CN111427327A - Protection method for abnormal restart of aircraft control software - Google Patents
Protection method for abnormal restart of aircraft control software Download PDFInfo
- Publication number
- CN111427327A CN111427327A CN201911376960.7A CN201911376960A CN111427327A CN 111427327 A CN111427327 A CN 111427327A CN 201911376960 A CN201911376960 A CN 201911376960A CN 111427327 A CN111427327 A CN 111427327A
- Authority
- CN
- China
- Prior art keywords
- control
- aircraft
- flight
- abnormal restart
- sector
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B23/00—Testing or monitoring of control systems or parts thereof
- G05B23/02—Electric testing or monitoring
- G05B23/0205—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults
- G05B23/0208—Electric testing or monitoring by means of a monitoring system capable of detecting and responding to faults characterized by the configuration of the monitoring system
- G05B23/0213—Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24065—Real time diagnostics
Abstract
The invention discloses a method for protecting abnormal restart of aircraft control software, which comprises the following steps: s1: the control system is powered on, and the flight control program receives an external control command and a control parameter sent from the outside and executes the command; s2: and if the abnormal restart occurs in the command executing process, the flight control program reads the control parameters and the control commands from the nonvolatile storage again to carry out secondary starting, and the flight control program continues to complete flow control according to the control commands and the control parameters. The flight control program is used for solidifying the flight parameters in the nonvolatile memory, real-time import is realized according to the state of the aircraft, the aircraft is guided to continuously complete the flight control task, the potential runaway hazard caused by the fault phenomenon of abnormal restart is fundamentally eliminated, the application can be implemented on the aircraft in different states, and the application can still be implemented particularly on the existing aircraft which is totally assembled and cannot be disassembled.
Description
Technical Field
The invention belongs to the field of aircraft control, and particularly relates to a method for protecting abnormal restart of aircraft control software.
Background
The aircraft control software is solidified in an external nonvolatile memory (an external memory) of the embedded chip assembly, after the control system is powered on, the control chip receives relevant starting parameters and commands sent from the outside, the relevant starting parameters and commands are stored in a high-speed memory of the embedded chip of the control system, and then the whole aircraft is controlled to operate according to the set logic of the software.
However, under some extreme environmental conditions, the aircraft control system may have an abnormal power failure, and due to the power failure reset characteristic of the aircraft control system, a fault phenomenon that a control chip of the aircraft control system is abnormally restarted occurs, but after the abnormal restart, related flight parameters are cleared, so that an operation flow of the aircraft control system is out of control.
In order to solve the problem that the operation flow of an aircraft control system is out of control, the problem is generally solved by improving the reliability of hardware, for the existing aircraft, the whole assembly hardware cannot be disassembled, the hardware cannot be upgraded, and then if the hardware is disassembled for replacement and upgrade, the risk that other parts are damaged in the disassembling process exists, and the fault phenomenon that abnormal restarting cannot be caused can still not be completely guaranteed through hardware upgrading. In view of the foregoing, it is desirable to provide a new solution to the above problems.
Disclosure of Invention
The invention aims to provide a protection method for abnormal restart of aircraft control software, which is applied to a flight control program and can still guide an aircraft to complete a flight control task after the fault phenomenon of abnormal restart is solved.
In order to achieve the purpose, the invention provides a method for protecting the abnormal restart of aircraft control software, which comprises the following steps:
s1: the control system is powered on, and the flight control program receives an external control command and a control parameter sent from the outside and executes the command;
s2: and if the abnormal restart occurs in the command executing process, the flight control program reads the control parameters and the control commands from the nonvolatile storage again to carry out secondary starting, and the flight control program continues to complete flow control according to the control commands and the control parameters.
Furthermore, the distribution area in the nonvolatile memory comprises a flight control program sector, a flight control parameter sector and a flight control command sector, wherein the flight control program sector is used for storing a flight control program and is used for controlling the flight flow of the aircraft; the flight control parameter sector is used for storing flight control parameters so as to realize the calling of the aircraft control parameters; the flight control command sector is used for storing flight control commands so as to realize the calling of aircraft control commands.
Further, the nonvolatile memory is a control chip or an external memory.
Specifically, in step S2, after the abnormal restart, the process proceeds to the following steps:
step S21, protecting the preparation flow, electrifying the control system, and loading the flight control program from the external memory by the control chip after electrifying;
step S22, hardware initialization is carried out;
step S23, in the process of hardware initialization, detecting the data of the specific address of the flight control command sector, if the data verification fails, then the aircraft is in a preparation stage if the power-on unbound flight flow is considered;
step S24, receiving externally bound aircraft control parameters and aircraft control commands;
step S25, if the control command is a flight flow in step S24, the control software erases the flight control parameter sector and the flight control command sector, writes the related information of external binding into the corresponding area and completes initialization work;
and step S26, performing flight flow control.
Specifically, in step S23, if data of a specific address of a flight control command sector is detected in the hardware initialization process, and the data passes verification, it is determined that the bound flight procedure is powered on this time, and the aircraft is in an abnormal restart stage;
step S24a, reading externally stored aircraft control parameters and aircraft control commands;
step S25a, finishing initialization work according to the relevant information;
and step S26a, implementing the protection validation flow of the abnormal restart, and performing flight flow control.
Further, in step S2, the abnormal restart includes a low level reset and a high level reset of the control chip.
Further, the protection method may be applied to other procedures of the aircraft.
Still further, the other process is a test process of the aircraft.
In general, the above technical solutions contemplated by the present invention can achieve the following beneficial effects:
1. the reliability is high, the flight parameters are solidified in the nonvolatile memory through the flight control program, real-time import is realized according to the state of the aircraft, the aircraft is guided to continuously complete the flight control task, and the potential runaway hazard caused by the fault phenomenon of abnormal restart is fundamentally eliminated;
2. the risk of hardware damage caused by hardware disassembly is avoided, and the problem that the replacement hardware is not matched with other parts of the aircraft control system is solved;
3. the aircraft can be applied to aircrafts in different states, and particularly can be still applied to the existing aircrafts which are totally assembled and cannot be disassembled;
4. the method disclosed by the invention is wide in application range, can be applied to different processes of an aircraft, and is used for matching a plurality of control processes by a single system.
Drawings
FIG. 1 is a flow chart of an abnormal restart protection preparation of the method of the present invention;
fig. 2 is a flowchart illustrating the method of the present invention for validating the protection against abnormal restart.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention. In addition, the technical features involved in the embodiments of the present invention described below may be combined with each other as long as they do not conflict with each other.
Example 1
As shown in fig. 1, the present invention provides a method for protecting an aircraft control software from an abnormal restart, including the following steps:
s1: the control system is powered on, and the flight control program receives an external control command and a control parameter sent from the outside and executes the command;
s2: and if the abnormal restart occurs in the command executing process, the flight control program reads the control parameters and the control commands from the nonvolatile storage again to carry out secondary starting, and the flight control program continues to complete flow control according to the control commands and the control parameters.
The distribution area in the nonvolatile memory comprises a flight control program sector, a flight control parameter sector and a flight control command sector, wherein the flight control program sector is used for storing a flight control program and is used for controlling the flight flow of an aircraft; the flight control parameter sector is used for storing flight control parameters so as to realize the calling of the aircraft control parameters; the flight control command sector is used for storing flight control commands so as to realize the calling of aircraft control commands.
In this embodiment, the control command is stored in a flight control command sector (i.e., the command area shown in the figure) in the non-volatile memory, the storage space of the non-volatile memory is 512KB, wherein the address of 0-256KB stores the flight control program; the address of 256KB-384KB stores the control parameters of the aircraft; 384KB-512KB address control commands.
The nonvolatile storage is a control chip or an external storage. In this embodiment an external memory.
In step S2, after the abnormal restart, the method proceeds to the following steps:
step S21, protecting the preparation flow, electrifying the control system, and loading the flight control program from the external memory by the control chip after electrifying;
step S22, hardware initialization is carried out;
step S23, in the hardware initialization process, detecting data of a specific address of a flight control command sector (i.e. specific control command data, such as a flight procedure entering command or a test procedure entering command, in this embodiment, the specific control command data of the flight procedure entering command), checking and detecting by using a CRC check method, and if the data check fails, determining that the flight procedure is power-on unbound, and the aircraft is in a preparation stage;
step S24, receiving externally bound aircraft control parameters and aircraft control commands; and step S25, if the control command is a flight flow in the step S24, the control software erases the flight control parameter sector and the flight control command sector, writes the related information bound outside into the corresponding area and completes initialization work, wherein the related information is the aircraft control parameters and the aircraft control commands.
And step S26, finally, performing flight flow control.
Example 2
As shown in fig. 2, the present invention provides a method for protecting an aircraft control software from an abnormal restart, including the following steps:
s1: the control system is powered on, and the flight control program receives an external control command and a control parameter sent from the outside and executes the command;
s2: and if the abnormal restart occurs in the command executing process, the flight control program reads the control parameters and the control commands from the nonvolatile storage again to carry out secondary starting, and the flight control program continues to complete flow control according to the control commands and the control parameters.
The distribution area in the nonvolatile memory comprises a flight control program sector, a flight control parameter sector and a flight control command sector, wherein the flight control program sector is used for storing a flight control program and is used for controlling the flight flow of an aircraft; the flight control parameter sector is used for storing flight control parameters so as to realize the calling of the aircraft control parameters; the flight control command sector is used for storing flight control commands so as to realize the calling of aircraft control commands.
The nonvolatile storage is a control chip or an external storage. In this embodiment an external memory.
In step S2, after the abnormal restart, the method proceeds to the following steps:
step S21, protecting the preparation flow, electrifying the control system, and loading the flight control program from the external memory by the control chip after electrifying;
step S22, hardware initialization is carried out;
step S23, in the hardware initialization process, detecting data of a specific address of a flight control command sector (i.e. specific control command data, such as a flight procedure entering command or a test procedure entering command, in this embodiment, the specific control command data of the flight procedure entering command), checking and detecting with a CRC check method, and if the data check is passed, determining that the bound flight procedure is powered on this time, and the aircraft is in an abnormal restart protection procedure stage; then the following steps are carried out:
step S24a, reading aircraft control parameters and aircraft control commands stored in an external memory;
step S25a, finishing initialization work according to the relevant information;
and step S26a, implementing the protection validation flow of the abnormal restart, and performing flight flow control.
The control parameters are the height and speed parameters of the flying trajectory of the aircraft, and the control command is the command of entering a flying process or a testing process or entering which attack mode and the like. The control parameters stored by the external memory can not be lost after the system is abnormally restarted after the aircraft enters a launching stage (the aircraft is separated from the ground launching station), and the aircraft launching failure can not be caused by the control parameters which can not be retrieved.
If the flight control program, the aircraft control parameters and the aircraft control commands are not stored in the external memory in advance, it means that the control parameters cannot be retrieved, and the aircraft fails to launch, and then enters an abnormal flight flow, as shown in fig. 2.
In the flight process, if the hardware system is normal, the aircraft control program executes the flight process control according to the flight parameters of the external instruction; if 'abnormal restart' occurs, the aircraft is separated from the transmitting device (the ground transmitting station or the remote transmitting control terminal), although the aircraft control program cannot secondarily receive the flight parameters of the external instruction, the aircraft control program can read the flight parameters from the flight control parameter sector and restart the aircraft control program again to complete the flight flow control.
The abnormal restart comprises low level reset and high level reset of the control chip.
The protection method can be applied to other processes of the aircraft.
In another embodiment, the other process is a test process of the aircraft.
In a word, in the flight flow, if the hardware system is normal, the aircraft control program executes the flight flow control according to the flight parameters of the external instruction; if abnormal restart occurs, the aircraft is separated from the transmitting device (the ground transmitting station or the remote transmitting control terminal), and although the aircraft control program cannot secondarily receive the flight parameters of the external instruction, the aircraft control program can read the flight parameters from the flight control parameter sector and restart the aircraft control program again to complete the flight flow control.
Claims (8)
1. A protection method for abnormal restart of aircraft control software is characterized by comprising the following steps:
s1: the control system is powered on, and the flight control program receives an external control command and a control parameter sent from the outside and executes the command;
s2: and if the abnormal restart occurs in the command executing process, the flight control program reads the control parameters and the control commands from the nonvolatile storage again to carry out secondary starting, and the flight control program continues to complete flow control according to the control commands and the control parameters.
2. The method for protecting against abnormal restart of aircraft control software according to claim 1, characterized in that: the distribution area in the nonvolatile memory comprises a flight control program sector, a flight control parameter sector and a flight control command sector, wherein the flight control program sector is used for storing a flight control program and is used for controlling the flight flow of an aircraft; the flight control parameter sector is used for storing flight control parameters so as to realize the calling of the aircraft control parameters; the flight control command sector is used for storing flight control commands so as to realize the calling of aircraft control commands.
3. Protection method of an abnormal restart of aircraft control software according to claim 1 or 2, characterized in that: the nonvolatile storage is a control chip or an external storage.
4. The method for protecting against abnormal restart of aircraft control software according to claim 1, characterized in that: in step S2, after the abnormal restart, the method proceeds to the following steps:
step S21, protecting the preparation flow, electrifying the control system, and loading the flight control program from the external memory by the control chip after electrifying;
step S22, hardware initialization is carried out;
step S23, in the process of hardware initialization, detecting the data of the specific address of the flight control command sector, if the data verification fails, then the aircraft is in a preparation stage if the power-on unbound flight flow is considered;
step S24, receiving externally bound aircraft control parameters and aircraft control commands;
step S25, if the control command is a flight flow in step S24, the control software erases the flight control parameter sector and the flight control command sector, writes the related information of external binding into the corresponding area and completes initialization work;
and step S26, performing flight flow control.
5. The method for protecting against abnormal restart of aircraft control software according to claim 4, wherein: in step S23, if the data of the specific address of the flight control command sector is detected during the hardware initialization process, and the data passes the verification, it is determined that the bound flight procedure is powered on this time, and the aircraft is in an abnormal restart stage;
step S24a, reading externally stored aircraft control parameters and aircraft control commands;
step S25a, finishing initialization work according to the relevant information;
and step S26a, implementing the protection validation flow of the abnormal restart, and performing flight flow control.
6. The method for protecting against abnormal restart of aircraft control software according to claim 1, characterized in that: in step S2, the abnormal restart includes a low level reset and a high level reset of the control chip.
7. Protection method for abnormal restart of aircraft control software according to any of claims 1 to 6, characterized in that: the protection method can be applied to other procedures of the aircraft.
8. The method for protecting against abnormal restart of aircraft control software according to claim 7, wherein: the other process is a test process of the aircraft.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911376960.7A CN111427327A (en) | 2019-12-27 | 2019-12-27 | Protection method for abnormal restart of aircraft control software |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911376960.7A CN111427327A (en) | 2019-12-27 | 2019-12-27 | Protection method for abnormal restart of aircraft control software |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111427327A true CN111427327A (en) | 2020-07-17 |
Family
ID=71546957
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911376960.7A Pending CN111427327A (en) | 2019-12-27 | 2019-12-27 | Protection method for abnormal restart of aircraft control software |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111427327A (en) |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101713970A (en) * | 2008-09-30 | 2010-05-26 | 通用电气公司 | Method and systems for restarting a flight control system |
| CN101802793A (en) * | 2007-09-14 | 2010-08-11 | 空中客车运营简易股份公司 | Method for processing the volume of information handled during the debugging phase of operational software onboard an aircraft and device for implementing the same |
| CN102508535A (en) * | 2011-11-08 | 2012-06-20 | 北京航天自动控制研究所 | Embedded computer information reinforcement method and system |
| CN105045146A (en) * | 2015-07-03 | 2015-11-11 | 深圳市普博科技有限公司 | System with reset function and restart control method thereof |
| CN105975304A (en) * | 2016-04-29 | 2016-09-28 | 青岛海信移动通信技术股份有限公司 | Restarting method and apparatus for mobile device |
| CN106776752A (en) * | 2016-11-22 | 2017-05-31 | 上海拓攻机器人有限公司 | A kind of embedded type file storage system and method for being applied to unmanned plane during flying data |
| CN107219856A (en) * | 2016-03-21 | 2017-09-29 | 波音公司 | Unmanned vehicle flight control system |
-
2019
- 2019-12-27 CN CN201911376960.7A patent/CN111427327A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101802793A (en) * | 2007-09-14 | 2010-08-11 | 空中客车运营简易股份公司 | Method for processing the volume of information handled during the debugging phase of operational software onboard an aircraft and device for implementing the same |
| CN101713970A (en) * | 2008-09-30 | 2010-05-26 | 通用电气公司 | Method and systems for restarting a flight control system |
| CN102508535A (en) * | 2011-11-08 | 2012-06-20 | 北京航天自动控制研究所 | Embedded computer information reinforcement method and system |
| CN105045146A (en) * | 2015-07-03 | 2015-11-11 | 深圳市普博科技有限公司 | System with reset function and restart control method thereof |
| CN107219856A (en) * | 2016-03-21 | 2017-09-29 | 波音公司 | Unmanned vehicle flight control system |
| CN105975304A (en) * | 2016-04-29 | 2016-09-28 | 青岛海信移动通信技术股份有限公司 | Restarting method and apparatus for mobile device |
| CN106776752A (en) * | 2016-11-22 | 2017-05-31 | 上海拓攻机器人有限公司 | A kind of embedded type file storage system and method for being applied to unmanned plane during flying data |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11062777B2 (en) | Nonvolatile semiconductor memory device which performs improved erase operation | |
| CN102023908A (en) | Method and device for backing up boot program | |
| US8136108B2 (en) | Updating firmware with multiple processors | |
| CN106201590B (en) | A kind of FPGA configuration file loading method and system | |
| EP1591893A1 (en) | Method and system for fail-safe updating of boot code | |
| CN103299276A (en) | Software updating process for an embedded device | |
| CN104090796A (en) | Embedded device program updating method and system | |
| CN107957874B (en) | Recoverable resident type on-orbit programming method for satellite-borne software | |
| CN105677398A (en) | Universal embedded computer software on-line upgrading method | |
| CN113064604B (en) | Firmware upgrading method and device | |
| CN108182078B (en) | Optimized missile-borne device non-dismantling software online upgrading method | |
| CN103677923A (en) | BOOT bootstrap program run protection method | |
| CN101639877B (en) | Electronic device and method for updating basic input and output system thereof | |
| CN115840579A (en) | FPGA remote updating method, system, chip mounter and storage medium | |
| CN102156647A (en) | Advanced safety setting method and advanced safety setting device for main chip of set-top box | |
| CN102722408A (en) | Method and apparatus for communication equipment software update | |
| CN109375953B (en) | Operating system starting method and device | |
| CN111427327A (en) | Protection method for abnormal restart of aircraft control software | |
| CN113835735A (en) | FPGA remote upgrading method, system and storage medium | |
| CN109766116B (en) | Multi-core control assembly online guiding and upgrading method based on CAN communication | |
| CN109815055B (en) | Satellite program management system and satellite program management method | |
| CN112346770A (en) | Embedded program online updating method | |
| CN111273928A (en) | Self-upgrading bootloader design method | |
| CN111742297A (en) | Firmware starting method, equipment and computer readable storage medium | |
| KR101300443B1 (en) | Flash memory device capable of verifying reliability using bypass path， and system and method of verifying reliability using that device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20200717 |