Aircraft Controller Safe Mode for Sudden Power Failure Recovery

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Aircraft control systems experience unpredictable behavior and downstream effects due to intermittent power cycling, leading to repetitive power failures and flight diversions, highlighting a need for improved circuit failure protection.

Innovation Solution

A software safe module in the aircraft electrical system controller determines sudden power failures by checking a data flag indicative of normal operation, booting into a software safe mode to prevent repetitive failures, which requires manual intervention to exit, and includes features like coordinating existing safe modes, disabling voltage regulators, and maintaining communication networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the controller automatically recovers from power failures, then system availability is improved, but repetitive power cycling occurs causing unpredictable behavior

Engineering Contradiction:
Improvesystem availabilityVSAvoidsystem behavior stability
Core Design Contradiction:
ReliabilityVSStability of the object's composition

Solution Approach 1:

The system performs preliminary action by setting a data flag during normal operation that indicates the controller was functioning properly before a power failure. Upon initialization, the controller checks this flag to determine if a sudden power failure occurred, allowing it to distinguish between intentional shutdowns and unexpected failures before attempting recovery.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The data flag acts as an intermediary mechanism between the power failure event and the controller's recovery decision. This flag provides information about the pre-failure state, enabling the controller to make informed decisions about whether to attempt automatic recovery or enter a protected state, thereby preventing repetitive power cycling.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Stability of the object's composition

If the controller enters software safe mode after sudden power failure, then repetitive power failures are prevented, but manual intervention is required extending system downtime

Engineering Contradiction:
Improvesystem behavior stabilityVSAvoidsystem recovery time
Core Design Contradiction:
Stability of the object's compositionVSLoss of time

Solution Approach 1:

The system changes its operational parameter by transitioning from automatic recovery mode to software safe mode when a sudden power failure is detected. This parameter change controls the recovery behavior, forcing manual intervention for severe failures while allowing automatic recovery for minor issues, thus balancing stability with recovery time.

Inventive Principle:
Principle #35Parameter changes

3Measurement precision

If the controller checks data flags upon initialization, then sudden power failures are detected accurately, but initialization time increases

Engineering Contradiction:
Improvepower failure detection accuracyVSAvoidinitialization time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The data flag is set during normal operation before any power failure can occur, so that upon initialization, the controller only needs to check the status of this pre-set flag rather than analyzing complex system states. This preliminary action enables accurate power failure detection with minimal initialization overhead.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11686757B2Systems and methods for circuit failure protection
Publication Date: 2023.06.27 HAMILTON SUNDSTRAND CORP
  • US11686757B2 patent drawing
  • US11686757B2 patent drawing
  • US11686757B2 patent drawing

AI summary

In accordance with at least one aspect of this disclosure, a controller for an aircraft electrical system includes, a software safe module. In embodiments, the software safe module can be configured to determine whether there was a sudden power failure upon controller initialization, and cause operation of the controller in a software safe mode if there was a sudden power failure such that manual intervention is required to leave the software safe mode to prevent repetitive power failure of the controller.