27 results about "Common mode failure" patented technology

The invention discloses an actuator control electronic unit, a fly-by-wire control system and a control method. An actuator control electronics (ACE) architecture may include a normal mode partition and a direct mode partition. The normal mode partition of the ACE processes a normal mode / auxiliary mode control surface control instruction transmitted by the FCM and transmits the normal mode / auxiliary mode control surface control instruction to the ACE direct mode partition, and the ACE direct mode partition verifies the normal mode / auxiliary mode control surface control instruction; and an effective normal mode / auxiliary mode control surface control instruction or an effective direct mode control surface control instruction is transmitted to a remote control unit (REU), so that the ACE common mode fault problem in a flight control system can be avoided as far as possible.

This invention discloses an electromechanical braking system and its control method based on heterogeneous motor redundancy, relating to the field of brake-by-wire technology for new energy vehicles. The system includes the following steps: During vehicle braking, a permanent magnet synchronous motor (PMSM) acts as the main drive source, outputting braking torque, while a switched reluctance motor (SRM) operates in standby or low-power auxiliary mode, forming a heterogeneous motor redundant drive structure. This invention achieves complementary failure modes and reduces the risk of common-mode failures by employing a heterogeneous redundancy structure of a PMSM and a SRM; simultaneously, it optimizes system economy by utilizing the low cost and low standby energy consumption characteristics of the SRM. A deep learning health prediction model is introduced to achieve early fault prediction and proactive switching, and a rapid, seamless switching mechanism within 20ms ensures braking continuity and system safety.

The application discloses a power device system, a communication architecture of a display and warning system and an aircraft. The application establishes a second communication path independent of an avionics system by increasing an engine interface control unit to directly connect the display and warning system, so as to avoid the risk of abnormal display of engine parameters caused by a single communication architecture. In addition, a comparison between signals of a first signal source of a comprehensive modular avionics and signals of a second signal source of the engine interface control unit and the identification of a common mode failure of the avionics network in combination with other engine conditions can avoid the problem of abnormal display of engine parameters caused by the common mode failure of the avionics network.

The embodiment of the application discloses a power supply configuration architecture of a redundant airborne system, wherein at least four redundant devices are included in the redundant airborne system, a power supply system includes at least two power supply subsystems and professional accumulators, each power supply subsystem has two power supply bus bars, including a main bus bar and an emergency bus bar; the power supply configuration architecture includes: two devices in the power supply configuration architecture are connected with the professional accumulators respectively, one of the two devices is connected with one power supply bus bar in one power supply subsystem, and the other device is connected with one power supply bus bar in the other power supply subsystem; the other two devices are connected with the main bus bar in one power supply subsystem and the emergency bus bar in the other power supply subsystem respectively. The technical scheme provided by the embodiment of the application solves the problem that the existing power supply configuration scheme of the redundant airborne system is difficult to have both the power supply common-mode fault mitigation requirement and the high task reliability level.

The application discloses a push method and system of quality defect report processing measures based on historical experience. The method comprises the following steps: establishing a structured database; analyzing the text of the database by using natural language processing technology, extracting key technical features, and constructing a quality defect report keyword library; converting the features of the current quality defect report into a numerical vector, which comprises function position coding, key degree classification, safety classification, key sensitive device type, quality defect report filling condition, whether it is a nuclear grade device and affects its safety function, whether it is a major repair work order that needs technical discussion, and whether it is a common mode failure; calculating the similarity between the current quality defect report and the historical quality defect report, and selecting the top set value of historical quality defect reports with the highest similarity; calculating the comprehensive weight; and recommending the processing measures according to the comprehensive weight order. The application improves the processing efficiency, improves the effectiveness of the measures, iteratively accumulates the defect processing experience, optimizes the recommendation effect, and shortens the learning curve.

The invention relates to the technical field of unmanned aerial vehicle control, in particular to a decentration control method for a distributed electric propulsion system of an electric unmanned aerial vehicle. Comprising the steps of 1, constructing a distributed electric propulsion unmanned aerial vehicle model; and 2, designing a distributed electric propulsion system control strategy on the basis of the flight dynamics and pneumatic coupling model established in the step 1. According to the method, the core problems of single-point failure and insufficient anti-interference performance in DEP-UAV centralized control are solved through a decentralized control architecture. Meanwhile, the sliding mode observer and the continuous signal compensation technology are further integrated, steady-state errors caused by external disturbance are remarkably reduced, and yawing caused by force imbalance of the propulsion system is effectively restrained. The problems that in an existing single-point decision-making mechanism, failure of a central controller directly causes system collapse, and a fault-tolerant scheme based on isomorphic redundancy is difficult to deal with common-mode faults are solved.

The present invention provides a BIT testing method for an electro-hydraulic servo valve in an aircraft remote electronic unit, relating to the field of aircraft control technology. The method comprises: within a communication cycle, a command channel and a monitoring channel in the remote electronic unit receive actuation commands from a flight control computer via the same digital bus; the command channel and the monitoring channel respectively parse the actuation commands, and based on the parsed actuation commands, execute BIT testing tasks for the high and low sides of the servo valve, respectively, using an error integrator or a two-stage comparison strategy; and the command channel transmits the BIT test results of the two channels and uploads the actual status information of the servo valve via a digital bus. The method ensures high integrity of the BIT test, effectively monitors failure modes such as electro-hydraulic servo valve coil faults, remote electronic unit drive circuit faults, and line faults, ensuring that common-mode faults do not occur during BIT testing of the remote electronic unit in the flight control system, thereby improving fault detection coverage.

A system-on-chip may include application processing cores which execute safety critical applications and an integrity application. The system-on-chip may also include integrity processing cores which execute an integrity monitor. The integrity monitor may compare integrity application outputs and integrity monitor outputs to detect if the processing cores have experienced a common mode fault. The integrity processing cores may perform temporal monitoring to accommodate time-asynchronization's between the application processing cores and the integrity processing cores.

The invention belongs to the field of security of chemical devices, and particularly relates to a common-mode fault modeling method for an over-control protection system of a chemical device under network attack, which comprises the following steps of: constructing an over-control protection system simulation model according to a system mechanism on the basis of considering coupling characteristics among control logic, signal interaction and components; model signals are adjusted along with different attack scenes, and system response conditions under various network abnormal conditions such as signal closing attacks, set value change attacks and logic reprogramming attacks are updated in real time, so that the model fault evolution process is more practical. According to the method, aiming at the common-mode fault problem caused by associated communication in the process domain, a propagation mechanism of network attack risks is analyzed through a system modeling technology, a basis is provided for formulating a more effective security protection strategy, and chemical security accidents are further reduced and avoided.

The invention provides a dissimilar flight control computer with AI processing capability, which comprises a heterogeneous power switching circuit, a heterogeneous bus, an isomorphic dual-redundancy processing channel, a heterogeneous AI processing channel and an external interface unit, and is characterized in that the isomorphic dual-redundancy processing channel comprises two isomorphic processors, and the heterogeneous AI processing channel comprises an AI processor; the isomorphic dual-redundancy processing channel and the heterogeneous AI processing channel are provided with a flight control algorithm, and the heterogeneous AI processing channel is also provided with a fault processing model; the isomorphic dual-redundancy processing channel, the heterogeneous AI processing channel and the external interface unit are all powered by the heterogeneous power conversion circuit; data interaction and information comparison are carried out between the two isomorphic processors and the AI processor through heterogeneous buses; and the heterogeneous AI processing channel supervises the isomorphic dual-redundancy processing channel. According to the invention, the common-mode fault probability and task reliability of the flight control computer can be effectively reduced, so that the system has better universality.

The invention belongs to the technical field of airplane motility monitoring, and discloses a dissimilar monitoring method and system of an airplane motion sensor, when an airplane system is in a normal working mode, an FCM compares and monitors a three-redundancy signal composed of IRS1, IRS2 and AHRS and a multi-redundancy DMRS signal to obtain a three-axis angular rate value of an airplane, and the three-axis angular rate value of the airplane is calculated; and when the three-axis angular rate values of the airplane obtained by the IRS1, IRS2 and AHRS signals are consistent, the voting values of the three-axis angular rate values of the airplane obtained by the IRS1, IRS2 and AHRS signals are directly used as the three-axis angular rate values of the airplane to be output. Through the idea of'heterogeneous redundancy ', comparative monitoring is carried out by utilizing the dissimilar characteristics of the IRS, the AHRS and the DMRS, so that wrong stability augmentation control caused by the fact that fly-by-wire flight control receives wrong triaxial angular rate signals when the two sets of IRS have common-mode faults is avoided, the integrity of sensor signals is enhanced in an auxiliary manner, and the reliability of the system is improved. And the reliability and the stability of the fly-by-wire flight control system are improved.

This invention proposes a common-mode fault detection method for redundant IRS based on installation position differences, belonging to the field of aviation navigation technology. This method can detect common-mode faults generated by triple-redundant inertial reference systems (IRS) sensors. The principle is based on the characteristics of common-mode faults. By adjusting the installation orientation of the IRS, the angular velocity and acceleration information in the IRS's own coordinate system are projected onto the aircraft's system in opposite directions, amplifying the impact of the common-mode fault on a single axis, thereby achieving monitoring of common-mode faults in the sensor's angular velocity and acceleration information. This scheme is simple in principle, easy to implement, requires no additional redundant hardware modules, and is low in cost.

An interconnection device (1) comprising at least two transmission paths (2a, 2b), each equipped with a processing means (3a, 3b), each comprising two inputs and two outputs, and designed to perform two distinct functions or one function according to two distinct definitions, the interconnection device (1) also being equipped with an input multiplexer (9) and an output multiplexer (10) connected respectively to the input and output of the processing means (3a, 3b), the interconnection device (1) also being equipped with a configuration means (8) capable of configuring the multiplexers (9, 10) so that at least one input signal is transmitted to an input of one of the processing means (3a, 3b) and at least one output signal is transmitted from an output of one of the processing means (3a, 3b), the configuration means (8) also being capable of selecting one of the functions or one of the function definitions of the two processing means (3a,3b).Figure for the abbreviation: Fig 2.

A redundant sensor system includes first and second sensors of the same type. The first and second sensors are configured to sense and measure a parameter, such as torque, applied to an object, such as a shaft. A preselected measurement value difference is provided between the first and second sensors. The preselected measurement value difference, such as an offset or a difference in sensor gain, can be utilized by the redundant sensor system or an associated control system to detect a failure of one of the sensors. Output signals of the first and second signals that do not reflect the preselected measurement value difference within given tolerance indicate that one of the sensors has failed, and a determination that an associated system is untrustworthy can be obtained.

The application relates to the technical field of magnetic disk, and discloses a hard disk common mode fault analysis method, device, equipment and medium based on a server, which comprises the following steps: determining a fault-related component according to pre-collected type and fault mode data of the hard disk of the server; determining a main fault factor based on the fault-related component; analyzing the main fault factor, establishing a fault model corresponding to the main fault factor, and determining a common mode fault factor of the server based on the fault model. According to the scheme, the type and fault mode of the hard disk of the server are classified, the hard disk common mode fault is considered, the hard disk working environment and the use mode are deeply analyzed, potential fault factors are effectively identified, corresponding fault models are respectively established according to the analysis of the main fault factors, the common mode failure risk is analyzed, the ability of identifying potential problems is improved, and a data basis is provided for subsequent targeted preventive measures.

A system-on-chip may include application processing cores which execute safety critical applications and an integrity application. The system-on-chip may also include integrity processing cores which execute an integrity monitor. The integrity monitor may compare integrity application outputs and integrity monitor outputs to detect if the processing cores have experienced a common mode fault. The integrity processing cores may perform temporal monitoring to accommodate time-asynchronization's between the application processing cores and the integrity processing cores.

This invention provides a data verification method, apparatus, device, and storage medium, relating to the field of cryptographic operations. The method includes: acquiring intermediate and final processing results obtained by performing cryptographic operations on the same data using multiple cryptographic operation cores; and verifying the intermediate and final processing results of the multiple cryptographic operation cores to obtain a verification result. By verifying the intermediate and final processing results of multiple cryptographic operation cores, this invention can promptly and effectively detect anomalies in the cryptographic operation cores, thereby improving the protection effect of the cryptographic operation cores and ensuring that they can effectively resist common-mode faults and malicious fault injection attacks.

This invention proposes a method and system for independent and dissimilar fuel level measurement indication, wherein low fuel level measurement and fuel quantity measurement are independent and dissimilar in principle and signal link, which can avoid the catastrophic event of "fuel quantity indication error and loss of low fuel level alarm" caused by common mode failure.

The invention belongs to the technical field of aircraft landing gear folding and unfolding, is suitable for safety control of aircraft landing gear folding and unfolding, and is especially suitable for dynamic fault tolerance and reconstruction in complex scenes such as control faults and energy failure. The invention particularly relates to an aircraft landing gear retraction redundancy reconstruction method and system. Comprising an undercarriage folding and unfolding operation device, an undercarriage folding and unfolding control device, an actuating device, a position sensor and the like, and a multi-redundant energy topology network is constructed by integrating three heterogeneous energy supply modules of engine driving hydraulic pressure, electric driving hydraulic pressure and pneumatic pressure; a cross-energy coupling driving design and isolation technology is adopted on the actuating device level, the technology breaks through the limitation of a traditional single-energy architecture, and the task completion rate is increased; meanwhile, due to the isolation design of the actuating device, chain reactions caused by clamping stagnation, leakage and other faults of the actuating device are effectively blocked, and the possibility of common mode failure of the multi-channel actuating device is eradicated fundamentally.

The invention provides an electro-hydraulic servo valve BIT test method for an aircraft remote electronic unit, which relates to the technical field of aircraft control, and comprises the following steps: in a communication period, an instruction channel and a monitoring channel in the remote electronic unit respectively receive actuation instructions from a flight control computer through the same digital bus; the instruction channel and the monitoring channel respectively analyze the actuation instruction, and according to the analyzed actuation instruction, BIT test tasks of the high side and the low side of the servo valve are respectively executed based on an error integrator or a two-stage comparison strategy; and the instruction channel uploads BIT test result feedback of the two channels and actual state information of the servo valve through a digital bus. According to the invention, high integrity of the BIT test can be ensured, failure modes such as electro-hydraulic servo valve coil faults, remote electronic unit drive circuit faults and line faults can be effectively monitored, it is ensured that a remote electronic unit BIT test task in a flight control system does not have common-mode faults, and the fault detection coverage rate is improved.

The application relates to a train positioning method, device and medium after a main signal system fault, which comprises the following steps: initializing configuration information of a speed positioning device of a backup signal system; when a train is running, real-time calculation of backup positioning information of the train is carried out, the backup positioning information is obtained based on combined calculation of a speed sensor and a beacon, and the speed sensor is different from a speed sensor type of the main signal system; a switching state of the main and backup signal systems is detected; when the main signal system controls the train, the backup positioning information is sent to a backup system trackside device; when the backup signal system controls the train, the backup positioning information is simultaneously sent to a main system trackside device and the backup system trackside device, and a train control instruction is output. Compared with the prior art, the application has the advantages that common mode faults are avoided through differentiated sensor configuration, seamless switching is realized through real-time maintenance of backup positioning, one-point fault influence is reduced through bidirectional positioning sending, and the like.

The present invention proposes a non-similar dual-redundancy atmospheric data processing system and processing method for civil aircraft, which adopts redundancy design to ensure its safety and reliability, as well as the fault tolerance requirements of fault operation. Aiming at the performance requirements and technical indicators of the atmospheric data computer, the redundant parallel non-similar dual-redundancy CPU working mode architecture is adopted to effectively suppress the possible common mode failures of software and hardware to ensure the reliability and safety requirements of the atmospheric data computer, and the fault tree is used to evaluate and analyze its safety.

The invention relates to the technical field of disks, and discloses a server-based hard disk common-mode fault analysis method, device, equipment and medium, and the method comprises the steps: determining fault related parts according to the pre-collected type and fault mode data of a hard disk of a server; determining a primary fault factor based on the fault-related component; and analyzing the main fault factor, establishing a fault model corresponding to the main fault factor, and determining a common-mode fault factor of the server based on the fault model. According to the scheme, the types and the fault modes of the hard disks of the server are classified, the potential fault factors are effectively identified by deeply analyzing the working environment and the use mode of the hard disks from the perspective of the common-mode faults of the hard disks, and the fault detection accuracy is improved based on the analysis of the main fault factors. And corresponding fault models are respectively established for the main fault factors, so that the analysis of the common-mode failure risk is realized, the capability of identifying potential problems is improved, and a data basis is provided for subsequently taking targeted prevention measures.

The invention provides a redundancy IRS common-mode fault detection method based on installation position difference, and belongs to the technical field of aviation navigation. According to the method, the common-mode fault generated by a three-redundancy inertial reference system (IRS) sensor can be detected, the principle is based on the characteristics of the common-mode fault, the installation direction of the IRS is adjusted and set, angular velocity and acceleration information under a coordinate system of the IRS are projected to an aircraft system and then are opposite in direction, the influence of the common-mode fault on a one-way shaft is amplified, and the detection accuracy of the common-mode fault is improved. Therefore, the angular velocity and acceleration information common-mode fault of the sensor can be monitored. The scheme is simple in implementation principle and easy to implement, redundant hardware modules do not need to be added, and the cost is low.

Disclosed is an interconnection device (1) comprising at least two transmission channels (2a, 2b) each provided with one processing means (3a, 3b), each processing means comprising two inputs and two outputs and being designed to perform two distinct functions or one function according to two distinct definitions, the interconnection device (1) also being provided with an input multiplexer (9) and an output multiplexer (10) that are connected to the input and output of the processing means (3a, 3b), respectively, the interconnection device (1) also being provided with a configuration means (8) able to configure the multiplexers (9, 10) such that at least one input signal is transmitted to an input of one of the processing means (3a, 3b) and at least one output signal is transmitted from an output of one of the processing means (3a, 3b), the configuration means (8) also being able to choose one of the functions or one of the function definitions of the two processing means (3a, 3b).

The invention discloses a main network key equipment outage scene generation and maintenance optimization method and system considering weather conditions and common-mode faults, and belongs to the technical field of long-term planning scene generation in a power system. The method comprises the following steps: comprehensively considering key influence factors; establishing a basic degradation model based on Weibull distribution, constructing a covariable function covering weather and common mode influence through a proportional risk model, and quantitatively evaluating the influence of various factors on the forced outage rate of key equipment; designing a recursive sampling algorithm based on a Monte Carlo method and inverse transformation sampling, and combining common-mode disturbance correlation to generate a plurality of random outage scenes meeting forced outage characteristics; on the basis, the equipment maintenance time sequence and resource allocation are jointly optimized by taking minimization of system loss load as a target; and finally, introducing a criticality index, identifying key equipment in the main network equipment, quantitatively evaluating maintenance priorities of the key equipment of the main network in different scenes, and proposing a maintenance scheduling strategy suggestion.

A redundant sensor system includes first and second sensors of the same type. The first and second sensors are configured to sense and measure a parameter, such as torque, applied to an object, such as a shaft. A preselected measurement value difference is provided between the first and second sensors. The preselected measurement value difference, such as an offset or a difference in sensor gain, can be utilized by the redundant sensor system or an associated control system to detect a failure of one of the sensors. Output signals of the first and second signals that do not reflect the preselected measurement value difference within given tolerance indicate that one of the sensors has failed, and a determination that an associated system is untrustworthy can be obtained.