Flight Control Actuator Command Validation Architecture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current flight control systems are costly in terms of hardware and software resources while requiring high security and availability, necessitating a more efficient architecture.
Innovation Solution
A flight control system with a modified architecture where the actuator decides whether to execute commands from a master computer based on validation from a validating computer, allowing for simpler and less costly computers, increased flexibility, and the use of single-path computers without compromising security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a dual-path computer architecture with master/hold and COM/MON units is used to ensure security and availability, then reliability is improved, but device complexity and hardware costs increase
Solution Approach 1:
The system segments the computer architecture into two distinct roles: master computers that generate control commands and validating computers that independently verify these commands. This segmentation allows each computer to have a simplified single-path architecture while the system as a whole maintains high reliability through the distributed validation mechanism across multiple computers.
Solution Approach 2:
The invention merges the validation function from the traditional COM/MON unit structure into a separate validating computer entity. Instead of each computer having internal redundant paths, the validation capability is combined into independent validating computers that receive and verify commands from master computers, simplifying individual computer design while preserving system-level reliability.
2Reliability
If multiple computers with dual calculation units are deployed to detect breakdowns and inhibit outputs, then reliability is improved, but hardware and software resource requirements increase
Solution Approach 1:
The system uses multiple validating computers that each possess an independent copy of the control law software and validation logic. Each validating computer independently receives the master computer's command and performs verification against its own copy of the control laws, enabling comprehensive breakdown detection without requiring complex dual-path architecture within each computer.
Solution Approach 2:
Validating computers are designed with universal validation capability that can verify commands from any master computer using the same control law implementation. This multi-functionality allows a single validating computer to serve multiple master computers, reducing the total number of computers needed compared to dedicated one-to-one master/validator pairs.
3Reliability
If hardware dissimilarity is implemented between primary and secondary computers to minimize simultaneous failure risks, then reliability is improved, but device complexity and manufacturing difficulty increase
Solution Approach 1:
The system applies hardware dissimilarity locally between master computers and validating computers rather than across all computers uniformly. Master computers may use one hardware configuration optimized for command generation while validating computers use different hardware configurations optimized for verification, allowing each type to be manufactured efficiently for its specific purpose while maintaining overall system reliability.
Data Source
AI summary
A flight control system includes at least one actuator for a mobile flight surface of an aircraft, and a flight control module in communication with the actuator. The module includes a first and a second computer. Each computer calculates a control command established according to at least one predetermined law for control of the flight surface. The first computer, known as validating computer, comprises logic means adapted for comparing its control command with that of the second computer, known as master computer, and for transmitting the result of the comparison to the actuator. The actuator comprises logic means adapted for deciding, on the basis of the result, to execute or not to execute the command of the master computer. An aircraft comprising such a system is also disclosed.