Device for multichannel analysis of a sensor

Abstract

The invention provides a device for the multichannel analysis of a sensor, comprising an output line for emitting an excitation signal for a sensor that can be coupled to the device, an input line for receiving a feedback signal emitted by the sensor that can be coupled, a first control electronics unit with an output channel for emitting the excitation signal and an input channel for receiving and analyzing the feedback signal emitted by the sensor, a second control electronics unit with an output channel for emitting the excitation signal and an input channel for receiving and analyzing the feedback signal emitted by the sensor, a first isolation device, which is provided in a connection between the output channel of the first control electronics unit and the output line and which, in an active state, electrically isolates the output channel of the first control electronics unit from the output line, and comprises a second isolation device.which is provided in a connection between the output channel of the second control electronic and the output line and which, in an active state, electrically isolates the output channel of the second control electronic from the output line, in which the first and second control electronic are designed redundantly with respect to each other, and the input channel of the first and second control electronic are each connected to the input line.

Description

Title of the invention: Device for multichannel analysis of a sensor

[0001] The present invention relates to a device for the multichannel analysis of a sensor.

[0002] Sensor analysis plays a decisive role, particularly in modern aeronautical technology, such as in aircraft primary flight control systems. These sensors are, among other things, of fundamental importance for the precise detection of an aircraft's state and the precise manipulation of flight controls such as flaps, control surfaces, and other critical components.

[0003] Reliability is of great importance here for the error-free operation of a sensor or for the error-free processing of the values ​​detected by the sensor in many application areas. To achieve this, several redundant channels are provided to guide the signaling electronics in order to control an actuator or similar device. It is therefore necessary that the information generated by the sensor be made available to each of the multiple channels.

[0004] For example, US patent 4,622,667 A describes a digital, safety-integrated automatic flight control system with redundant and heterogeneous data processing, in which a sensor unit has a separate data line for each of the two redundantly provided analysis electronics. Thus, if, for example, double redundancy is provided with respect to the sensor's analysis or control electronics, the number of data lines from the sensor unit to the redundantly designed analysis or control electronics also doubles. In the case of triple redundancy, the number of data lines triples accordingly, as does, where applicable, the number of sensors required, so that the installation effort and complexity, weight, and resulting costs also increase.This results from the direct correlation described above between the number of data lines linking the sensor and the associated redundant analysis and control electronics, and the desired redundancy.

[0005] The objective of the present invention is to overcome or mitigate the aforementioned drawbacks or problems of the prior art. This is achieved with a device according to claim 1, the advantageous embodiments of the invention being recorded in the dependent claims.

[0006] According to the invention, a device for multichannel analysis of a sensor is provided, comprising an output line for emitting an excitation signal for a sensor that can be coupled to the device, and an input line for receiving a feedback signal. emitted by the sensor, which can be coupled, a first electronic control module with an output channel for emitting the excitation signal and an input channel for receiving and analyzing the feedback signal emitted by the sensor, a second electronic control module with an output channel for emitting the excitation signal and an input channel for receiving and analyzing the feedback signal emitted by the sensor, a first isolation device provided in a connection between the output channel of the first electronic control module and the output line and which, in an active state, electrically isolates the output channel of the first electronic control module from the output line, and includes a second isolation device provided in a connection between the output channel of the second electronic control module and the output line and which, in an active state,electrically isolates the output channel of the second electronic control module from the output line, the first and second electronic control modules being designed redundantly with respect to each other, and the input channel of the first electronic control module and the input channel of the second electronic control module each being connected to the input line.

[0007] Thanks to the device according to the invention, the number of sensors required is reduced without compromising the redundancy of the control electronics. This is achieved by providing a redundant design for the output line to drive a sensor that can be coupled to the device and a redundant routing of the lines from the device's input to the two control electronics. To prevent more than one of the two control electronics from driving the coupled sensor, a separate isolation device is provided for each of the two control electronics, which, in an active state, prevents an excitation signal from the associated control electronics from being sent to the device's output, or to the device's output line, respectively. Instead, the connection to the output, or to the output line and the corresponding control electronics, is cut, or electrically isolated, respectively.

[0008] According to an optional improvement of the present invention, it may be provided that the first electronic control module and the second electronic control module are provided with a respective synchronization input, which is connected to the output line to receive an excitation signal emitted on the output line.

[0009] For correct analysis in an electronic control module, it may be advantageous to know the exact moment of sensor excitation, in response to which the sensor returns a sensor value or a sequence of sensor values ​​via the device's input channel, because, for example, an analysis algorithm depends on correct synchronization with the excitation signal. To perform a correct analysis of the feedback signal sent by the sensor via the input channel, even if the isolation device associated with a control electronic module were to be in the active state (i.e., electrically interrupting the output channel), the synchronization input of each of the two control channels must be connected to the output channel of the device. Thus, the synchronization of the excitation signal (regardless of which of the two control electronics emitted the excitation signal) is also recognized when the output channel of a control electronic module is effectively isolated or electrically separated from the output channel by the isolation device.

[0010] Advantageously, it can be provided that each of the synchronization inputs has a high impedance input resistance so as not to distort an excitation signal of the output line, preferably the high impedance input resistance being made with an operational amplifier.

[0011] The high-impedance input resistance means that there is no influence on the state of the line to which the synchronization input is connected. This allows other components, such as the other electronic control module, to control the line or drive the sensor without being affected by the high-impedance component.

[0012] According to an advantageous modification of the present invention, it may be provided that each of the two input channels has a high impedance input resistance in order not to distort a return signal from the sensor, preferably the high impedance input resistance being made with an operational amplifier.

[0013] According to another advantageous improvement of the present invention, it may be provided that the first isolation device and the second isolation device are each designed to be able to take, in addition to an active state, also an inactive state in which the respective output channel is connected to the output line.

[0014] Preferably, it may be provided that the first isolation device and the second isolation device are each made by a switch or an electrical component which can take a "tristate" state.

[0015] A "tristate" state (also known as three-state or high-impedance state) refers to a special property of an electronic component, particularly advantageous in digital circuits such as integrated circuits and drivers. Normally, the outputs of digital circuits have two states: high (H) and / or low (L), the tristate state being another possible output state in which the output is neither high nor low, but "high impedance" (Z).

[0016] According to another advantageous modification of the present invention, it may be provided that the first insulation device and / or the second insulation device are each implemented by a switch and an operational amplifier, so that even in an inactive state with the switch closed, the input resistance is designed to be high impedance.

[0017] According to an optional improvement of the present invention, it may further be provided that the first isolation device and the second isolation device are each designed to switch between an active state and an inactive state, in which, in an inactive state, the output channel of the associated electronic control module is connected to the output line.

[0018] Furthermore, according to the present invention, it may be provided that a switching unit is provided, which is designed to switch at least one of the two isolation devices into an active state, so that it cannot happen that the two isolation devices are simultaneously in the inactive state.

[0019] The switching unit determines which of the two control electronics, designed redundantly with respect to each other, is in an active state, in which the generated excitation signal is effectively applied to the output line to drive the sensor. The excitation signal from the other control electronic module is also generated, but is not transmitted to the output line or the sensor because the isolation device is active. If the switching unit detects a faulty state in the active control electronic module, it switches the control electronic modules so that the control electronic module considered to be without fault takes over the actual excitation of the sensor.To achieve this, the isolation device associated with the electronic control module considered faulty is put into an active state (electrical isolation), and the previously redundant electronic control module is used to excite or drive the sensor (by deactivating the isolation device). This occurs because the associated isolation device is transferred to an inactive state, in which it changes from an electrically insulating state to an electrically conductive state.

[0020] It can be advantageously provided here that the switching unit is designed to monitor the proper functioning of the first electronic control module and the second electronic control module and, in the event of detection of a defective state of the first electronic control module and / or the second electronic control module, to electrically separate the defective first electronic control module and / or the second electronic control module, more particularly their output channel, from the sensor by activating the associated isolation device.

[0021] According to another advantageous modification of the present invention, the switching unit may be designed to perform a comparison of signals are emitted by the first and second electronic control modules on their respective output channels. The switching unit can then perform a check of the different control modules to determine whether one of them is faulty. Based on this, the switching unit can switch between the two control modules, which are designed to be redundant with respect to each other. The associated isolation devices are advantageously switched from an active to an inactive state, or vice versa.

[0022] According to an optional modification of the present invention, it may be provided that a single output line is provided to transmit the excitation signal and / or that a single input line is provided to receive the return signal from the sensor.

[0023] This ensures that for the integration of the device with several control electronics designed redundantly with respect to each other, only one output line and one return line need to be provided between the device and the sensor to be coupled. This also applies when a redundancy greater than double redundancy of control electronics is provided, so that, in this case as well, only one line to transmit the excitation signal to the sensor and one line to return the measured sensor value are required. Contrary to the prior art, it is not necessary here for each redundantly designed control electronic module to have its own signal path to the sensors or its own sensor.

[0024] The invention further relates to a system comprising a sensor and a device according to one of the aspects discussed above, in which an excitation signal received by the sensor via the output line causes the sensor to output a measured sensor value via the input line.

[0025] The invention further relates to a system, in which the system is part of a flight control system of an aircraft.

[0026] The invention further relates to an aircraft comprising a device according to one of the aspects discussed above or comprising a system according to one of the aspects discussed above.

[0027] Other features, details and advantages of the invention will become apparent from the description of the following figures, which show:

[0028] [Fig-1]: a schematic representation of a device according to the invention for multichannel analysis of a sensor.

[0029] Figure 1 shows a schematic representation of device 1 according to the invention. Device 1 is here connected to a sensor 2, designed to detect a certain sensor value and transmit it to device 1.

[0030] Device 1 has, for exciting sensor 2, an output line 3 by which sensor 2 is informed that device 1 wishes to receive the sensor value detected by sensor 2. A person skilled in the art understands that the excitation signal does not only refer to a single sensor value, but can also include a sequence of several successive sensor values ​​in time.

[0031] After sensor 2 has been excited accordingly via output line 3 of device 1, sensor 2 samples the corresponding sensor value and transmits it via input line 4 to device 1.

[0032] To provide redundancy in the control electronics of device 1, there is a first electronic control module 5 and a second electronic control module 6, which is redundant with respect to the first. Each of the two electronic control modules 5 and 6 has an output channel 5A and 6A, each designed to send the excitation signal via the output line 3 to the sensor 2.

[0033] In addition, each electronic control module 5, 6 has an input channel 5B, 6B for receiving signals from the sensor on the input line 4. The electronic control module considered 5, 6 is further designed to process the sensor value received from the sensor 2 accordingly.

[0034] In order to prevent there being more than two lines, namely the output line 3 and the input line 4, between the device 1 and the sensor 2, a cutting and isolation mechanism is provided in the device 1, implemented using a first isolation device 7 and a second isolation device 8. The first isolation device 7 is arranged between the output channel 5A of the first electronic control module 5 and the output line 3 of the device 1, while the second isolation device 8 is provided between the output channel 6A of the second electronic control module 6 and the output line 3 of the device 1.

[0035] The isolation device 7, 8 can selectively break or close the connection between the input channel 5A, 6A and the output line 3. In the normal operating state of device 1, one of the two isolation devices 7, 8 is activated, thus breaking the electrical connection, and the other of the two isolation devices 7, 8 is closed. This ensures that only one of the two control electronics 5, 6 is connected to the output line 3 with its associated output channel 5A, 6A, so that the sensor 2 receives only one excitation signal. Therefore, it is impossible for both control electronics 5, 6 to simultaneously send their respective excitation signals to the output line 3, since at least one of the two isolation devices 7, 8 is active and thus interrupts a corresponding line connection.

[0036] This allows for the advantage that a single sensor is sufficient, even though the electronic control modules are designed to be redundant with respect to each other. Traditionally, in the prior art, it was proposed that for a redundant design of the electronic control module, a redundant design of sensor 2 is also necessary.

[0037] Reference numbers 9 and 10 denote an input circuit of a respective input channel 5B, 6B having a high impedance, such that none of the feedback information sent by the sensor to the device 1, or to the electronic control module 5, 6, can be distorted. For example, such a high-impedance input circuit can be implemented with an operational amplifier.

[0038] In addition, a synchronization channel is recognized which sends an excitation signal from the output line 3 to each of the two control electronics 5, 6.

[0039] This allows the inactive electronic control module 5, 6, whose isolation device 7, 8 is active and ensures electrical separation of the output channel 5A, 6A from the output line 3, to receive an excitation signal from the active electronic control module 5, 6, in order to use it for synchronizing a response from the sensor 2. Here too, it can be provided that the circuit for routing the signal to the considered electronic control module 5, 6 is a high-impedance circuit, in order to avoid possible tampering.

[0040] A switching unit not shown is designed to control the two isolation devices 7, 8, so that it decides which of the two control electronics 5, 6 actually communicates with the sensor 2 via the output line 3. The switching unit can here monitor the proper functioning status of the two control electronics 5, 6 and, if a defective state is detected, control the isolation devices 7, 8 accordingly, in order to effect a change of the control electronic module 5, 6 connected to the sensor via the output line 3.

[0041] The switching unit may also be able to monitor the output channel 5A, 6A of the inactive electronic control module 5, 6, whose isolation device 7, 8 is active, and to perform a comparison with the signaling on the output line 3. If a discrepancy is found, this may, among other things, lead to a change of the active electronic control module by modifying the circuit of the respective isolation devices 7, 8.

[0042] Furthermore, those skilled in the art will understand that the switching unit can also check whether one or both of the control electronics 5, 6 have failed, are functioning normally, or are malfunctioning. Thus, the switching unit can anticipate that in the event of a failure of the first control electronic module 5, the second control electronic module 6 will take over. This is achieved by activating the isolation device 7 associated with the first control electronic module 5, so that the connection to the output line 3 is interrupted from the output channel 5A. In addition, the isolation device 8 of the second control electronic module 6 is deactivated, so that the former The electrical separation is lifted and the active electronic control module 5, 6 has been replaced. A device 1, schematically represented in [Fig. 1], is used in a flight control system, remote control electronics, or signaling electronics for a propulsion system. In all these areas, high availability of the electronics is essential, making the provision of multiple control channels advantageous.

[0043] List of reference points 1 - Device 2 - Sensor 3 - Outgoing line 4 - Entry line 5 - First electronic control module 5A - Output channel of the first electronic control module 5B - Input channel of the first electronic control module 5C - Synchronization channel of the first electronic control module 6 - Second electronic control module 6A - Output channel of the second electronic control module 6B - Input channel of the second electronic control module 6C - Synchronization channel of the second electronic control module 7 - -First insulation device 8 - Second insulation device 9 - Operational amplifier for high-impedance input resistance of the first electronic control module 10 - Operational amplifier for high-impedance input resistance of the second electronic control module

Claims

Demands

1. Device (1) for the multichannel analysis of a sensor (2), comprising: - an output line (3) for emitting an excitation signal for a sensor (2) that can be coupled to the device (1), - an input line (4) for receiving a feedback signal emitted by the sensor (2) that can be coupled, - a first electronic control module (5) with an output channel (5A) for emitting the excitation signal and an input channel (5B) for receiving and analyzing the feedback signal emitted by the sensor (2), - a second electronic control module (6) with an output channel (6A) for emitting the excitation signal and an input channel (6B) for receiving and analyzing the feedback signal emitted by the sensor (2), - a first isolation device (7), which is provided in a connection between the output channel (5A) of the first electronic control module (5) and the output line (3) and which, in an active state,electrically isolates the output channel (5A) of the first electronic control module (5) from the output line (3), and - a second isolation device (8), which is provided in a connection between the output channel (6A) of the second electronic control module (6) and the output line (3) and which, in an active state, electrically isolates the output channel (6A) of the second electronic control module (6) from the output line (3), in which - the first electronic control module (5) and the second electronic control module (6) are designed to be redundant with respect to each other, and - the input channel (5B) of the first electronic control module (5) and the input channel (6B) of the second electronic control module (6) are each connected to the input line (4).

2. Device (1) according to claim 1, wherein the first electronic control module (5) and the second electronic control module (6) are provided with a respective synchronization input (5C, 6C), which is connected to the line of output (3) to receive an excitation signal emitted on the output line (3).

3. Device (1) according to claim 2, wherein each of the synchronization inputs (5C, 6C) has a high impedance input resistance so as not to distort an excitation signal from the output line (3), preferably the high impedance input resistance being made with an operational amplifier (9, 10).

4. Device (1) according to any one of the preceding claims, wherein each of the two input channels (5B, 6B) has a high impedance input resistance so as not to distort a return signal from the sensor (2), preferably the high impedance input resistance being made with an operational amplifier (9, 10).

5. Device (1) according to any one of the preceding claims, wherein the first isolation device (7) and the second isolation device (8) are each designed to be able to take, in addition to an active state, also an inactive state in which the respective output channel (5A, 6A) is connected to the output line (3).

6. Device (1) according to any one of the preceding claims, wherein the first isolation device (7) and the second isolation device (8) are each realized by a switch or an electrical component which can take a tristate state.

7. Device (1) according to any one of the preceding claims, wherein the first isolation device (7) and / or the second isolation device (8) are each made by a switch and an operational amplifier, so that even in an inactive state with the switch closed, the input resistance is designed to be high impedance.

8. Device (1) according to any one of the preceding claims, wherein the first isolation device (7) and the second isolation device (8) are each designed to switch between an active state and an inactive state, wherein, in an inactive state, the output channel (5A, 6A) of the associated control electronics (5, 6) is connected to the output line (3).

9. Device (1) according to any one of the preceding claims, wherein a switching unit is provided, designed to switch at least one of the two isolation devices (7, 8) into an active state, so that it cannot happen that both isolation devices (7, 8) are simultaneously in the inactive state.

10. Device (1) according to claim 9, wherein the switching unit is designed to monitor the proper functioning of the first electronic control module (5) and the second electronic control module (6) and, in the event of detection of a defective state of the first electronic control module (5) and / or the second electronic control module (6), to electrically isolate the first electronic control module (5) and / or the second electronic control module (6), to activate the defective electronic control module(s) (5, 6), more particularly their output channel (5A, 6A), from the sensor (2) by activating the associated isolation device (7, 8).

11. Device (1) according to claim 9 or 10, wherein the switching unit is designed to perform a comparison of the signals emitted by the first electronic control module (5) and the second electronic control module (6) on their respective output channel (5A, 6A).

12. Device (1) according to any one of the preceding claims, wherein a single output line (3) is provided for transmitting the excitation signal and / or a single input line (4) is provided for receiving the return signal from the sensor (2).

13. System consisting of a sensor (2) and a device (1) according to any one of the preceding claims, wherein an excitation signal received by the sensor (2) via the output line (3) causes the sensor (2) to output a measured sensor value via the input line (4).

14. System according to the preceding claim, wherein the system is part of an aircraft flight control system.

15. Aircraft comprising a device (1) according to any one of claims 1 to 12 or comprising a system according to any one of claims 13 or 14.

Images