16 results about "Common mode failure" patented technology

This invention discloses an electromechanical braking system and its control method based on heterogeneous motor redundancy, relating to the field of brake-by-wire technology for new energy vehicles. The system includes the following steps: During vehicle braking, a permanent magnet synchronous motor (PMSM) acts as the main drive source, outputting braking torque, while a switched reluctance motor (SRM) operates in standby or low-power auxiliary mode, forming a heterogeneous motor redundant drive structure. This invention achieves complementary failure modes and reduces the risk of common-mode failures by employing a heterogeneous redundancy structure of a PMSM and a SRM; simultaneously, it optimizes system economy by utilizing the low cost and low standby energy consumption characteristics of the SRM. A deep learning health prediction model is introduced to achieve early fault prediction and proactive switching, and a rapid, seamless switching mechanism within 20ms ensures braking continuity and system safety.

The application discloses a power device system, a communication architecture of a display and warning system and an aircraft. The application establishes a second communication path independent of an avionics system by increasing an engine interface control unit to directly connect the display and warning system, so as to avoid the risk of abnormal display of engine parameters caused by a single communication architecture. In addition, a comparison between signals of a first signal source of a comprehensive modular avionics and signals of a second signal source of the engine interface control unit and the identification of a common mode failure of the avionics network in combination with other engine conditions can avoid the problem of abnormal display of engine parameters caused by the common mode failure of the avionics network.

The embodiment of the application discloses a power supply configuration architecture of a redundant airborne system, wherein at least four redundant devices are included in the redundant airborne system, a power supply system includes at least two power supply subsystems and professional accumulators, each power supply subsystem has two power supply bus bars, including a main bus bar and an emergency bus bar; the power supply configuration architecture includes: two devices in the power supply configuration architecture are connected with the professional accumulators respectively, one of the two devices is connected with one power supply bus bar in one power supply subsystem, and the other device is connected with one power supply bus bar in the other power supply subsystem; the other two devices are connected with the main bus bar in one power supply subsystem and the emergency bus bar in the other power supply subsystem respectively. The technical scheme provided by the embodiment of the application solves the problem that the existing power supply configuration scheme of the redundant airborne system is difficult to have both the power supply common-mode fault mitigation requirement and the high task reliability level.

The application discloses a push method and system of quality defect report processing measures based on historical experience. The method comprises the following steps: establishing a structured database; analyzing the text of the database by using natural language processing technology, extracting key technical features, and constructing a quality defect report keyword library; converting the features of the current quality defect report into a numerical vector, which comprises function position coding, key degree classification, safety classification, key sensitive device type, quality defect report filling condition, whether it is a nuclear grade device and affects its safety function, whether it is a major repair work order that needs technical discussion, and whether it is a common mode failure; calculating the similarity between the current quality defect report and the historical quality defect report, and selecting the top set value of historical quality defect reports with the highest similarity; calculating the comprehensive weight; and recommending the processing measures according to the comprehensive weight order. The application improves the processing efficiency, improves the effectiveness of the measures, iteratively accumulates the defect processing experience, optimizes the recommendation effect, and shortens the learning curve.

The invention relates to the technical field of unmanned aerial vehicle control, in particular to a decentration control method for a distributed electric propulsion system of an electric unmanned aerial vehicle. Comprising the steps of 1, constructing a distributed electric propulsion unmanned aerial vehicle model; and 2, designing a distributed electric propulsion system control strategy on the basis of the flight dynamics and pneumatic coupling model established in the step 1. According to the method, the core problems of single-point failure and insufficient anti-interference performance in DEP-UAV centralized control are solved through a decentralized control architecture. Meanwhile, the sliding mode observer and the continuous signal compensation technology are further integrated, steady-state errors caused by external disturbance are remarkably reduced, and yawing caused by force imbalance of the propulsion system is effectively restrained. The problems that in an existing single-point decision-making mechanism, failure of a central controller directly causes system collapse, and a fault-tolerant scheme based on isomorphic redundancy is difficult to deal with common-mode faults are solved.

The invention provides a dissimilar flight control computer with AI processing capability, which comprises a heterogeneous power switching circuit, a heterogeneous bus, an isomorphic dual-redundancy processing channel, a heterogeneous AI processing channel and an external interface unit, and is characterized in that the isomorphic dual-redundancy processing channel comprises two isomorphic processors, and the heterogeneous AI processing channel comprises an AI processor; the isomorphic dual-redundancy processing channel and the heterogeneous AI processing channel are provided with a flight control algorithm, and the heterogeneous AI processing channel is also provided with a fault processing model; the isomorphic dual-redundancy processing channel, the heterogeneous AI processing channel and the external interface unit are all powered by the heterogeneous power conversion circuit; data interaction and information comparison are carried out between the two isomorphic processors and the AI processor through heterogeneous buses; and the heterogeneous AI processing channel supervises the isomorphic dual-redundancy processing channel. According to the invention, the common-mode fault probability and task reliability of the flight control computer can be effectively reduced, so that the system has better universality.

The invention belongs to the technical field of airplane motility monitoring, and discloses a dissimilar monitoring method and system of an airplane motion sensor, when an airplane system is in a normal working mode, an FCM compares and monitors a three-redundancy signal composed of IRS1, IRS2 and AHRS and a multi-redundancy DMRS signal to obtain a three-axis angular rate value of an airplane, and the three-axis angular rate value of the airplane is calculated; and when the three-axis angular rate values of the airplane obtained by the IRS1, IRS2 and AHRS signals are consistent, the voting values of the three-axis angular rate values of the airplane obtained by the IRS1, IRS2 and AHRS signals are directly used as the three-axis angular rate values of the airplane to be output. Through the idea of'heterogeneous redundancy ', comparative monitoring is carried out by utilizing the dissimilar characteristics of the IRS, the AHRS and the DMRS, so that wrong stability augmentation control caused by the fact that fly-by-wire flight control receives wrong triaxial angular rate signals when the two sets of IRS have common-mode faults is avoided, the integrity of sensor signals is enhanced in an auxiliary manner, and the reliability of the system is improved. And the reliability and the stability of the fly-by-wire flight control system are improved.

An interconnection device (1) comprising at least two transmission paths (2a, 2b), each equipped with a processing means (3a, 3b), each comprising two inputs and two outputs, and designed to perform two distinct functions or one function according to two distinct definitions, the interconnection device (1) also being equipped with an input multiplexer (9) and an output multiplexer (10) connected respectively to the input and output of the processing means (3a, 3b), the interconnection device (1) also being equipped with a configuration means (8) capable of configuring the multiplexers (9, 10) so that at least one input signal is transmitted to an input of one of the processing means (3a, 3b) and at least one output signal is transmitted from an output of one of the processing means (3a, 3b), the configuration means (8) also being capable of selecting one of the functions or one of the function definitions of the two processing means (3a,3b).Figure for the abbreviation: Fig 2.

A redundant sensor system includes first and second sensors of the same type. The first and second sensors are configured to sense and measure a parameter, such as torque, applied to an object, such as a shaft. A preselected measurement value difference is provided between the first and second sensors. The preselected measurement value difference, such as an offset or a difference in sensor gain, can be utilized by the redundant sensor system or an associated control system to detect a failure of one of the sensors. Output signals of the first and second signals that do not reflect the preselected measurement value difference within given tolerance indicate that one of the sensors has failed, and a determination that an associated system is untrustworthy can be obtained.

This invention provides a data verification method, apparatus, device, and storage medium, relating to the field of cryptographic operations. The method includes: acquiring intermediate and final processing results obtained by performing cryptographic operations on the same data using multiple cryptographic operation cores; and verifying the intermediate and final processing results of the multiple cryptographic operation cores to obtain a verification result. By verifying the intermediate and final processing results of multiple cryptographic operation cores, this invention can promptly and effectively detect anomalies in the cryptographic operation cores, thereby improving the protection effect of the cryptographic operation cores and ensuring that they can effectively resist common-mode faults and malicious fault injection attacks.

This invention proposes a method and system for independent and dissimilar fuel level measurement indication, wherein low fuel level measurement and fuel quantity measurement are independent and dissimilar in principle and signal link, which can avoid the catastrophic event of "fuel quantity indication error and loss of low fuel level alarm" caused by common mode failure.

The invention belongs to the technical field of aircraft landing gear folding and unfolding, is suitable for safety control of aircraft landing gear folding and unfolding, and is especially suitable for dynamic fault tolerance and reconstruction in complex scenes such as control faults and energy failure. The invention particularly relates to an aircraft landing gear retraction redundancy reconstruction method and system. Comprising an undercarriage folding and unfolding operation device, an undercarriage folding and unfolding control device, an actuating device, a position sensor and the like, and a multi-redundant energy topology network is constructed by integrating three heterogeneous energy supply modules of engine driving hydraulic pressure, electric driving hydraulic pressure and pneumatic pressure; a cross-energy coupling driving design and isolation technology is adopted on the actuating device level, the technology breaks through the limitation of a traditional single-energy architecture, and the task completion rate is increased; meanwhile, due to the isolation design of the actuating device, chain reactions caused by clamping stagnation, leakage and other faults of the actuating device are effectively blocked, and the possibility of common mode failure of the multi-channel actuating device is eradicated fundamentally.

The application relates to a train positioning method, device and medium after a main signal system fault, which comprises the following steps: initializing configuration information of a speed positioning device of a backup signal system; when a train is running, real-time calculation of backup positioning information of the train is carried out, the backup positioning information is obtained based on combined calculation of a speed sensor and a beacon, and the speed sensor is different from a speed sensor type of the main signal system; a switching state of the main and backup signal systems is detected; when the main signal system controls the train, the backup positioning information is sent to a backup system trackside device; when the backup signal system controls the train, the backup positioning information is simultaneously sent to a main system trackside device and the backup system trackside device, and a train control instruction is output. Compared with the prior art, the application has the advantages that common mode faults are avoided through differentiated sensor configuration, seamless switching is realized through real-time maintenance of backup positioning, one-point fault influence is reduced through bidirectional positioning sending, and the like.

Disclosed is an interconnection device (1) comprising at least two transmission channels (2a, 2b) each provided with one processing means (3a, 3b), each processing means comprising two inputs and two outputs and being designed to perform two distinct functions or one function according to two distinct definitions, the interconnection device (1) also being provided with an input multiplexer (9) and an output multiplexer (10) that are connected to the input and output of the processing means (3a, 3b), respectively, the interconnection device (1) also being provided with a configuration means (8) able to configure the multiplexers (9, 10) such that at least one input signal is transmitted to an input of one of the processing means (3a, 3b) and at least one output signal is transmitted from an output of one of the processing means (3a, 3b), the configuration means (8) also being able to choose one of the functions or one of the function definitions of the two processing means (3a, 3b).

The invention discloses a main network key equipment outage scene generation and maintenance optimization method and system considering weather conditions and common-mode faults, and belongs to the technical field of long-term planning scene generation in a power system. The method comprises the following steps: comprehensively considering key influence factors; establishing a basic degradation model based on Weibull distribution, constructing a covariable function covering weather and common mode influence through a proportional risk model, and quantitatively evaluating the influence of various factors on the forced outage rate of key equipment; designing a recursive sampling algorithm based on a Monte Carlo method and inverse transformation sampling, and combining common-mode disturbance correlation to generate a plurality of random outage scenes meeting forced outage characteristics; on the basis, the equipment maintenance time sequence and resource allocation are jointly optimized by taking minimization of system loss load as a target; and finally, introducing a criticality index, identifying key equipment in the main network equipment, quantitatively evaluating maintenance priorities of the key equipment of the main network in different scenes, and proposing a maintenance scheduling strategy suggestion.

A redundant sensor system includes first and second sensors of the same type. The first and second sensors are configured to sense and measure a parameter, such as torque, applied to an object, such as a shaft. A preselected measurement value difference is provided between the first and second sensors. The preselected measurement value difference, such as an offset or a difference in sensor gain, can be utilized by the redundant sensor system or an associated control system to detect a failure of one of the sensors. Output signals of the first and second signals that do not reflect the preselected measurement value difference within given tolerance indicate that one of the sensors has failed, and a determination that an associated system is untrustworthy can be obtained.