Aircraft Engine Shutdown Confirmation via Multi-Switch Intent Check

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current aircraft engine shutdown mechanisms lack confirmation that the actuation of an engine shutdown command, especially during flight, accurately reflects the pilot's intention, necessitating enhanced safety measures to prevent unintended engine shutdowns.

Innovation Solution

A control system with an engine shutdown confirmation unit that includes electronic circuitry to verify the intentional actuation of engine shutdown by monitoring the switching positions of multiple switches within a defined time frame, ensuring that the engine shutdown corresponds to the pilot's intention, and comprising a set of switches with a third switch that remains open by default unless a predefined quantity of switches change position, indicating a valid shutdown command.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a simple switch mechanism is used for engine shutdown control, then the ease of operation is improved, but the reliability is worsened due to lack of confirmation that shutdown corresponds to pilot intention

Engineering Contradiction:
Improveease of engine shutdown controlVSAvoidreliability of shutdown command
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary verification by monitoring switch positions before executing the engine shutdown command. The electronic circuitry checks that the control member has been moved to the shutdown position and that this position is maintained, confirming pilot intention before allowing fuel shut-off to occur.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback by continuously monitoring the position of switches associated with the control member and using this information to control the fuel supply shut-off member. The electronic circuitry receives feedback from switch positions and adjusts the shutdown command execution accordingly, ensuring reliability while maintaining operational simplicity.

Inventive Principle:
Principle #23Feedback

2Reliability

If multiple switches are monitored for shutdown confirmation, then the reliability is improved, but the device complexity increases

Engineering Contradiction:
Improvereliability of shutdown commandVSAvoidcomplexity of control system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The electronic circuitry performs multiple functions using a single integrated component: it monitors switch positions, determines pilot intention, controls the fuel shut-off timing, and provides confirmation logic. This multi-functionality reduces the need for separate dedicated components for each function, thereby limiting the increase in device complexity while maintaining high reliability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The electronic circuitry acts as an intermediary between the mechanical switch positions and the fuel supply shut-off member. Rather than directly connecting multiple switches to the shut-off valve, the electronic circuitry mediates by processing switch signals and controlling the shut-off timing, simplifying the overall system architecture while improving reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11486318B2System for confirming shutdown of an aircraft engine
Publication Date: 2022.11.01 AIRBUS OPERATIONS (SAS)
  • US11486318B2 patent drawing
  • US11486318B2 patent drawing
  • US11486318B2 patent drawing

AI summary

To control an engine shutdown in an aircraft, a control system includes a fuel supply shut-off member, a control member with a set of switches, a first switch on an electrical power supply link of the fuel supply shut-off member and second switches connected to avionics of the aircraft, the set of switches switching position on an engine shutdown command. An engine shutdown confirmation unit includes a third switch on the electrical power supply link, the third switch in open position by default. The engine shutdown confirmation unit includes electronic circuitry configured to switch the third switch over to closed position when a predefined quantity Q of switches of the control member switches position within a sliding window of predefined duration and, otherwise, keeps the third switch in open position. Thus, it is ensured that the engine shutdown is intentional.