a plurality of protection and distribution devices interconnected by at least one communication bus. According to the invention, each protection and distribution device: - determines its location in the network, - selects a configuration table associated with its location, - receives a state table from each other protection and switching device, - applies at least a portion of the state tables to a business rule determining whether a contactor of the protection and switching device should be open or closed, - controls the contactor according to the business rule, - transfers an updated state table to each other device. Figure to be published with the abstract: Fig. 3

Description

Title of the invention: METHOD AND DEVICE FOR MONITORING AN ELECTRICAL POWER SUPPLY NETWORK IN A TECHNICAL DOMAIN

[0001] The present invention relates to a method, a system and a device for monitoring an aircraft's electrical power supply network. STATE OF PRIOR ART

[0002] In the field of aeronautics, the electrical power supply to the various equipment of an aircraft is ensured by at least one electrical power source, preferably by several electrical power sources in order to compensate for a possible malfunction of one or more electrical power sources. Depending on the operation or malfunction of a power source, a contactor, or a load, a centralized monitoring system controls the opening or closing of remote contactors to reconfigure the electrical power supply network in order to isolate the malfunction and ensure the proper operation of the other elements connected to the electrical power supply network.

[0003] For security reasons, the centralized monitoring system is often duplicated.

[0004] The wiring and configuration of the various elements of the electrical power supply network lock the embedded software in the centralized monitoring system. This makes it difficult to upgrade the electrical power supply network over time. For each type or version of aircraft, it is necessary to develop a centralized monitoring system dedicated to configuring the various elements of the electrical power supply network.

[0005] Moreover, the maintenance of centrally controlled electrical power supply networks is also complex.

[0006] In particular, it is desirable to provide a solution that allows for more flexible management of an aircraft's electrical power supply network over time while reducing the wiring of the various elements of the electrical power supply network. Description of the invention

[0007] A method for managing and monitoring an aircraft's electrical power supply network is proposed, the electrical power supply network comprising a plurality of protection and distribution devices connected to each other by at least one communication bus, characterized in that the method comprises the following steps, executed by each protection and distribution device, of:

[0008] - determination of the location of the protection and distribution device in the electrical power supply network of an aircraft,

[0009] - selection, from a set of configuration tables stored in the device protection and distribution, a configuration table associated with the location of the protection and distribution device in the electrical power supply network of an aircraft,

[0010] - reception of each other protection and switching device from a state table,

[0011] - application of at least a part of the state tables to a business rule determining if A contactor of the protective and cutting-off device must be open or closed.

[0012] - control of the contactor based on the result of the business rule,

[0013] - transfer to each other protection and switching device of a state table update.

[0014] The invention also relates to a protection and distribution device included in an aircraft electrical power supply network comprising a plurality of protection and distribution devices interconnected by at least one communication bus, characterized in that the protection and distribution device comprises:

[0015] - means for determining the location of the protective device and distribution within an aircraft's electrical power supply network,

[0016] - means for selecting from a set of stored configuration tables in the protection and distribution system, of a configuration table associated with the location of the protection and distribution system in the electrical power supply network of an aircraft,

[0017] - means for receiving each other protection and disconnection device of a state table,

[0018] - means of applying at least a portion of the state tables to a business rule determining whether the contactor of the protective and disconnecting device should be open or closed,

[0019] - means for controlling the contactor according to the result of the business rule,

[0020] - means for transferring to each other protection and disconnection device updated status table.

[0021] The invention also relates to a protection and distribution system included in an aircraft electrical power supply network comprising a plurality of protection and distribution devices, characterized in that the protection and distribution devices are interconnected by at least one communication bus, each protection and distribution device comprising:

[0022] - means for determining the location of the protective device and distribution in the electrical power supply network of an aircraft,

[0023] - means for selecting, from a set of stored configuration tables in the protection and distribution system, of a configuration table associated with the location of the protection and distribution system in the electrical power supply network of an aircraft,

[0024] - means for receiving each other protection and disconnection device of a state table,

[0025] - means of applying at least a portion of the state tables to a business rule determining whether the contactor of the protective and disconnecting device should be open or closed,

[0026] - means for controlling the contactor according to the result of the business rule,

[0027] - means for transferring to each other protection and disconnection device a updated status table.

[0028] Thus, the present invention makes it possible to manage an aircraft's electrical power supply network more flexibly over time while reducing the wiring of the various elements of the electrical power supply network.

[0029] Furthermore, the present invention, by using the same type of protection and distribution device regardless of its location in the electrical power supply network, simplifies and simplifies the wiring of the electrical power supply network.

[0030] Monitoring the electricity supply network, thanks to its decentralized structure, reduces the complexity of the electricity supply network. Complexity is reduced by simplifying the cabling through the use of the communication bus.

[0031] According to a particular embodiment, the method further comprises a step of testing the integrity of the protection and distribution device and the steps of determination, selection, reception, application, ordering and transfer are executed if the integrity test is positive.

[0032] According to a particular embodiment, the business rule determining whether the contactor of the protection and switching device should be open or closed also takes into account at least one current and / or voltage measured by the protection and switching device and maximum and / or minimum values ​​of current and / or voltage included in the selected configuration table.

[0033] According to a particular embodiment, the process further comprises the steps of:

[0034] - checking whether an update of the configuration tables needs to be carried out,

[0035] - updating configuration tables prior to selection.

[0036] Thus the present invention makes it possible to adapt simply to possible modifications of the aircraft's electrical power supply network.

[0037] According to a particular embodiment, the network comprises a plurality of voltage sources, a plurality of loads consuming electrical energy and a plurality of power buses and a protection and switching device is disposed between each voltage source and a power bus, a protection and switching device is disposed between each load and a power bus and at least one protection and switching device is disposed between two power buses.

[0038] A program is also proposed that can be stored on a medium and / or downloaded from a communication network in order to be read by a processor. This program includes instructions for implementing the process carried out by each protection and distribution device, as mentioned above, when said program is executed by the processor. The invention also relates to an information storage medium for storing such a program. Brief description of the drawings

[0039] The features of the invention mentioned above, as well as others, will become clearer upon reading the following description of at least one exemplary embodiment, said description being made in relation to the accompanying drawings, among which:

[0040] [Fig.1] illustrates an example of an architecture of an aircraft electrical power supply network in which the monitoring of the aircraft electrical power supply network is ensured in a distributed manner by a plurality of protection and distribution devices;

[0041] [Fig.2] illustrates an example of the architecture of a protection and dis contribution according to the present invention;

[0042] [Fig.3] illustrates an example of an algorithm executed by each protection device and distribution according to the present invention;

[0043] [Fig.4] illustrates a particular example of a simplified network architecture supplying electrical power to an aircraft according to the present invention.

[0044] DETAILED DESCRIPTION OF EMBODIMENT METHODS

[0045] Fig. 1 illustrates an example of an aircraft electrical power supply network architecture in which the monitoring of the aircraft electrical power supply network is ensured in a distributed manner by a plurality of protection and distribution devices.

[0046] In the example of [Fig.1], the aircraft's electrical power supply network comprises two voltage sources Soi and So2, four loads Chi to Ch4 and a plurality of protection and distribution devices CPi to CP8 also called C / P modules.

[0047] The protection and distribution devices CPi to CP8 are connected to each other by two communication buses BCEI and BCEI2. The BCEI and BCEI2 communication buses are identical and there are two of them for reliability reasons in case one of them fails.

[0048] The Bcei and Bce2 communication buses allow data exchange between the CPi to CP8 protection and distribution devices and are respectively connected by an interface to an aircraft communication system not shown in [Fig. 1].

[0049] The protection and distribution devices CPi to CP8 are powered by two power supplies Alii and Ali2.

[0050] The Alii and Ali2 power supplies are connected to external aircraft power supplies not shown in [Fig.1].

[0051] In a particular mode, an analog I / Fa interface is connected to the Bcei and Bce2 communication buses. The analog I / Fa interface allows data exchange with sensors or actuators of the aircraft.

[0052] In a particular mode, a discrete I / Fd interface is connected to the Bcei and Bce2 communication buses. The discrete I / Fd interface allows the exchange of data with aircraft control or notification elements.

[0053] A BI isolation barrier provides galvanic isolation between the electrical power supply network and other electrical components of the aircraft.

[0054] The protection and distribution device CPi is connected to the voltage source Soiet, depending on the state of the contactor it contains internally, connects or not a positive termination of the voltage source Soi to a positive supply bus Ali+.

[0055] The connection between the positive termination of the voltage source Soi and the positive supply bus Alu is denoted L1 and the connection between the negative termination of the voltage source Soi and the negative supply bus Alb is denoted L2.

[0056] A negative termination of the voltage source Soi is connected to a negative supply bus Alb.

[0057] The protection and distribution device CP2 is connected to the voltage source So2 and, depending on the state of the contactor it contains internally, connects or not a positive termination of the voltage source So2 to a positive supply bus Al2+.

[0058] A negative termination of the voltage source So2 is connected to a negative supply bus Al2.

[0059] The CP3 and CP4 protection and distribution devices allow, depending on the state of the contactor they contain internally, to connect or not the positive supply buses Ab+ and Al2+.

[0060] The CP5 protection and distribution device is connected to the load Chi and, depending on the state of the contactor it contains internally, connects or not a positive termination of the load Chi to the positive supply bus Ah+.

[0061] The CP6 protection and distribution device is connected to the Ch2 load and, according to the state of the contactor it contains internally connects or not a positive termination of the Ch2 load to the positive supply bus Ali+.

[0062] The CP7 protection and distribution device is connected to the Ch3 load and, depending on the state of the contactor it contains internally, connects or not a positive termination of the Ch3 load to the positive supply bus Al2+.

[0063] The CP8 protection and distribution device is connected to the Ch4 load and, depending on the state of the contactor it contains internally, connects or not a positive termination of the Ch4 load to the positive supply bus Al2+.

[0064] Fig. 2 illustrates an example of the CPp protection and distribution device.

[0065] It should be noted here that the CPi to CP8 protection and distribution devices have an identical architecture.

[0066] The CPi protection and distribution device includes a microcontroller 200, a programming interface 201, a power supply module 202, an analog interface 203, a power control stage 204, a contactor 250, a communication interface 210 and an interface 206 for obtaining the status of the contactor 250.

[0067] The interface 206 for obtaining the status of contactor 250 includes an auxiliary contactor (not shown in [Fig. 2]) which is controlled by the coil that controls contactor 250. When contactor 250 is closed, the auxiliary contactor is also closed. When contactor 250 is open, the auxiliary contactor is also open. For example, when the auxiliary contactor is closed, a high logic level is present on an input of the interface for obtaining the status of contactor 250. When the auxiliary contactor is open, a low logic level is present on the input of the interface for obtaining the status of contactor 250.

[0068] The microcontroller 200 includes, not shown in [Fig.2], a RAM (Random Access Memory); a ROM (Read Only Memory) or a Flash memory; and at least one set of input / outputs.

[0069] The microcontroller 200 is capable of executing instructions loaded into RAM from ROM, or from one of the Bcei or Bcei communication buses. When the microcontroller 200 is powered on, it can read instructions from RAM and execute them. These instructions form a program that causes the microcontroller 200 to implement all or part of the behaviors of the algorithm and steps described herein.

[0070] Thus, all or part of the algorithms and steps described herein can be implemented in software form by executing a set of instructions by a programmable machine, such as a DSP (Digital Signal Processor) or the 200 microcontroller. All or part of the algorithms and steps described herein can also be implemented implemented in hardware form by a machine or component (a "chip"), such as an FPGA (Field-Programmable Gate Array) or an ASIC (Application-Specific Integrated Circuit). Thus, the 200 microcontroller includes electronic circuitry adapted and configured to implement the behaviors, algorithm, and steps described below.

[0071] The ROM memory contains a plurality of closing or opening equations for contactor 250.

[0072] Each business rule, also called an operating, closing, or opening rule for contactor 250, corresponds to an assignment of the protection and distribution device in the aircraft's electrical power supply network. Each business rule for closing or opening the contactor takes into account the state of at least some of the contactors included in the other protection and distribution devices of the aircraft's electrical power supply network. Each closing business rule is contained in a separate configuration table.

[0073] The programming interface 201 allows the assignment, in other words the position of the protection and distribution device, to be indicated by means of programming pins.

[0074] The power supply module 202 allows the protection and distribution device to be powered from the Alii or Ali2 power supplies.

[0075] Through the analog interface 203, the microcontroller 200 receives voltage and / or current measurements taken in the L1 and L2 links.

[0076] The power control stage 204 allows the opening or closing of the contactor 250 to be controlled.

[0077] The interface 206 for obtaining the state of the contactor 250 allows the microcontroller 200 to know what state the contactor 250 is in.

[0078] Through the communication interface 210, the microcontroller 200 transfers, on the Bcei or Bce2 communication bus, state tables of the contactor 250 to each protection and distribution device and receives, from each protection and distribution device and via the Bcei or Bce2 communication bus, state tables of their respective contactor.

[0079] Figure 3 illustrates an example of an algorithm executed by each device of protection and distribution according to the present invention.

[0080] The present algorithm is, for example, executed with a periodicity on the order of milliseconds.

[0081] The present algorithm is described in an example in which it is executed by the CPi protection and distribution device.

[0082] At step E300, the microcontroller 200 checks whether the aircraft is on the ground. The microcontroller 200 is informed of the aircraft's presence on the ground via the bus Bcei or Bce2 communication or via the discrete I / Fd interface.

[0083] If yes, the microcontroller 200 proceeds to step E301. If no, the microcontroller 200 proceeds to step E302.

[0084] At step E301, the microcontroller performs an integrity test of the operation of the protection and distribution device.

[0085] The integrity test consists for example of a check of the consistency of the inputs, of the outputs of the analog acquisition chain included in the analog interface 203, of the proper functioning of the communication interface 210, of the communication buses and of the proper access to the memory.

[0086] At step E302, the microcontroller 200 checks whether the integrity test is negative. If the integrity test is negative, the microcontroller 200 proceeds to step E312.

[0087] If the integrity test is positive, the microcontroller 200 proceeds to step E303.

[0088] At step E303, the microcontroller 200 obtains from interface 201 a binary word indicating the assignment of the protection and distribution device. The binary word is defined by microswitches or jumpers or a given wiring.

[0089] At step E304, the microcontroller 200 checks whether a software download needs to be performed. For example, a software download is notified to the protection and distribution device via the Bcei or Bce2 communication bus.

[0090] If yes, the microcontroller 200 proceeds to step E305. If no, the microcontroller 200 proceeds to step E306.

[0091] At step E305, the microcontroller 200 proceeds to download the software via the Bcei or Bce2 communication bus.

[0092] At step E306, the microcontroller 200 reads the configuration table associated with the binary word indicating the assignment of the protection and distribution device.

[0093] The configuration table includes, for example, information indicating whether a voltage measurement and / or one or more current measurements should be carried out, a tripping current, a maximum difference between the currents flowing in lines L1 and L2, a minimum value of the voltage measured between lines L1 and L2, a maximum value of the voltage measured between lines L1 and L2, a business rule determining whether contactor 250 should be open or closed.

[0094] In the next step E307, the microcontroller 200 obtains from the communication interface 210, data received via the I / Fd interface from aircraft control or notification elements and, for each other protection and distribution device CP2 to CP8, a state table of the contactor of the protection and distribution device CP2 to CP8.

[0095] In the next step E308, the microcontroller 200 obtains from the analog interface, according to the contents of the configuration table, at least one current measurement and / or tension.

[0096] In the next step E309, the microcontroller 200 checks whether the measurements obtained in step E308 are compatible with the minimum and maximum values ​​included in the configuration table.

[0097] If the measurements obtained are compatible with the minimum and maximum values ​​included in the configuration table, the microcontroller 200 proceeds to step E310.

[0098] If not, the microcontroller 200 proceeds to step E313.

[0099] At step E310, the microcontroller 200 uses the measured current, the tripping current, the state tables of at least some of the protection and distribution devices CP2 to CP8 and applies these to the business rule determining whether the contactor 250 should be open or closed.

[0100] At step E311, the microcontroller 200 commands the power control stage 204 to apply to the contactor 250, the state obtained from the business rule determining whether the contactor 250 should be open or closed.

[0101] At step E312, the microcontroller 200 commands the transfer via the communication interface 210 of the updated state table with the state obtained from the business rule determining whether the contactor 250 should be open or closed.

[0102] At step E313, the microcontroller 200 considers that the CPi protection and distribution device is faulty and updates the state table.

[0103] If the communication interface 210 is operational, at step E314, the microcontroller 200 commands the transfer via the communication interface 210 of the updated state table with the state obtained from the business rule determining whether the contactor 250 should be open or closed.

[0104] Figure 4 illustrates a particular example of a simplified architecture of an aircraft electrical power supply network according to the present invention.

[0105] In the example of [Fig.4], only two voltage sources Sor and So2-, two loads Chr and Ch2-, two positive supply buses Alr+ and Al[2+ and five protection and distribution devices CPr to CP5' are shown.

[0106] The protection and distribution device CPr is arranged between the voltage source Sor and the positive supply bus Alr+.

[0107] The protection and distribution device CP2 is arranged between the voltage source So2- and the positive supply bus Al2+.

[0108] The CP3' protection and distribution device is arranged between the positive supply bus AU+ and the Chr load.

[0109] The protection and distribution device CP4 is arranged between the positive supply bus Al2+ and the load Ch2.

[0110] The protection and distribution device CP5' is arranged between the positive supply bus AU+ and the positive supply bus Al2+.

[0111] In conventional operation, the contactor of the protection and distribution device CPi' is closed, the contactor of the protection and distribution device CP2' is closed, the contactor of the protection and distribution device CP3 is closed, the contactor of the protection and distribution device CP4 is closed and the contactor of the protection and distribution device CP5' is open.

[0112] The result of the business rule for closing the contactor of the protection and distribution device CP5' is closing the contactor if the contactor of the protection and distribution device CPr is open, the contactor of the protection and distribution device CP2' is closed, the contactor of the protection and distribution device CP3' is closed, and the contactor of the protection and distribution device CP4- is closed.

[0113] If the CP protection and distribution device detects a voltage delivered by the voltage source Sor that is lower than a maximum value, it commands the opening of its contactor and transfers an updated state table.

[0114] When the CP5' protection and distribution device receives the updated state table from each CPi CP4 protection and distribution device, the CP5' protection and distribution device applies this to the business rule determining whether the 250 contactor should be open or closed, commands the power stage to close the contactor and transfers an updated state table.

[0115] The present invention is described in an environment where the voltage sources are direct current. The present invention is also applicable when the voltage sources provide alternating current.

Claims

Demands

1. A method for monitoring an aircraft electrical power supply network in which the electrical power supply network comprises a plurality of protection and distribution devices interconnected by at least one communication bus, characterized in that the method comprises the steps, performed by each protection and distribution device, of: - determining the location of the protection and distribution device in the aircraft electrical power supply network, - selecting, from a set of configuration tables stored in the protection and distribution device, a configuration table associated with the location of the protection and distribution device in the aircraft electrical power supply network, - receiving from each other protection and switching device a state table,- application of at least a portion of the state tables to a business rule determining whether a contactor of the protection and switching device should be open or closed, - control of the contactor according to the business rule - transfer of an updated state table to each other protection and switching device.

2. Method according to claim 1, characterized in that the business rule determining whether the contactor of the protection and switching device should be open or closed further takes into account at least one current and / or voltage measured by the protection and switching device and maximum and / or minimum values ​​of current and / or voltage included in the selected configuration table.

3. A method according to any one of claims 1 to 2, characterized in that the method further comprises the steps of: - checking whether an update of the configuration tables needs to be made, - updating the configuration tables prior to selection.

4. A method according to any one of claims 1 to 3, characterized in that the method further comprises a step of testing the integrity of the protection and distribution device and in that the steps of determination, selection, reception, application, control and transfer are carried out if the integrity test is positive.

5. A protection and distribution device included in an aircraft electrical power supply network comprising a plurality of protection and distribution devices interconnected by at least one communication bus, characterized in that the protection and distribution device comprises: - means of determining the location of the protection and distribution device within the electrical power supply network of an aircraft, - means for selecting, from a set of configuration tables stored in the protection and distribution device, a configuration table associated with the location of the protection and distribution device in the electrical power supply network of an aircraft, - means for receiving each other protection and switching device from a state table, - means of applying at least part of the state tables to a business rule determining whether the contactor of the protection and switching device should be open or closed, - means of controlling the contactor based on the result of the business rule, - means of transferring an updated state table to each other protection and switching device.

6. . Protection and distribution system included in a network of electrical power supply to an aircraft comprising a plurality of protection and distribution devices characterized in that the protection and distribution devices are interconnected by at least one communication bus, each protection and distribution device comprising: - means of determining the location of the protection and distribution device within the electrical power supply network of an aircraft, - means for selecting, from a set of configuration tables stored in the protection and distribution device, a configuration table associated with the location of the protection and distribution device in the electrical power supply network of an aircraft, - means for receiving each other protection and switching device from a state table, - means of applying at least part of the state tables to a business rule determining whether the contactor of the protection and switching device should be open or closed, - means of controlling the contactor according to the result of the business rule, - means of transferring an updated state table to each other protection and switching device.

7. System according to claim 6, characterized in that the network comprises a plurality of voltage sources, a plurality of loads consuming electrical energy and a plurality of power buses and in that a protection and switching device is disposed between each voltage source and a power bus, a protection and switching device is disposed between each load and a power bus and at least one protection and switching device is disposed between two power buses.

8. Product computer program comprising instructions for implementing, by a processor, the method according to any one of claims 1 to 4, when said program is executed by said processor.

9. Information storage medium storing a computer program comprising instructions for implementing, by a processor, the method according to any one of claims 1 to 4, when said program is read and executed by said processor.