Multi-Channel Engine Controller Reset Sequencing During Total Failure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Simultaneous failures in all channels of a multi-channel engine controller for a gas turbine engine lead to a lapse in control, as both processors reset at the same time, leaving no processor available to operate the engine.
Innovation Solution
A method where a first processor identifies a simultaneous failure and provides control signals to reset a second processor, allowing the first processor to continue controlling the engine in safe mode while the second processor resets, and subsequently switching control back once the second processor has cleared its faults.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If both processors reset simultaneously upon detecting a failure condition, then both channels are restored to a known good state, but control of the gas turbine engine is lost during the reset period
Solution Approach 1:
The first processor is configured to detect when the second processor has reset before the first processor itself resets. This preliminary detection allows the system to stagger the reset sequence, ensuring that one processor is always available to maintain control of the gas turbine engine while the other processor recovers from its failure condition.
Solution Approach 2:
The first processor acts as an intermediary that monitors the reset status of the second processor and delays its own reset action until appropriate timing. This intermediary function coordinates the reset sequence between the two processors, preventing simultaneous resets and ensuring continuous engine control.
2Reliability
If the first processor continues controlling the engine while the second processor resets, then continuous control is maintained, but the first processor must handle all control functions alone
Solution Approach 1:
The system dynamically adjusts the operational roles of the processors based on their reset status. When the second processor is resetting, the first processor temporarily assumes full control responsibilities. Once the second processor has recovered, control is transferred back, and the workload is distributed again. This dynamic role assignment maintains continuous control while managing processor workload effectively.
Data Source
AI summary
A method for handling a simultaneous failure of all channels of a multi-channel engine controller configured to control operation of a gas turbine engine is provided. The method includes obtaining, by a first processor associated with a first channel of the engine controller, data indicative of the simultaneous failure of all channels of the engine controller. The method further includes providing, by the first processor, one or more control signals associated with resetting at least a second processor associated with a second channel of the multi-channel engine controller based, at least in part, on the data. Furthermore, the method includes controlling, by the first processor, operation of the gas turbine engine while at least the second processor is resetting.