DE10026923A1 - Master system for applying to airfield navigation light units controls the actuator and sensor elements for airfield navigation light devices while monitoring them as an option - Google Patents

Abstract

A master system for airfield navigation light units controls and/or monitors the actuator and sensor elements for airfield navigation light devices and includes a centralized redundant control device that connects to input and output devices and links via an interface through a redundant-formed bus system decentralized control device.

Description

The present invention relates to a flight guidance system place lighting systems for controlling, regulating and / or monitoring Chen of actuator and / or sensor elements from Flugplatzbe firing devices.

Lighting systems include all lighting aids that safe flight operations and aircraft taxiing in the area of an airport in the dark and / or bad ensure visibility. Among other things, between Approach lights, glide angle lights, side row lights, Threshold lights, runway lights, taxiway lights, Identification lights, hazard lights, obstruction lights and rotating lights below divorced.

According to international guidelines and recommendations Airfields for operation at night or with poor visibility be equipped with airfield lighting systems. At flight, landing, take-off and taxiing Lighting devices serve the pilot as optical navigati on help. Lighting systems for major airports include ver different lighting devices that mark the approach sector, the runways, taxiways and before fields serve. Furthermore, additional devices are used sets, for example taxiway signs, parking aids, wind direction indicators and the like. Both the devices and the systems can be switched separately, with each individual System include differently switchable lighting devices can. Approach lighting includes, for example, approach Flashing light for the visual highlighting of the approach center line and threshold, high-performance light for approach, threshold and Runway end, precision approach glide angle lights for high Light output and sharp red-white transition and the like chen.

The individual lighting systems usually extend over several kilometers and require a corresponding one Cable network. The individual lighting devices are becoming more common wisely operated in series to compensate for differences in the intensity of the indicated closed lighting devices at the beginning of the line and the line to exclude the end of the parallel operated lighting devices due to the high Voltage drop would be given. To interrupt the formed by the series-connected consumers Se line circuit in the event of failure of a single consumer, d. H. one lamp, to prevent it, will be the individual lamps each via a lamp or series circuit transformer ver cares. The lamp transformers for feeding the light sources the lighting devices are formed in series in a series tet and operated with a constant current. The transforma gates therefore have the character of a current transformer with a fixed, specifiable current transformation ratio.

The luminous intensity of the lighting system must at all times match the prevailing visibility during take-off or landing of the aircraft conditions can be adjusted. Setting the light strength is achieved by means of control and regulation devices made on the part of the lighting systems in addition to lamps are available as lighting devices. A once turned The intensity value set must be independent of the mains voltage voltage fluctuations or the failure of individual lamps in the Se rienkreis must be kept constant. To keep the Electricity in series circles of lighting systems on flight places, constant current regulators are used, the ne beneath the above requirements international guidelines and Recommendations and, in particular, country-specific requirements need to fill. In addition to these control and regulating devices include lighting systems as lighting devices above In addition, lamp failure reporting and / or insulation monitoring facilities. Lamp failure notification devices ensure that the failure of lamps in lighting systems is detected and can be eliminated. Usually be independent of the series circuit current and its curve shape the individual lamps failures in thyristor-controlled series circuits are detected and reported. The commonly used lamp failure alarms Institutions report the first and all others fallen lamps of a lighting system.

Usually characterized by long cable runs Series circuits for airfield lights, which have mainly housed in the ground and in damp shafts are, due to high operating voltages such Electric circuits to earth easily lead to insulation in the event of defects errors lead. The consequence of such insulation faults is Double earth fault the reduction of the operating current and there with the lamp brightness of lighting devices near the Feh lers, which in extreme cases can lead to lamp failure. Isola tion monitoring devices detect the insulation resistance stand of an airport lighting series circuit in both the Operation as well as when switched off. This is a stabilized DC voltage independent of the operating voltage tion fed into the series circuit and via the result the current of the resistor determines. The measured resistance value gives a measure of error, which is within specified a message to initiate removal action issues.

The various lighting devices such as constant current regulators, Lamp failure reporting systems and insulation monitoring systems aerodrome lights need a variety of signals for control and feedback of operating states with the Replace control device. These signals must be via Ka bel and corresponding plug or clamp connections the one individual lighting devices on the part of the control device Will be provided. So far, the Befeuerungsge devices via parallel interfaces with multi-core cables and corresponding plug or clamp connections with the zentra len control device or upstream decentralized control facilities are connected. The connection of each Lighting devices with the control device require ei considerable assembly and material costs. This assembly and the cost of materials increases, especially in the case of redundant Design of the connections at least by a factor of 2, whereby appropriate lighting equipment and control equipment have corresponding signal inputs and outputs that allow a redundant connection.

To control, regulate and / or monitor Flugplatzbe firing systems on the part of a central control device, for example on the part of a tower, or on the part of decentralized control devices, for example on the part of the various beacons, in a control room arranged directly on site of the Befeuerungsge devices, it is necessary to use both the To be able to communicate actuator and sensor elements of the lighting devices, as well as to link and display or log the monitoring signals of all system parts down to the actuator and / or sensor elements level accordingly. The following tasks are to be performed by the control system of the airport lighting system:

• - the switching on and off of all actuators and / or sensor elements of the airfield lighting devices,
• - the setting of the required brightness levels of the Airfield fire from a central or one decentralized control device,
• - The roller guide by means of sensors, for example Indukti ons loops in the taxiways,
• - the monitoring of all actuator and / or sensor elements the aerodrome lighting equipment and display of the operation states on the part of a central and / or a decentralized office len control device.

The following system services are required for this:

• - Program switching of the lighting based on a pre given landing direction of an aircraft by a Air traffic control system,
• - the receipt of manual control commands from inputs units of the control devices,
• - Admissibility checks of all entries and returns instructions of impermissible entries, the display of activated functions,
• - The control of power units of the Befeuerungsge devices, for example constant current regulators,
• - the monitoring of the operating status of individual beacons equipment,
• - the evaluation of messages from connected surveillance systems such as lamp failure monitoring systems, Iso lation monitoring systems as well as other sensor elements ments,
• - Self-monitoring of the control system and communication facilities such as bus systems and the like,
• - Automatic restart of the control system after a fault elimination as well as power failures and the like.

To turn on / off the various facilities were previously usually switches or buttons and for the display Light-emitting diodes or incandescent lamps are used, which by means of Paral Wiring to the actuator and / or sensor elements of the Lighting devices were led. There are also remarks known that contain computerized control devices and between central and decentralized control facilities Have fiber optic connections, for example between between a tower and various substations. Of the decentralized control devices, for example a sub station, to the actuator and / or sensor elements But then again a parallel wiring use. All previously known control systems for airfield lighting systems are specially designed for the respective location. in the otherwise, redundancies can only be implemented with great effort.

The present invention is made in view of this state of affairs the technology is based on the task of a control system of the initially mentioned type to the effect that a total of one better overall function, higher security, a light one Expandability and especially simple and inexpensive term way a redundant structure of the control system up down to the actuator and / or sensor element level is adjustable.

A technical solution to this problem is provided by the the invention a control system for airfield lighting systems for controlling, regulating and / or monitoring actuators and / or Sensor elements of airfield lighting devices ready represents, which is characterized in that this one central redundant control device to which input and output devices and by means of at least one Interface via a redundant bus system we At least one decentralized one with the actuators and / or sensors k elements of airfield lighting devices connectable tax einrichtung is connectable. Advantageously, the central and / or decentralized control device has a memory programmable controller, preferably a SIMATIC, esp ders preferably of the type S5-155H or S7-400H, whereby the decent central control device a redundant control device is.

The core of the control system according to the invention is thus the han the usual redundant control device SIMATIC S5-155H / S7- 400H, the company Siemens, which is on the part of the central and / or decentralized control device advantageously to trade Usual computing devices (PCs), input and output devices services, advantageously touch-screen control points, about surveillance monitors and the like is added. Through which he inventive interface can advantageously decentralized control equipment via the redundant design Connect the te bus system so that this can be done by the dezentra len control device for controlling, regulating and / or monitoring Akto connected by the decentralized control device rik- and / or sensor elements of Flugplatzbefeuerungsgerä ten control, regulate and / or monitor the same light.

According to the invention, the components of the control system are redundant dant available, so that if a component fails, the Be drive can be continued without interruption. By Um switching processes in the control system, for example when switching a redundant connection via the bus system or when changing switch the redundant control device of a so-called "Master" - on a reserve CPU is advantageously the Switching status of the actuator and / or sensor elements of Airfield lighting equipment not changed.

The use of commercially available control devices such as the bus systems, interfaces, input and output devices and the like, which in terms of their functions are each re are designed to be redundant, ensure that the control system is highly available. It also allows the use commercial control devices, bus systems, interfaces len and the like that the control system is simple and can be expanded in a cost-effective manner and, finally, that the control system according to the invention using han standard facilities is easier to certify at for example according to DIN or the like.

According to an advantageous embodiment of the invention includes the interface for the bus coupling of the control devices, Communication processors which the use of light enable waveguides as a transmission medium. Through this a redundant bus coupling can be established from the central Build control device to decentralized control devices en. The data is advantageously transmitted by means of Ethernet networks and / or PROFIBUS networks, advantageously in different topologies, for example as a ring.

According to a specific embodiment of the invention, for Operation, for example to switch the Actuator and / or sensor elements of airfield lighting devices used touch-screen control points, which are connected to ge changed tasks extremely easily using the corresponding have software changes adjusted accordingly.

According to an advantageous proposal of the invention, Mel messages and / or message images on large flat-screen color monitors can be displayed, the display being displayed by means of a corresponding Software changes to changed management tasks systems can be adjusted.

According to a particularly advantageous embodiment of the invention application is used to increase the safety of the control systems advantageously a fault-tolerant control device used, particularly preferably a SIMATIC S7-400H from the company Siemens, which can be used in so-called "hot stand-by technology" is, on the one hand, the availability of the control device to further increase and, on the other hand, the operational safety of the Control device. For this purpose, Ver application of a safety assessment is provided.

The decentralized control devices for serial control tion and monitoring of the actuator and / or sensor elements of the airport lighting devices such as constant current lighting controller, lamp failure alarm systems, insulation alarm systems and the like, and their serial redundant bus coupling to central control device, for example on the part of the tow ers, which advantageously have two fiber optic cables Rings ensure that even if one fails Coupling of the entire data exchange between the central and a decentralized control device is guaranteed.

According to a further particularly advantageous embodiment of the invention include the decentralized control devices an interface for connecting a mobile, portable computing device, for example a laptop so that a Control, regulation and / or monitoring by zentra len control device is enabled on site.

The coupling to the actuator and / or sensor elements of the airfield lighting devices, for example constant current regulators, induction loops and the like, takes place on the part of the decentralized control devices. The decentralized control devices are coupled to the central control device via the bus system and, by means of input and output devices connected by the central control device, advantageously based on commercially available high-performance computers with color monitors and pointer operation via mouse and one or more fault message printers, control and regulation and / or monitorable. The following functions are fulfilled:

• - Graphic representation of the lighting and system stands,
• - Individual displays for each circuit with status controller, Lamp failures and insulation condition,
• - Determination, display and storage of operating times of the individual lighting circuits,
• - Individual display of the status of the sensor element evaluations devices (loops, cameras, IR barriers, etc.),
• - Storage and display of fault messages and printouts the error messages with date and time,
• - Recording and saving of all switching states of the lights devices over long periods of time,
• - Printout of selected states on a protocol printer cker,
• - Administrative functions such as password-protected access and Data backup.

This type of arrangement of the control system has the following advantages:

• - Use of commercially proven industrial taxes gen (SIMATIC S5 / S7),
• - Use of commercially available, proven bus systems and Fiber optic technology,
• - Construction of inexpensive complex control and monitoring systems,
• - inexpensive redundant control structure,
• - Flexibility of the entire control system, especially with the implementation of changed tasks or systems gene extensions,
• - Applicability for small, medium and large systems genes, e.g. addition and adaptation,
• - Can be connected to existing ones through the open bus structure Third-party systems,
• - Building fault-tolerant systems with high availability speed (99.99%) in connection with safety-related Technology,
• - Structure of operating hierarchies using passwords and the same,
• - Storage of operating and monitoring data, for example wise to compile statistics,
• - Easiest expandability of the control devices, ins especially through the modularization of the software.

The control system according to the invention creates through the combination Commercially available components and assemblies a com complete control, regulation and logging system for Controlling, regulating and / or monitoring of actuators and / or Sensor elements of airfield lighting devices.

Further details, features and advantages of the invention are shown below with reference to the figures Embodiments explained in more detail. Show:

Fig. 1 is a schematic illustration of the construction of a control system according to the invention;

Fig. 2 is a basic circuit diagram of a wiring of redundant input modules with Fehlerlokalisierungseinrich device;

Fig. 3 gene is a block diagram of the circuitry of redundant output modules with Fehlerlokalisierungseinrichtun;

FIG. 4 shows a basic illustration of the coupling to the central control device via an interface unit; FIG.

FIG. 5 is a schematic representation of inputs and Ausgabeeinrich obligations to the central control device;

Fig. 6, in a schematic view the principle construction of the central control device

Fig. 7 in a schematic representation of the line concept of bus-controlled regulating devices, as well as of lamp failure failure reporting and insulation failure reporting systems and

Fig. 8 in a schematic diagram of construction of a remote control device.

Fig. 1 shows a control system (BLS) for a Flugplatzbefeue management system based on the Siemens automation system, SIMATIC S5, supplemented by PCs for control, regulation and / or monitoring of the lights.

In the present case, it consists of the following system parts:

• - Two monitors to display the entire operating status with mouse operation (PID) for rolling guidance in the tower canal zel (central control device),
• - Three touchscreen (TID) control and display units in the tower pulpit,
• - New redundant control computer SIMATIC S5-155H (control room, level 5 ) for linking and forwarding the control commands and messages to the substations (e.g. north and south runways) incl.
• - Redundant control computer SIMATIC S5-155H in three commands information stations north to pass on the commands to the Be firing system and feedback from the firing system to the tower including lamp failure reports, isolati on messages as well as the processing of sensor signals and report to the tower,
• - Redundant coupling in fiber optic technology in the ring between fol buildings:
• - A new tower - North-West station - Fire brigade station - Station north-east - new tower. Any redundant coupling takes place in such a way that the connection is via two separate paths runs; so that even if the fiber optic ring is cut to a a connection remains at a point,
• - Four new fiber optic connections New Tower - Old Tower. in the old towers are these couplings via repeaters to the existing fiber optic connections to the south-west stations and implemented south-east,
• - Waiting with two workstations, fiber optic coupled to the new one Tower,
• - Interface unit to ANBLF (DFS) for north and south train,
• - Local control in three new north stations via portable PC (laptop),
• - Extension of the SIMATIC control in an existing Sta tion south-east.

The tasks of the control system are:

• - The control of all system parts for switching on / off and setting the brightness levels of the tower,
• - Rolling guidance by means of sensors (induction loops etc.), TXC and STB circles,
• - The monitoring of all system parts and display of the Be operating states in the tower, decentralized waiting (on-site), as well as in an adjoining room.

The following system services are provided for this purpose:

• - Program switching of the lighting based on the benen landing direction and operating level I / II / III from z. B. ANBLF system of DFS,
• - Receipt of manual control commands from the touch screen control units (TID) or the monitor / mouse Controls (PID) in the tower cockpit,
• - Admissibility check of all input commands and rejection impermissible commands,
• - Display of the triggered functions in the message screens,
• - Control of the power units (controllers) of the beacons tion,
• - Monitoring of the operating status of the lighting,
• - Automatic switching of TXC and STB circles on the basis of sensor reports, pre-selected taxi routes and cross tongue-specific links (rolling guide) as well as Switch STB on the S / L via a timer,
• - Generation of error messages in the event of malfunctions in the Be firing,
• - Evaluation of the messages from the connected monitoring systems,
• - Lamp failure monitoring
• - insulation monitoring
• - sensors
• - Self-monitoring of the control system and the communica facilities,
• - Automatic restart of the system after a malfunction as well as after power failures.

In the tower pulpit are z. B. three TTD (touchscreen) control points, each connected to a PC in the firing room, level 5 , as well as two PIDs consisting of flat monitor 20.1 "and mouse operation, connected to a PC in the firing room, level 5 .

In the firing room, level 5, there are:

• a) Tax calculator The core of the control is the redundant system SIMATIC S5-155H supplemented by PCs on which the three TID and the two PIDs in the tower cockpit, the interface ANBLF, the control room and the northern and southern railway stations are closed.

All important system components are available twice, so that if a component fails, operation without Interruption can be continued. By shift processes in the system, e.g. B. when switching a redundant th coupling link or when switching over the redundant Control computer from the master to the reserve CPU the switching status of the lighting system has not changed.

The bus coupling of the stations North-West, North-East and Fire brigade to the control computer tower takes place via two Communications processors CP so that a redundant Coupling to each station is created. The transfer of the Data takes place e.g. B. with the PROFUBUS protocol EN50170, Volume 2 with 1.5 Mbits.

• a) Activation of the beacon
• b) Control of the obstruction lights of the new tower
• c) Uninterruptible power supply (UPS) with a Support time of 60 minutes (without beacon support).

The two interface units to the ANBLF of the north and south runways are located in the rack room on level 1. ANBLF (AlphaNumerical operating level and runway remote control system) is a computer-aided data processing system from DFS.

These two interface units, designed using SIMATIC ET200M technology, are installed in the DFS racks on level 1 of the new tower and connected to the control computer in the firing room , level 5, via a redundant fiber optic connection.

The coupling between the interface units and the DFS ANBLF computer is implemented with 24 V signals. Of the The lighting computer signals the current ANBLF Operating status or receives control commands for the category switchover.

The structure of the three lighting stations north-west, north-east and fire brigade on the north runway is basically the same. They consist of:

• - Redundant control unit SIMATIC S5-155H with the Kopp processing modules for the control and monitoring of the Lighting controller, detection of lamp failures (LAM) and the insulation status (ISO) of the series circuits.
• - Redundant, serial Profibus coupling to the control Computer tower over two fiber optic rings, so that in the event of failure a coupling of the full data exchange between towers and station is guaranteed.
• - Interface for the local control of each individual Systems as well as every single stopbar and TXC-Ab section of the respective station via a laptop.
• - Coupling to the evaluation devices of the induction loops (Sensor system).

The technical structure of the two already existing beacons stations on the south runway (south-west and south-east) are prin known from the prior art.

However, there are circle expansions (here 18 circles and 7 Loops) in the south-east station through an additional cabinet and software adjustments for a new control concept in Cooperation with the north slope.

The following variants for the structure are possible:

• a) same as previous technology south slope (additional extension control unit, coupled to the existing central unit S5- 135U; Control of the controller via DE / DA; LAM detection via DE / DA),
• b) Construction with the technology of the north runway (S5-155H; Busreg ler; S7-LAM / ISO registration unit.

The control room is connected to the firing computer in the firing room, level 5 , via a separate bus. It is based on high-performance PCs with color monitors, pointer operation by mouse via menus and printer.

The control room essentially fulfills the following functions:

• - Graphic representation of the lighting and system status,
• - Individual displays for each circuit with status controller, Lamp failures and insulation condition,
• - Determination, storage and display of operating times of the individual lighting circuits,
• - Individual display of the status of the sensor evaluation devices (Grinding etc.),
• - Saving and displaying of fault messages; Print out the Fault messages with date / time,
• - Recording and saving of all switching states of the commands for a period of at least 7 days,
• - Printout of selected states on a protocol printer cker,
• - Administrative functions such as password-protected access and Data backup.

The control system has the following response times:

• - Time from an entry in the tower to the quit rejection or rejection: <0.5 s
• - Time from entering a command in the tower to issuing it the control signal to the controller in a Befeuerungssta tion: <1 s
• - Time from the feedback from a controller or induction loop until information is output on the TID and PID in the Tower: <2 s
• - With CATIII operation: Time from the return of the network after Span power failure until the "old" lighting status comes on again stands: <1 s
• - Switching times of redundant units, e.g. B. at partial cases of the control computer in the tower in which the system kei ne executes control commands: <0.5 s

The above times are kept by the system at all times point and maintained at maximum system load.

The core of the present control system are the four redundant control systems SIMATIC S5-155H in the firing room level 5 of the new tower and in the new stations north-west, north-east and fire brigade (north runway).

All important system components are doped in this system pelt available, so that if a component fails, the loading drive can be continued without interruption.

The S-155-H system consists of two central units, each with because it's own CPU, power supply and memory. The application program is stored in both central units chert.

Both CPUs exchange via a high-speed coupling Data for event-synchronous processing of the user pro gramms, whereby one of the two central devices (ZG) the Takes on the role of the master.

The other central device (ZG) is the reserve and receives the Input signals, processes the same program as the Mas ter-ZG, but does not issue any output signals (hot standby). If the master central unit fails, the reserve central unit takes over without bumps the company.

System-internal high speeds are available to the central devices coupling two expansion devices connected to the the communication or peripheral modules for the operator fields, stations, etc.

The operation remains in this highly available system concept the lighting system undisturbed if a central device is on Channel of the communication modules or digital peripherals fails. Failures are recognized immediately and sent to the control room reports.

For reasons of the very high requirements of availability and thus reliability of a control and monitoring system for lighting control of a commercial airport, the control system fulfills the following requirements:

• - Redundant (2-channel) structure of central processor construction groups, memories, power supplies, parts of the peri peripheral controls and communication components.
• - Data exchange and synchronization of the two processor structures groups.
• - Error monitoring, error message and tolerance of off felling.
• - Quick takeover of control by reserve links without Loss of information or control errors in the event of failures (in ms range).
• - Even then, the system must know with a high degree of probability work if, due to one or more errors, parts of the Control system fail.

These requirements are exemplified in the invention underlying control of Leipzig / Halle Airport through the Automation system S5-155H fulfilled, which after the "master Slave principle "works in" hot stand-by mode ".

How the fault-tolerant automation system works S5-155H is comparable to an "OR" link; H. the system is in operation ("non-stop" - Operation) if at least one of the two central devices is missing works free of charge.

Therefore, a defective hardware component can be repaired or can be exchanged without interrupting the Process control and monitoring is coming.

The two central devices each contain the CPU 948R processor module. The operating system (firmware) of this module supports the following system functions:

• - Data exchange and comparison between the two processors assemblies
• - Error reaction when a processor module fails (Mas ter slave switchover to the reserve device)
• - Synchronization of the two processor modules
• - Self-test (troubleshooting mode)
• - Localization of internal system errors such as B. Busfeh ler, memory error. . . and peripheral errors (I / O Assemblies, communication processors. . .)
• - Passivation (= deactivation) of defective S5 modules

Basically, the S5-155H system works according to the master Slave principle in the so-called "hot stand-by" mode.

In this operating mode the automation system introduces Subdevice, the master device, the process. The second "reserve device ", the slave runs in the" updated "state, receives at each so-called "synchronization point" the current Da ten of the master and checks whether the master device is still in use is ready to drive.

If the reserve detects a total failure of the master device, so it takes over after a bumpless switchover (approx. 5-30 ms) the controller as the new master. This switchover takes place there with no loss of information.

The new master device leads in the subsequent "solo operation" the process alone; the failed subdevice is located in the stop state and is not on the lighting control more involved. It is reported as failed and can be sent to can then be exchanged.

The interaction of the two sub-devices depends on the project differentiation of the periphery:

Switched peripheral structure

The master device controls the process flow while the Reserve device only runs in readiness. In the event of In the event of a fault, the reserve device immediately takes over the control tion.

Two-channel structure

Both sub-devices control the process flow in parallel. The reserve device also outputs output signals and reads Input signals.

This readiness for fast and automatic master-slave switching is referred to as "hot stand-by" mode. For this operating mode it is essential that both sub-devices exchange data quickly and reliably. The processor modules of the S5-155H receive this via the central device coupling

• - the same user program
• - the same data blocks
• - the same process image content of the peripheral modules and
• - the same receive buffer contents of the communi used cation processors

This means that the reserve device is always on the same data stood like the master device held, so that in the event of an error it is immediately ready to take control.

A synchro is required for bumpless master-slave switching nization of the two sub-devices required. The current process data are exchanged (the reserve is "made up datet ") and compared with each other. This guarantees that both sub-devices have the same database gene.

The synchronization method used in the S5-155H is "event-controlled synchronization"
The synchronization takes place for all events that would lead to a different internal state in the two devices, z. B. different process images, times or communication data. It ensures that a bumpless master-slave switchover is possible at any time: no output signal is changed by the switchover and communication with the communication processors takes place without any loss of information. At these synchronization points it is also checked whether both sub-devices are processing the same program command. If they are not the same, the reserve device goes into the stop state with the error message "Synchronization error" (only one sub-device is still available).

The automation system S5-155H supports the non-stop Operation of the redundantly operated hardware components several self-tests. These check the state of the hardware (CPU, peripherals) and make comparisons between the two Subdevices through. It is determined which assemblies are faulty and need to be replaced.

The following components are tested in detail:

• - internal S5 bus
• - Coupling of the subdevices
• - Fault localization device
• - I / O modules
• - Central assemblies
• - memory modules

Every error detected by the self-test is recognized by the test software reported.

Depending on the operating status of the central devices, the following Test programs carried out:

Self-test during start-up

When it starts up, each subdevice runs through all of them Self-tests. If an error is already recognized here, it works the faulty subdevice in the stop state.

Self-test in the program cycle

During the cyclical processing of the user program un The operating system divides the self-test functions into individual short time segments of 5 ms ("time slices"). In egg In a user program cycle (S5 program) one or several of these time slices (in the system configuration para metrable) processed in the background until an error occurs is known.

Self-test in troubleshooting mode

In the event of an error that is not assigned to a specific sub-AG can be net, the reserve device goes into troubleshooting drove. This company is called when the operating sys tem when comparing the RAM or process image of the outputs a difference and thus a non-localizable error recognizes. In troubleshooting mode, the self-test as a whole executed; it takes about 10 to 30 seconds. The master device continues to work in "solo operation".

The localization device is used for error detection and Error localization with two-channel digital input and Di output modules.

A localization input (L- DE) and a localization output (L-DA) are provided. You bil together the localization device.

With the help of the "L-DA" (group supply), depending on the type of the assembly to be checked either the supply chip voltage or load voltage (digital output modules) or the Signal transmitter supply (digital input modules) disconnected tet.

The localization input "L-DE" is used to read back the Zu status of the localization outputs "L-DA".

Figs. 2 and 3 show these two principles of Redun dant input and output.

For uninterrupted operation, the error diagnosis Not only recognize these errors, but also localize them there can be used to passivate (deactivate) the faulty module can.

This passivation takes place with the redundant output structure groups by switching off the load voltage with the help of the Loka output outputs. This means that if an output module fails not the supply voltage of other modules is switched on for every redundant output module own localization output (L-DA) provided.

The signal states of defective input modules or communi cation processors are used in further process control ignored and not read.

The S5-155H system has service interfaces via which the following functions can be carried out with a service device ("PC / PG" or telephone socket and modem):

• - Test, diagnosis hardware and software
• - Changing software
• - Loading new software versions
• - Making backup copies

In the tower there are three identical workstations, each consisting of a TID, as can be seen in FIG. 1. The three TIDs contain the control and display functions for the place pilot (PL), for the roller pilot (PB) and the redundancy workstation (RUN). The TIDs have the following technical data:
Dimensions: 350 × 240 × 70 mm (W × H × D),
Display / touch diagonal: 12.1,
Brightness: 4 to 800 cd / m ² , brightness manually adjustable,
Viewing angle: 120 ° vertical, 110 ° horizontal; right in the middle

Hardware function keys: 5 pieces (TID on / off, Rei inclination mode on / off, 2 buttons for brightness adjustment, 1 Button for horn volume). Installation: In on-site Neigerah men.

• - There are identical operating and display indicators on each of the three TIDs levels available:
• - 08/26 (PL-North)
• - 10/28 (PL-South)
• - Taxi (PB North, South)
• - Overview (overview display north and south)

The two PID control and display stations in the tower cockpit, each consisting of a 20.1 "flat monitor with mouse (Pointer), are used for a clear display and more Lighting control functions. In addition, stand all levels of the TID are also available here. The over Visual display (main picture) shows the current lighting status in graphic form, on a background with lagerich tiger illustration, of the two S / L and the taxiways.

The flat monitor has the following technical data:
Installation dimensions: 488 × 399 × 112 (W × H × D)
Screen diagonal: 20.1 "
Resolution: 1280 × 1024 pixels
Refresh rate: min. 70 Hz
Display technology: LCD color display, TFT
Operation: remote, connection to the monitor via cable

The following displays (WINDOWS) and functions are available on the PID:

• a) Monitor display Overview display of the current level state of the north and south in graphical form including an show the blind objects (aircraft) with sensor operation.
• b) The four levels of the TID (see 3.1)
  • - 08/2610/28
  • - taxi
  • - Overview
• c) entering the blocking of taxiway sections,
• d) Definition of roll programs (0-6),
• e) Organizational function, e.g. B. Password requirements.

There are two ANBLF interface units (one each for the north and south runway) in the rack room level 1 using the modular ET200M technology and coupled to the control computer in the firing room via a redundant Profibus fiber optic connection. The transmission protocol is PROFIBUS-DP according to EN 50170; the transmission rate is at least 1.5 Mbit / sec.

In the S5-155H, two communication processors take over IM 308-C and in the two ANBLF interface units, respectively an intelligent Profibus interface IM 153-3 transfers the data development via the redundant coupling lines.

Bus connectors are used to connect digital 24 V Input and output modules for realizing the 24 V cut connection to the DFS ANBLF computer.

The signals described below apply to each S / L train, d. H. there is a separate signal for the north and south runways Interface ANBLF on the central control device.

ANBLF signals from BLS

ANBLF records and links all for the implementation of a Required operating level necessary signals and determined from this the actually available operating level.

• - Number of signals: 17
• - Signal voltage: 12-24 V (DC) (the signal voltage comes from Control and monitoring system the lighting)
• - Signal definition:
  0 → contact open
  1 → contact closed
• - Direction of communication: only to ANBLF

Further ANBLF signals to / from BLS

These signals relate to the operational level and the Landerich tion.

• - Number of signals from ANBLF to BLS: 7
• - Number of signals from BLS and ANBLF: 4
• - Signal voltage: 12-24 V (DC) (the signal span tion comes from BLS)
• - Signal definition:
  0 → contact opened
  1 → contact closed
• - Direction of communication: in both directions services

Note: The signals to be transmitted are only valid if when the valid bit is 1.

Fig. 4 shows the coupling of the interface unit to the lighting computer of the central control device in the new tower.

In the control S5-155H Tower are used for the airport ID fire (BEC) the following control and feedback signals redundant placed on digital input / output modules:

In the S5-155H, each because two control outputs ("On" / "Off") are provided. These both outputs (24 V) are - decoupled by diodes - closed summarized and further to a latching relay (remanence relay) guided. Thus, the BEC switching state also remains with one There is a total failure of the lighting computer.

To localize an error in a control signal is a fault localization in the control and monitoring system facility realized.

Signals

The following will be used for the obstruction lights (OBS) on the new tower Signals provided. The control signal is hardware-wise like this built up that in the event of a total failure of the control computer the obstruction lights are switched on automatically.

Signals

The control computer SIMATIC S5-155H in the new tower will be with an uninterruptible power supply (UPS) tet. If the mains supply fails, the lighting control must ner still functional for at least 60 minutes via the UPS be hig.

The coupling to the five PCs with the software for the TID and PID workstations takes place - as shown in FIGS . 1 and 5, with a redundant SINEC H1 bus connection (Ethernet).

The failure of a bus system (e.g. communication CP in S5 155H; Disconnecting the line; Failure of a CPU) has no Effect on the functionality of the workplaces.

The coupling between the lighting stations north-east, north-west, fire brigade and tower takes place, as shown in FIG. 1, redundantly via two fiber optic rings. All couplings are bus couplings.

The protocol is on the coupling links to the stations PROFIBUS according to EN 50170, Volume 2 with a transmission area speed of at least 1.5 Mbit / sec.

The handling of the data transport over the two bus systems is generated by the SIMATIC CP 5431 communications processors which work in parallel with the CPU and thus the CPU of Relieve coupling tasks.

The implementation of the electr. RS485 Profibus cables to the two redundant optical LWL = rings are made with "Optical Link Modules "(OLM). The power supply for these Mo module is redundant.

The two redundant fiber optic rings are operated with 10/125 µm single mode Fibers running. If one of the two coupling streets fails The other takes over the entire data exchange.

Redundant couplings:

• - Tower - Station North-West
• - Tower - Station North-East
• - Tower - station fire department

The coupling to the existing stations south-west and south East continues with the existing redundant fiber optic Point-to-point connections.

For this purpose, four new fiber optic fiber pairs (10/125 µm fibers), that will be relocated from the new tower to the old tower, in the old one Tower each with two fiber optic converters to the existing fiber optic Network (50/125 µm fibers) coupled to the south stations. The serial data transmission between the tower and the main control room takes place with the SINEC H1 bus system (according to IEEE 802.3 Ethernet) via a fiber optic coupling link.

The processing of the H1 data transport will be carried out with the communica execution processors SIMATIC CP 1430, which runs parallel to the CPU works and thus relieves the CPU of coupling tasks tet.

A teleservice unit is installed in the new tower with which the beacon control system (BLS) can be maintained remotely via the telephone network. With this teleservice, the following functions can be carried out on the S5 lighting stations:

• - Error and malfunction analysis
• - bug fixes
• - Software extensions (update service)

Fig. 6 shows the construction principle of the central control device SIMATIC, S5-155H, on the part of the tower.

The control units of the three stations north-west, fire brigade and north-east, like the tower, are based on a SIMATIC S5 155H realized. The Profibus connections to the new tower follow via redundant fiber optic couplings.

The control of the current controller and detection of the controller feedback messages are sent via a redundant (two-channel) Pro fibus-DP coupling (bus controller). In the event of a total failure of an S5 The coupling controllers in the regulator hold the control Switching status.

The lamp failures, the insulation status and the current is value of the series circles are made up by coprocessor units Based on SIMATIC S7-300 and recorded via a redundant Transfer the Profibus coupling to the S5-155H control unit.

In all stations there are sensor evaluation units for Recording of taxi traffic on the taxiways and runways. The signals from the evaluation devices - especially the occupancy rate applications of the sensor loops - are two-channel from the control The S5-155H unit is read in and processed redundantly.

For on-site control of systems and individual circuits as well whose condition monitoring is available from a service unit on PC Base (laptop) available.

Fig. 7 shows in a basic representation the connection of bus-controlled regulator devices (constant current regulator, as well as lamp failure and insulation monitoring systems). With this bus concept, the controllers are not controlled via individual digital outputs with latching relay modules and the messages are read in individually with digital inputs, but are coupled via a redundant Profibus. The controllers convert these control commands into current levels for the series circuits. For monitoring purposes, the controller sends messages via the bus, which are read in by the control and monitoring system and evaluated for error and operating messages.

For the regulated circuits north piste will continue Type 6SF51 controllers (as in the southern runway) are used. Single Lich the setpoint module is against a Profibus module exchanged. The performance and control parts remain unchanged. the Operation and the displays on the front panel of the controller 6SF51 also remain unchanged.

The bus coupling is designed redundantly, i. H. in the event of failure one of the two Profibuses remains the control and over Single-channel monitoring of the controller received from the S5-155H. the Switching to the intact bus takes place bumplessly within of a few milliseconds. The failure is ge in the control room reports. In the event of total failure of the S5 control or total failure the control (both bus systems failed), the The switching status on the Profibus module of the controller is maintained (Remanence function).

The S5-155H is connected to the controller bus with two Communication interfaces IM 308C in separate central units advise.

The data exchange between the S5 and a controller takes place via the redundant controller bus. The data exchange takes place bidirectional through the following interface signals:

Control signals from the S5 to the bus controller

The following control signals are sent from the S5-155H via the Transfer the controller bus to the two controller interfaces:

1. "Brightness level" control signal

The required brightness level is transmitted to the controller with a control byte. The number of level signals per controller depends on the required brightness level of the system:

APH, RSR, RCL, TDZ PAPI REH (incl. THR and RWE) 5 level signals 1%, 3%, 10%, 30%, 100% TXC 3 level signals 1%, 10%, 100% STB 3 level signals 10%, 30%, 100% APL, SFL, REL, SIG 1 step signal 100%

2. Control signal "controller on"

This control bit is used to control the controller in the Control byte "brightness level" selected intensity switched on.

3. "Controller reset" control signal

With this control bit the controller can switch off after a shutdown through the monitoring functions "overcurrent" or "Actual value failure" can be reset ("remote reset").

Message signals from the bus controller to the S5

The controller uses a redundant controller bus (Profibus DP) six message signals are available, which are sent by the control and Ü monitoring system are evaluated.

Each message signal is sent via two channels via this controller bus from two Profibus connection IM308C in expansion devices of the S5-155H read in.

1. Message signal operational message ("I")

Signal state "1" indicates that the controller has a current gives away. If the control signal is "1" and the signal Operating message is sent within a monitoring time from approx. 1 second to the signal state "1", that works Control and monitoring system assumes that the Reg ler is working properly.

Signal state "0" indicates that the controller has no power gives away. If the control signal is "0" and the signal Operating message is sent within a monitoring time from approx. 1 second to the signal state "0", that works Control and monitoring system assumes that the Reg it is properly switched off.

2. Message signal actual value failure ("I0")

Signal state "1" indicates that despite activation (Setpoint pending; controller enable; load contactor on) none Series circuit current flows. This leads to the shutdown of the Controller and to the message "actual value failure". Signal state "0" indicates that the controller is not through Actual value failure has been switched off.

3. Overcurrent signaling signal ("I <")

Signal state "1" indicates that the rms value of the Series circuit current several times within a certain Time pattern above the limit value that can be set on the controller has stepped. Thereupon the controller lock is activated in the controller activated and the load contactor switched off. Signal state "0" indicates that the controller is not through Overcurrent has been switched off.

4. "Location" signal ("F / O")

Signal state "1" indicates that the controller is on local operation is switched on. The control signals from the S5 155H are ignored. The error evaluation is not active.

Signal status "0" indicates that the controller is on remote control is switched. The selection of the operating levels takes place via the control signals of the S5-155H. The Feh Evaluation is active.

5. Bus error message signals ("BF1" / "BF2")

Signal state "1" indicates that the controller is on a r its two bus interfaces detected transmission errors ("BF1" or "BF2" depending on the interface). Of the Failure of both interfaces will be caused by the S5-155H knows.

Signal status "0" indicates that the Profibus interface set the controller to work correctly.

Evaluation of the controller signal signals

The controller alarm signals are evaluated by the lighting computer as follows:

Coprocessor units based on a SIMATIC S7-300 are used to monitor lamp failures, insulation states and actual current values of the series circuits, which are connected to the respective station lighting computer via a redundant Profibus (FDL protocol) (see Fig. 7).

New assemblies are available for the lamp failure message whose measured values are read out via a PLC (S7-300) will. The measuring principle corresponds to the well-known LAM construction group d. i.e., an idling lamp transformer is turned on Measurement window formed by taking the measured values voltage and time are recorded. The program in the S7 determines the Number of failed lamps based on the Inbe reference values determined in operation.

A step monitoring via an independent current measurement to enable (see draft standard IEC61 820), is supported by the LAM module also the rms value of the secondary current er and coupled to the S5-155H controller via the S7.

For easier commissioning, the LAM modules can no longer be synchronized, but the program in the S7 records and saves the values for a Re at the push of a button reference point. Via a connectable laptop, the Values can be read out and saved. In an exchange a LAM assembly, no new adjustment has to be made the (reference values are saved in the S7). At a If the S7 needs to be replaced, all reference values / Pa parameters can be loaded back into the S7 from the laptop.

Via a PC with flat panel installed in the LAM / ISO cabinet screen, the current measured values can be called up at any time be fenced.

Assemblies are also available for insulation measurement, which are also connected to the S7 (see Fig. 7).

With these new assemblies in connection with the evaluation program ISO in the S7, becomes a much larger measurement area richly covered (5 kΩ to 200 MΩ, optionally 999 MΩ) and this with a higher resolution (12 bit) than the known one ISO scanner (5 bit).

This means that in the control room (PC), the insulation value in can be displayed in a histogram (insulation value above the Time). As with LAM, there is a display of the current measured values available on the built-in flat screen.

A program is available on the laptop for commissioning Disposal.

The following advantages over the LAM / ISO concept of the south runway are, for example:

• - Less cabling in the station and as a result easier expansion. The control must be changed and As a rule, additions to the lighting system are only possible in terms of software can be added.
• - Insulation measurement with a measuring range from 5 kΩ to 200 MΩ (op tional up to 999 MΩ) with a resolution of at least 12 bits (previously 5 bits).
• - Lamp failure measurement with a very similar measuring principle as previous LAM assembly but with automatic determination the circuit-specific parameters during commissioning. Si Backup of the reference parameters in a laptop, with the poss possibility of reloading.
• - Less space required for control and LAM / ISO cabinets
• - Second current measurement independent of the controller (effective value) for monitoring the step currents (= brightness).

The flash lighting is controlled in the stations North-West and North-East via a pulse generator, which is from the tax and the monitoring system is switched on and off. the Passage frequency is fixed (not switchable).

For monitoring purposes, the pulse generator emits message signals that are sent by the Control and monitoring system can be read.

The coupling between the control unit S5-155H and the Im pulse generators are carried out via 24 V signals.

Control

To control the pulse generator with the control signal "Im pulse generator On "are two controls in the S5-155H outputs ("On" / "Off") provided. These two exits (24 V) are - decoupled by diodes - combined and continued to a latching relay (remanence relay). Consequently The SFL remains in the switching state even in the event of a total failure of the Lighting computer exist.

To localize an error in a control signal is a fault localization in the control and monitoring system facility realized.

Feedback from SFL

The pulse generator for the flashing fire sends 6 alarm signals available, which are determined by the control and monitoring system be evaluated.

Each message signal is redundant (two-channel) to the on gears of the S5-155H hung up. To localize a signal failure is an error localization in the control unit S5-155H implemented.

1. "Operating message" message signal

Signal state "1" indicates that the pulse generator is working tet. If the control signal is "1" and the signal "Be drive message is sent within a monitoring time of approx. 1 second to the signal state "1", the control goes and monitoring system assumes that the impulses About working properly.

2. "Remote / local" signal

Signal state "1" indicates that the pulse generator is on Local operation is switched. The control signals from the S5-155H relay modules are ignored.

Signal state "0" indicates that the pulse generator is on Remote control is switched. The selection of the operating steps is carried out via the control signals of the S5-155H- Relay assembly.

3. "Ready for operation" signal

Signal state "1" indicates that voltage is present and the pulse generator is ready for operation.

Signal state is not ready for operation.

4. Message signal "" 0 "indicates that there is no voltage or the pulse generator error TIL "(threshold flash)

Signal state "1" indicates that there is an error in the threshold lenflitz has occurred and both lamps are switched off are.

Signal state "0" indicates that there is no error on the lam pen of threshold lightning is present.

5. Message signal "1st threshold" (LAM warning)

Signal state "1" indicates that the first, at the pulse rate Reached via adjustable threshold for lamp failure is.

Signal state "0" indicates that the first threshold for Lamp failure has not yet been reached.

6. Message signal "2nd threshold" (LAM alarm)

Signal state "1" indicates that the second, on the pulse Transmitter-adjustable threshold for lamp failure reached is.

Signal state "0" indicates that the second threshold for Lamp failure has not yet been reached.

Evaluation of the message signals from the control and monitoring system

For obstruction lights (OBS) are in the lighting computers the stations north-west, fire brigade and north-east two each digital control outputs and ten feedback inputs are provided hen.

The control voltage for the control and feedback of the decent central OL control switchgear is 60 V DC. This tax and message signals are in an additional switch cabinet "obstruction light" to the S5 input and output level implemented by 24 V DC. In addition, the two S5 Control outputs OBS-1 / OBS-2 duplicated.

Activation by S5

The obstruction lights are controlled by two redun dante control signals of the S5. The two outputs (24 V) are - decoupled by diodes - combined and made up of two heads relay continued. These coupling relays are hardware moderately structured so that in the event of a total failure of the Steue control computer, the obstacle lighting is switched on automatically be switched.

The two control signals are now in the control cabinet Hin Fire lights for the control of 5 obstacles fire groups duplicated and converted to 60 V DC.

Feedback to S5

The 60 V feedbacks from the 10 groups of obstacle lights are displayed in the Control cabinet obstacle lighting on potential-free contacts implemented and from the lighting computer S5-155H with 24 V DC Sig nal voltage read in redundantly.

Evaluation of the message signals from the control and monitoring system tem

For each of the 10 obstruction light groups, the evaluation in the lighting computer takes place according to the following scheme:

The evaluation after a switching process "OBS-On" or "OBS- Off "takes place after a delay time of approx. 20 seconds.

A fault message is only sent in the main and secondary control room puts. OBS errors are not output in the tower.

Faults persist until the cause of the fault is fixed again. The lighting computers of the stations am which then automatically re-enter these obstruction light groups the surveillance.

For the wind direction display in the stations North-West and The following redundant signals are provided north-east hen.

Signals

To implement the procedures for CATIII rolling in to the start / Runway, the protection of stop bars and the block circuits on the taxiways, will capture the blind projects with a sensor system are required.

This essentially consists of:

• - Sensors (induction loops) embedded in the roll runways and runways
• - Evaluation devices in the stations to generate the receipts signals (induction loop occupied)

The evaluation of the data provided by the sensor elements is based on the following:

• a) Behavior of the sensors:
  A roller object that drives over a sensor loop triggers one or more occupancy pulses at this sensor, depending on the rolling sequence and the nature of the object.
• b) Occupancy of safety sensors:
  When crossing intersections and junctions, an object cannot occupy any safety sensors that are located to the side of the route being traveled.
• c) Transition between TXC blocks:
  The sensors are to be arranged in relation to the TXC blocks in such a way that a sensor is located exactly at the transition from one TXC block to the other. A possible offset must be so small that an object does not occupy the sensor located in front of a TXC block if it stops directly in front of this TXC block.
• d) The following must be fulfilled for clear detection of roller objects:
  • 1. The minimum distance between two consecutive roller blind objects must be so large that a sensor is only occupied by the following object when it is "enabled" by the preceding sensor (this is necessary due to the behavior of the sensors according to a); an object may generate several occupancy pulses).
    A sensor is activated when the object in front occupies a second sensor that is sufficiently far away.
    The following applies to the distance between these two sensors:
    • - Every object must fit between these two sensors, whereby an occupied signal is only generated on one.
    • - Between these two sensors there must be a complete TXC section (block) that can be switched as a train.
  • 2. For the consideration under d1), the sensor-active part is important, the sensor-active part generates an occupancy message) of a roller blind object.

Each evaluation card of the sensor elements has the following Mel designale to the control unit S5-155H in the station:

4 busy signals

(a maximum of 4 loops can be connected to an evaluation device be closed). An occupied signal reports "1" (24 V), when an object (airplane) has an associated loop runs, otherwise "0".

If a loop is defective, the busy signal pulses with approx. 1 Hz and the "Error" signal is "1".

1 "Operation" signal

This signal is "1" (24 V) when the evaluation card of the Device is working properly.

1 "Error" signal

This signal is "1" (24 V) if one or more Loops have a defect.

All signals from the sensor system are sent to the S5-155H Stations laid out with two channels. About the error localization in the S5-155H a defective input is detected and ge reports.

A service is available for on-site diagnosis and control unit (laptop) provided.

This service unit is used to control the lighting system systems and monitoring of operating states (controller, LAM, ISO and sensors) of a station. This laptop can be on the fly Operation can be linked to the control units S5-155H. The software on the laptop automatically recognizes which one Control unit (north-east, fire brigade or north-west) ver is bound.

The displays and control options in each station relate hen refer to all lighting and sensor systems of this Sta tion and are also in the event of a total failure of the coupling to the tower still fully functional. The displays are made via a Window system, d. H. multiple displays (images) can be the same opened early and moved to their position on the screen the. The operation is carried out with a mouse.

The service device is designed as a portable Pentium PC (laptop) leads. Windows NT is used as the operating system.

The following operating and display levels (Windows) are provided hen:

overview

The status (on / off / location / Error) of all systems of the respective station in one window shown.

Circular window

Circle windows show all status data of selected circles (Reg ler, LAM, ISO).

Sensor window

In the sensor image, occupancy messages and fault states are shown Sensor loops (if recorded by the S5-155H) are displayed.

Note: further details on the system status of the sensor loop with the sensor software from Honey well read from the sensor acquisition devices will.

Controlling the lights (local control)

With the service unit, lighting systems in the Sta tion can be controlled in which the service device is coupled became. The prerequisite is that there is an operator with control has registered with a password.

With the service unit, every approach, S / L system and ever the STB / TXC section and the other systems individually be switched on and off (as far as in the respective Sta tion available). The brightness setting for each system can be can also be chosen. It is operated using the mouse by selecting on / off buttons on the screen (window).

Other functions

• - Log in / out
• - Change passwords
• - End of program

Fig. 8 shows the basic structure of a decentralized control device, here a SIAMTIC of type S5-155H.

The control rooms are based on a PC with a connection to the tower as well as a monitor, printer and UPS (see Fig. 1).

In summary, the following services are provided:

• - Graphic representation of the lighting and system status,
• - Individual displays for each circuit with status controller, LAM and ISO,
• - Individual display of the status of the sensor evaluation devices (Ribbons),
• - Calculate and display the operating times for lamps and Regulator,
• - Entering limit values and parameters,
• - Status displays of the ANBLF messages,
• - Storage and display of fault messages for a period of time of at least 7 days. Print out the fault messages with Da date / time,
• - Storage and display of all operating states of the beacons for a period of at least 7 days,
• - Printing of selected operating states on a prototype colldrucker.
• - Administrative functions such as password-protected access and Data backup.

The displays appear in color in a window system, and operation is carried out in a user-friendly manner using menus with the mouse.

PC Pentium II 450 MHz

with:

• - 20 "color monitor with graphics card, resolution 1024 × 768 pixels
• - Color printer with single sheet feeder for logs
• - Matrix printer with continuous paper as a fault printer
• - Radio clock for time and date synchronization
• - Mouse and keyboard
• - WINDOWS NT operating system

SINEC H1 coupling to the tower with fiber optic converter (OLM) Visuali system.

The system is buffered by a UPS for at least 10 minutes. There after the computer is shut down automatically. According to how When the mains voltage returns, the system will automatically run again high.

The screen is used to display all operating data, Be operating states, error messages and operator inputs.

The display takes place via a window system, i. H. several An show (pictures) can be opened at the same time and in their la ge can be moved on the screen.

The operation is carried out with the mouse.

The screen is divided into several areas as follows:

• - title bar
• - Message line
• - Image area
• - Screen toggle buttons

The graphical overview shows the state of the entire The lighting system is clearly shown in graphic form represents.

The picture contains:

• - Slope N / S
• - taxiways
• - Apron

The runway lighting is displayed in circles, the An show stop bars and apron for taxiways. In the event of a power failure or emergency power supply, each station drifted warning indicators displayed during normal mains operation are not visible.

The states of a lighting system are indicated by colors:

The ON state of the individual lighting systems is shown as follows:

The screen selection buttons each show a group error status which is formed from all the errors in this picture are displayed. If an error occurs, the task changes color from gray to magenta.

Select circle picture with mouse

The graphic overview screen is also used for easy selection the detailed signal display in the circular image. You just have to the graphic symbol of the lighting system with the left Mouse button can be selected.

If you select it with the right mouse button, a list with al len systems faded in from which a circle picture to open is selected.

A maximum of two circular displays can be opened at the same time be.

For every approach and runway system as well as for every STB and TXC section, as well as other systems, is an image (window) with the associated circuits available. The circle image (Window) contains all the information available about the current circles of a system.

The circle image can be opened by "touching" at the top with the Mouse can be moved on the screen.

The input can also be made from the circular image via other windows of district-related data possible.

The individual circular images can be found in a selection window via their name or selected via the graphic overview screen will.

The images contain the following advertisements System data

• - Identification of the system ¹⁾
• - Control of the system ¹⁾

Controller data

• - Remote / Local ¹⁾
• - set brightness level ¹⁾
• - Controller feedback ¹⁾
• - Controller operating time ²⁾

Lamp data

• - Number of defective lamps ¹⁾
• - Number of lamps per circuit ¹⁾
• - lamp operating time ²⁾
• - maintenance interval ³⁾
• - relative lamp load ³⁾
• - LAM limit values ³⁾
• - LAM status (OK, partial, total failure) ¹⁾

Isolation data

• - ISO actual value [kOhm]
• - ISO limit values ³⁾
• - ISO status (OK, partial, total failure) ¹⁾

The designations of the individual pieces of information have the following meaning:

• 1. Data is displayed
• 2. Data is displayed and can be reset
• 3. Data is displayed and can be entered

Some districts and special systems are unregulated and owned zen therefore no lamp and insulation data as well as controller data and controller operating times.

Similar to the overview image, you can also use the circle image Changed out the displayed system using the selection list become rare.

The operating times of all circles are calculated and stored chert.

Operating times are calculated in two ways:

Absolute total operating time

The absolute total operating time (controller operating time) of a Circle is the "real" operating time of the circle.

Rated uptime

The rated operating time since the last maintenance, in the following Be text as rated operating time or lamp operating time is the sum of the operating times of a circle since the last maintenance.

In the case of regulated circuits, the switch-on times of the circuits before adding with the reciprocal of the percentage lamp le The service life of the respective brightness level is multiplied. That means that the operating times shown are evaluated operating times.

example

The Runway system is operated in brightness level 3. The system is switched on for 0.5 hours. 80% is saved as the relative lamp load for level 3 of circuit 1 (runway).

The following value is added to the operating time of circuit 1 during this switch-on period:

0.5 h. 0.80 = 0.4 h

The operating times are always updated as long as the Computer is switched on.

In the case of unregulated circuits, the switch-on times of the the respective circle simply added. That is, it will be the ech The operating time of the lamps is displayed.

In the status overview of the control system (window), the Control of the lights with the control computers in all Sta functions and the couplings are shown graphically, so that on a glimpse of the state of the system can be recorded.

In the event of malfunctions in a control computer or a coupling the associated symbol flashes.

If not all components fit in one picture, will the individual stations distributed over several pictures. the Couplings between the stations are then additionally implemented in shown in an overview image.

The control system monitors the lighting system. Realize it a malfunction, an error message is generated for stored for at least 30 days, (ultimately limited by Storage space) is displayed and printed out.

The "message line" and the Image (window) "Message list".

Error messages are also shown on the printer as a message sequence report collapsed.

All error messages must be acknowledged by the operating personnel the.

All error messages are saved on a magnetic disk. Error messages are always recorded when the computer is turned on is switched.

The system knows two levels of errors:

• - partial failure
  (Threshold 1 exceeded)
  These error messages indicate to the maintenance department that action is required.
• - Total failure = alarm
  (Threshold 2 exceeded)
  These errors are so serious that the operation of at least one lighting system is no longer fully guaranteed and must be viewed as critical errors.

In the picture (window) "Message list" they are saved in the computer error messages are displayed.

The display is in the form of a list, with the displayed errors ler show an excerpt from the saved errors len. The notification list can be scrolled to one by one all Display errors.

The following data is displayed for each error:

• - Date and time error detected / acknowledged / rectified
• - State recognized / acknowledged / remedied
• - Circle name
• - System identification (if applicable)
• - fault location (station)
• - Error category (partial failure / total failure)

All errors of a display or all saved errors can be displayed Errors can be acknowledged at once.

The message list can be printed out (see also printer expenditure).

The message list has two types of presentation: current and ar chiv. There are only pending errors in the current list visible. All detected errors are in the archive view visible, with separate entries for the states recognized, acknowledged and rectified.

The message line is independent of the selected picture (window) visible at all times.

The message line is used to inform the operator of the last recognized Display errors regardless of the selected image.

The same information about the error appears in the message line displayed as in the message list.

The error messages that are recognized and displayed in the control room can essentially be assigned as follows:

• - Circuit failure
• - Errors in the control and monitoring system

Circle errors are those errors that are clearly refer to a circuit of the lighting system hen.

• a) Controller error
• b) lamp failures
  With lamp failure monitoring, a distinction is made between two error levels. The first stage is the "partial failure" (limit value 1), the second stage is the "total failure" (limit value 2).
• c) State of isolation
  Same function as with lamp failures
• d) lamp operating time

This error indicates that the lamp limit has been exceeded driving time. It is displayed when the operating time counter for the lamps in a circle has a higher value than the saved maintenance interval (see circle diagram).

When the lamps are replaced, the operating time may counter must be reset to zero (see circle image). This causes the "Operating time" error to be re-established clears.

The error, control and monitoring system includes all failures in the control and monitoring system:

• - Power supply
• - Fan
• - S5 internal battery
• - CPU
• - communication module
• - Input / output module

The switching status of all circuits, systems of lighting and Signals from the sensor system are displayed with the date and time and stored in a database for at least 7 days chert. If necessary, signals can be displayed in a trend window shows or can also be printed out.

The following signals are saved:

• - Selection of all systems and brightness levels including Switching sections TXC and STB
• - All ANBLF reports
• - Feedback from all controllers (ok or error)
• - LAM actual values
• - ISO actual values

The actual values for LAM, ISO and brightness level are in Kur venform shown.

The selection of the systems, the ANBLF messages and other Be Drive messages are similar to the error messages in lists form output.

In the main control room, as shown in Fig. 1, two printers are connected. The following lists and reports are printed out on these printers:

• - Registration list
• - Lamp failure log
• - Operating times log
• - Operating states over time

The message list is printed continuously when an error is detected, acknowledged and rectified. Each page of the message list is printed with a page header. The following information is printed for each error:

• - Date and time error detected / acknowledged / rectified
• - State recognized / acknowledged / remedied
• - Circle name
• - System identification (if applicable)
• - fault location (station)
• - Error category (partial failure / total failure)

On request, a log of all current lamps is switched off case data printed out. The expression is according to systems and sorted by the corresponding circle numbers. Each side comes with provided with a header, the day of the week and the date of the printout contains. The pages are numbered. Upon request, will a log of the operating times of the controllers and the lamps of all circles printed out. The expression is according to system and sorted by the corresponding circle numbers. Each side comes with provided with a header, the day of the week and the date of the printout contains. The pages are numbered.

The "Login" function is used to provide the operator with certain Enable functions of the program.

The operator must enter a secret password in order to register to log into the computer.

The "login" mechanism prevents unauthorized operators or strangers important functions of the Program as it has the secret passwords not knowing.

The "Log off" function is the opposite of logging in. When the operator logs off, all of them are released Functions locked again.

In addition to the "Supervisor" user, who owns all system resources are available, the other users (users) must with their access rights. Also receives each user a password.

The following rights are provided:

• - Change parameters / reset values
• - Control the lights

A user can have all, part or none of these Rights are assigned. A user without one of these However, access rights can open all images (windows) do not change any data.

In normal operation, the data is entered on an in the computer built hard drive saved.

The stored data are updated at set intervals automatically exported to the hard disk (CSV file). from there the operator can transfer the files to a DOS or ZIP Back up the floppy disk and B. further processed with Excel / Access will.

Should it be lost due to a defect in the computer Data come, the data can be downloaded from the DOS or ZIP The floppy disk can be copied back into the computer.

In addition, entered parameters and settings of the Lighting on the S5 side and on the PC kept so that in In the event of an error, restore the last existing state in each case can be asked.

If the computer is to be switched off, the program is first to end.

This function is protected by a password and can only triggered by authorized persons.

Claims (11)

1. Control system for airfield lighting systems for controlling, Regulation and / or monitoring of actuator and / or sensor elements ments of airfield lighting devices, including a zent Real redundant control device to which inputs and outputs facilities and by means of at least one interface at least one via a redundant bus system decentralized, with the actuator and / or sensor elements from Airport lighting devices connectable control device is closable. 2. Control system according to claim 1, characterized indicates that the central control device a Programmable logic controller is, preferably a SINATIC, particularly preferably of the type S5-155H or S7- 400H. 3. Control system according to claim 1 or claim 2, there characterized by that the decentra le control device is a redundant control device. 4. Control system according to one of claims 1 to 3, there characterized by that the decentra le control device a programmable logic controller is, preferably a SIMATIC, particularly preferably of the type S5-155H or S7-400H. 5. Control system according to one of claims 1 to 4, there characterized by that the cut body includes communication processors. 6. Control system according to one of claims 1 to 5, there characterized in that the bus system is an Ethernet or a PROFIBUS network. 7. Control system according to one of claims 1 to 6, there characterized by that this is high is available operable. 8. Control system according to one of the preceding claims, characterized in that at least Sub-areas can be operated in a safety-oriented manner. 9. Control system according to one of claims 1 to 8, there characterized by that this out commercially available assemblies and / or components can be built up is. 10. Control system according to one of claims 1 to 9, there characterized by the fact that this is sent to be standing control systems is adaptable. 11. Control system according to one of claims 1 to 10, there characterized by that this module is expandable.