Aircraft Brake Control Redundancy via Backup Controller Override

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Aircraft brake control systems face challenges in ensuring reliable operation of brake valves, particularly when the primary brake control unit (BCU) fails, as existing systems lack effective redundancy to maintain safe braking functions.

Innovation Solution

A redundant control system is implemented, featuring a backup controller electronically coupled to the brake valves and switches, which receives redundant inputs to determine if the BCU is functioning improperly and takes control to prevent the BCU's signals from reaching the valves, outputting backup control signals to maintain brake functionality.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a primary brake control unit (BCU) is used to control brake valves, then the braking system can operate normally, but the system lacks redundancy and reliability when the BCU fails

Engineering Contradiction:
Improvebrake system reliabilityVSAvoidcontrol system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

A backup controller is pre-configured and positioned to take over control of the brake valves immediately upon detection of BCU failure. The backup controller is electronically coupled to the brake valves and switch, and is pre-programmed with the necessary control logic to maintain braking functionality without requiring system reconfiguration or manual intervention.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

A switch is introduced as an intermediary component between the BCU and the brake valves. This switch can selectively connect or disconnect the BCU from the brake valves based on the operational status of the BCU. When the BCU fails, the switch redirects the control signal path to the backup controller, ensuring continuous control of the brake valves.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If redundancy is added to the brake control system, then reliability improves, but the device complexity increases

Engineering Contradiction:
Improvebrake control redundancyVSAvoidsystem component count
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The backup controller is pre-positioned and configured in the system architecture, ready to assume control immediately upon BCU failure. This preliminary arrangement eliminates the need for complex real-time decision-making or system reconfiguration, reducing the operational complexity despite the added hardware component.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The switch acts as a simple intermediary that provides a straightforward path switching mechanism between the primary BCU and backup controller. This intermediary component simplifies the integration of redundancy by providing a clear, binary connection state (BCU connected or backup controller connected) without requiring complex control logic.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3708449B1Primary brake control system with alternate vehicle system override
Publication Date: 2021.11.10 GOODRICH CORP
  • EP3708449B1 patent drawingFigure 1
  • EP3708449B1 patent drawingFigure 2
  • EP3708449B1 patent drawingFigure 3

AI summary

A system for controlling a brake valve corresponding to a first brake of an aircraft, comprising: a first brake valve (248) configured to control pressure applied to the first brake; a brake control unit, BCU, (150) configured to receive a first plurality of inputs and to output a first BCU control signal for controlling the first brake valve based on the first plurality of inputs; a first switch (232) coupled between the first brake valve and the BCU; and a backup controller (160) electronically coupled to the first switch and the first brake valve and configured to: receive a second plurality of inputs, determine a first backup control signal for controlling the first brake valve based on the second plurality of inputs, determine that the BCU is functioning improperly based on the second plurality of inputs, and control the first switch to prevent the first BCU control signal from controlling the first brake valve and to output the first backup control signal to the first brake valve in response to determining that the BCU is functioning improperly.