CN105550077A - Backup control system - Google Patents
Backup control system Download PDFInfo
- Publication number
- CN105550077A CN105550077A CN201510909280.2A CN201510909280A CN105550077A CN 105550077 A CN105550077 A CN 105550077A CN 201510909280 A CN201510909280 A CN 201510909280A CN 105550077 A CN105550077 A CN 105550077A
- Authority
- CN
- China
- Prior art keywords
- steering order
- computing machine
- backup
- computer
- standby control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/16—Error detection or correction of the data by redundancy in hardware
- G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
- G06F11/2002—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where interconnections or communication control functionality are redundant
- G06F11/2005—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where interconnections or communication control functionality are redundant using redundant communication controllers
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/16—Error detection or correction of the data by redundancy in hardware
- G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
- G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
- G06F11/2023—Failover techniques
- G06F11/2028—Failover techniques eliminating a faulty processor or activating a spare
Abstract
The invention discloses a backup control system and belongs to the technical field of aviation control. The system comprises a driver plate arranged in a computer and a backup control board that sends a backup instruction to the driver plate; the computer can generate a control instruction of controlling an airplane to run normally; the control instruction is sent to an execution mechanism through an interface board; and the execution mechanism controls each part of the airplane to perform motion. Through a method for physically isolating the backup control system from a normal control system, the influence on a backup channel after a fault occurs to the computer is reduced as far as possible, and after a normal channel of the computer has a fault, the backup channel still can work normally, so that a backup function of the system is realized.
Description
Technical field
The invention belongs to aviation control technology field, be specifically related to a kind of Standby control system.
Background technology
Standby control system is the Standby control to aviation flight equipment, when the normal steering order of aircraft effectively can not pass to topworks, completed the instruction input of aircraft, thus control aircraft has continued aerial mission by Standby control system.
In prior art, Standby control system is generally adopted and is realized in two ways, a kind of is arrange a set of independent hardware system to realize, such as the instruction of Standby control plate is directly accessed driving control unit, after driving control unit receives backup instruction, realize the normal manual switchover to backup, should realize when the whole fault of normal control system in addition, automatically switch to Status of Backups, drive the motion of rear end topworks; Another mode receives the backup instruction of Standby control plate in computer-internal by the interface board of computing machine, then send to drive plate by core bus, controls topworks realize Standby control function by drive plate.The first arranges a set of independent standby system, the independence of function is relatively good, shortcoming is the driving control unit too relying on rear end, high to the reliability requirement of driving control unit, switch control logic is complicated, the technology of current driving control unit is not mature enough, introduces new risk to system worked well; The degree of coupling of the second way is too high, if the interface board fault of computer-internal, so backup instruction cannot be delivered to the topworks of rear end, and backup functionality is lost.
Summary of the invention
In order to solve the problem, the invention provides a kind of Standby control system, both exceeded the driving control unit relying on rear end, alleviate as much as possible again when backup computer breaks down, it is on the impact of backup path.
Standby control system of the present invention comprises two computing machines, Standby control plate, is provided with interface board and drive plate in described arbitrary computing machine, wherein,
First computing machine, for generating the first steering order;
Second computer, for generating the second steering order;
Standby control plate, manually can produce the 3rd steering order, and the signal of described 3rd steering order is simulating signal;
Two interface boards, to be separately positioned in described first computing machine and second computer and to be interconnected, being respectively used to reception first steering order, the second steering order, and described first steering order and the second steering order are sent to logic judgment unit;
Two drive plates, be separately positioned in described first computing machine and second computer, and all connect described Standby control plate, for receiving described 3rd steering order, and the signal of the 3rd steering order is converted to digital signal, send to described logic judgment unit afterwards;
Described logic judgment unit, also receive the duty of described first computing machine and second computer, duty according to described first steering order, the second steering order, the 3rd steering order and two computing machines generates effective instruction, and described duty comprises normal work and fault;
Topworks, performs described effective instruction.
Preferably, described Standby control plate comprises one or two piece, and arbitrary Standby control plate all connects described two drive plates.
In such scheme preferably, described logic judgment unit judgement first computing machine or second computer have at least one normal time, and do not provide manual backup and go code, the effective instruction provided is the first steering order or the second steering order.
In such scheme preferably, when the duty of described first computing machine that described logic judgment unit receives and second computer is fault, automatic generation backup goes code, when described logic judgment unit has backup to go code, and when receiving the 3rd steering order, the effective instruction provided is the 3rd steering order.
This invention by backup functionality loose coupling on the drive plate of computing machine, after the normal channel fault of computing machine, backup path still can normally work, the backup functionality of system is achieved, this invention avoids standby system depending on unduly single electromechanical equipment, avoid the risk of the immature introducing of electromechanical equipment technology, independent driving control unit need not be set, alleviate the weight of standby system, reduce the complexity of standby system, solve again the height coupled problem of normal control system and Standby control system, the advantage of computing machine can be played to greatest extent, improve the reliability of standby system, alleviate the weight of standby system, when standby system generation problem, also drive plate can be navigated to as soon as possible, improve the maintainability of computing machine, alleviate pressure during standby system integrated verification.
Accompanying drawing explanation
Fig. 1 is the structural representation of a preferred embodiment of Standby control system of the present invention.
Fig. 2 is instruction formation logic figure embodiment illustrated in fig. 1.
Embodiment
For making object of the invention process, technical scheme and advantage clearly, below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is further described in more detail.In the accompanying drawings, same or similar label represents same or similar element or has element that is identical or similar functions from start to finish.Described embodiment is the present invention's part embodiment, instead of whole embodiments.Be exemplary below by the embodiment be described with reference to the drawings, be intended to for explaining the present invention, and can not limitation of the present invention be interpreted as.Based on the embodiment in the present invention, those of ordinary skill in the art, not making the every other embodiment obtained under creative work prerequisite, belong to the scope of protection of the invention.Below in conjunction with accompanying drawing, embodiments of the invention are described in detail.
In describing the invention; it will be appreciated that; term " " center ", " longitudinal direction ", " transverse direction ", "front", "rear", "left", "right", " vertically ", " level ", " top ", " end " " interior ", " outward " etc. instruction orientation or position relationship be based on orientation shown in the drawings or position relationship; be only the present invention for convenience of description and simplified characterization; instead of instruction or imply indication device or element must have specific orientation, with specific azimuth configuration and operation, therefore can not be interpreted as limiting the scope of the invention.
Task of the present invention proposes a kind of Standby control system, this standby system had both avoided depending on unduly single electromechanical equipment, the height of normal control system and Standby control system is avoided again to be coupled, the advantage of computing machine can be played to greatest extent, by backup functionality loose coupling on computers, as long as it is not bad to achieve computing machine power panel, backup functionality just can realize, improve the reliability of standby system, alleviate the weight of standby system.
Standby control system of the present invention comprises two computing machines, Standby control plate, is provided with interface board and drive plate in described arbitrary computing machine, wherein,
First computing machine, for generating the first steering order;
Second computer, for generating the second steering order;
Standby control plate, manually can produce the 3rd steering order, and the signal of described 3rd steering order is simulating signal;
Two interface boards, to be separately positioned in described first computing machine and second computer and to be interconnected, being respectively used to reception first steering order, the second steering order, and described first steering order and the second steering order are sent to logic judgment unit;
Two drive plates, be separately positioned in described first computing machine and second computer, and all connect described Standby control plate, for receiving described 3rd steering order, and the signal of the 3rd steering order is converted to digital signal, send to described logic judgment unit afterwards;
Described logic judgment unit, also receive the duty of described first computing machine and second computer, duty according to described first steering order, the second steering order, the 3rd steering order and two computing machines generates effective instruction, and described duty comprises normal work and fault;
Topworks, performs described effective instruction.
In the present embodiment, described Standby control plate comprises one or two piece, and arbitrary Standby control plate all connects described two drive plates.
Described logic judgment unit judgement first computing machine or second computer have at least one normal time, and do not provide manual backup and go code, the effective instruction provided is the first steering order or the second steering order.
When the duty of described first computing machine that described logic judgment unit receives and second computer is fault, automatic generation backup goes code, when described logic judgment unit has backup to go code, and when receiving the 3rd steering order, the effective instruction provided is the 3rd steering order.
It should be noted that, first computing machine and second computer are the computing machine that normal control system operates, Standby control system is the control system of two remainings, the control object of topworks is rudder face, control overflow is the backup button connecting Standby control plate, manually enters backup mode, by backing up the knob of plate, control packing up of rudder face, put down and close; If two computing machines all faults, enter backup mode automatically, now by the knob of backup plate, control packing up of rudder face, put down and closing function.Although Standby control plate is separate unit, the signal of Standby control intralamellar part is two remaining signals, and namely each computer for controlling receives the steering order of coming from backup control panel, and topworks receives the instruction of two computing machines, drives control surface deflection.Computer for controlling is two, and two computing machines are identical, interchangeable, can intercom mutually between two computing machines, receive duty and the data of the other side, computer for controlling adopts master-Hot Spare mode to work, i.e. two computing machines all output orders, under normal circumstances, the signal of acquiescence computing machine 1 is effective, and two computing machines all export the instruction of computing machine 1, when after computing machine 1 fault, automatically switch to the signal of computing machine 2, two computing machines all export the instruction of computing machine 2.When computing machine 2 fault, because the signal giving tacit consent to computing machine 1 is effective, need not switch, export the instruction of computing machine 1.When two computing machines all faults, system automatically produces backup and goes code, and now, the button of pilot control Standby control plate, realizes Standby control.
In the present invention, the acquisition process of the signal of being correlated with except Standby control is arranged on the drive plate of computing machine, and other signal that computing machine normally controls to need still is arranged on the interface board of computing machine.By physical isolation, the driver module of all integrated inside of function of the Standby control system that computing machine is born.Therefore this driver module is the core of whole Standby control system, as shown in Figure 1, comprises the steps:
1) backup signal of Standby control plate is received;
2) duty of the steering order resolved of normal control system and two computing machines self is received;
3) processing backup signal, is digital quantity by backup signal from the formal transformation such as analog quantity, discrete magnitude;
4) steering order formation logic, as shown in Figure 2, as long as there is a computing machine normally to work, when receiving only the instruction of normal system, performs the instruction of normal system; The mode receiving only Standby control plate go code and Standby control instruction time, perform Standby control instruction; The mode receiving steering order that normal control system resolves and Standby control plate at the same time goes code, Standby control signal, execution be the backup instruction of Standby control plate; Receive the Standby control signal of steering order that normal control system resolves and Standby control plate at the same time, go code without mode, execution be the steering order of normal system; If two computing machines all faults, computing machine automatically produces mode and goes code, if now receive the Standby control signal of steering order that normal control system resolves and Standby control plate simultaneously, execution be Standby control instruction;
5) rear end execution architecture motion is driven.
Standby control plate is pressed for aircraft pilot, driver presses the backup mode push button of Standby control plate, this button is the discrete magnitude on 28V/ ground, after pressing, the drive plate of two computer for controlling inside all receives a magnitude of voltage, this value may be 28V, also may lower than 28V, if this value is more than or equal to 18V, computing machine judges that it is as logical truth " 1 ", computing machine enters backup mode, now, what driver pressed Standby control plate puts down button, this button is the discrete magnitude signal on the 28V/ ground of three gears, the drive plate of two computer for controlling inside judges that the logical value of this three gear is as " 001 ", final logical value is " 1 ", two computer-internal produce the signal all producing 28V, after two computer interactive signals, discovery computing machine is normal, therefore the 28V signal that computing machine 1 produces is sent to the servo control mechanism motor of rear end, motor is under the effect of 28V power supply, rotate clockwise, driving mechanical mechanism kinematic, drive the control surface deflection of rear end, motor movement is to extreme position, control surface deflection is to maximal value.
When two computing machines all produce fault, (it should be noted that, this refers to the fault of computing machine when sending the first steering order or the second steering order, do not comprise computer power supply, the unit failure of other irrelevant steering order such as drive plate disposed thereon), after Autonomous test finds fault, and produce faulting instruction and send to another computing machine, after computing machine receives faulting instruction, send the signal of " backup is connected automatically ", now, button in the receipts that driver presses Standby control plate, this button is the discrete magnitude signal on the 28V/ ground of three gears, the drive plate of two computer for controlling inside judges that the logical value of this three gear is as " 100 ", final logical value is " 1 ", two computer-internal produce the signal all producing-28V,-28V the signal produced is sent to the servo control mechanism motor of rear end by computing machine, motor is under the effect of-28V power supply, rotate counterclockwise, driving mechanical mechanism kinematic, drive the control surface deflection of rear end, motor movement is to reciprocal extreme position, rudder face is recovered to zero-bit.In this embodiment, two equal faults of computing machine, but the power supply of computing machine is normal work, drive plate is also normal, and therefore backup functionality can realize.If the interface board of computing machine has fault, such as A/D converter fault, all signals received cannot carry out the conversion of analog quantity to digital quantity, normally the resolving function and cannot realize of computing machine, now, the acquisition and processing due to backup signal is on drive plate, and therefore the fault of interface board A/D converter can not spread to standby system, standby system can normally work, and doing so avoids the dependence of conventional backup docking oralia.In addition, the interface message of standby system is compared to normal system, and negligible amounts, the physical space taken is also little, and the function of this part moves on drive plate and provides possibility.Backup functionality plate quantity should be the least possible, at least one piece, two pieces at the most; The software of backup functionality is also independent as much as possible, not with other Function Coupling.
This invention by backup functionality loose coupling on the drive plate of computing machine, after the normal channel fault of computing machine, backup path still can normally work, the backup functionality of system is achieved, this invention avoids standby system depending on unduly single electromechanical equipment, avoid the risk of the immature introducing of electromechanical equipment technology, independent driving control unit need not be set, alleviate the weight of standby system, reduce the complexity of standby system, solve again the height coupled problem of normal control system and Standby control system, the advantage of computing machine can be played to greatest extent, improve the reliability of standby system, alleviate the weight of standby system, when standby system generation problem, also drive plate can be navigated to as soon as possible, improve the maintainability of computing machine, alleviate pressure during standby system integrated verification.
Finally it is to be noted: above embodiment only in order to technical scheme of the present invention to be described, is not intended to limit.Although with reference to previous embodiment to invention has been detailed description, those of ordinary skill in the art is to be understood that: it still can be modified to the technical scheme described in foregoing embodiments, or carries out equivalent replacement to wherein portion of techniques feature; And these amendments or replacement, do not make the essence of appropriate technical solution depart from the spirit and scope of various embodiments of the present invention technical scheme.
Claims (4)
1. a Standby control system, is characterized in that, comprising:
First computing machine, for generating the first steering order;
Second computer, for generating the second steering order;
Standby control plate, manually can produce the 3rd steering order, and the signal of described 3rd steering order is simulating signal;
Two interface boards, to be separately positioned in described first computing machine and second computer and to be interconnected, being respectively used to reception first steering order, the second steering order, and described first steering order and the second steering order are sent to logic judgment unit;
Two drive plates, be separately positioned in described first computing machine and second computer, and all connect described Standby control plate, for receiving described 3rd steering order, and the signal of the 3rd steering order is converted to digital signal, send to described logic judgment unit afterwards;
Described logic judgment unit, also receive the duty of described first computing machine and second computer, duty according to described first steering order, the second steering order, the 3rd steering order and two computing machines generates effective instruction, and described duty comprises normal work and fault;
Topworks, performs described effective instruction.
2. Standby control system as claimed in claim 1, it is characterized in that: described Standby control plate comprises one or two piece, arbitrary Standby control plate all connects described two drive plates.
3. Standby control system as claimed in claim 1, it is characterized in that: described logic judgment unit has one at least normally at judgement first computing machine or second computer, and not providing manual backup when going code, the effective instruction provided is the first steering order or the second steering order.
4. Standby control system as claimed in claim 1, is characterized in that: when the duty of described first computing machine that described logic judgment unit receives and second computer is fault, automatically generates backup and go code; When described logic judgment unit has backup to go code, and when receiving the 3rd steering order, the effective instruction provided is the 3rd steering order.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510909280.2A CN105550077B (en) | 2015-12-10 | 2015-12-10 | A kind of Standby control system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510909280.2A CN105550077B (en) | 2015-12-10 | 2015-12-10 | A kind of Standby control system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105550077A true CN105550077A (en) | 2016-05-04 |
| CN105550077B CN105550077B (en) | 2019-02-12 |
Family
ID=55829273
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510909280.2A Active CN105550077B (en) | 2015-12-10 | 2015-12-10 | A kind of Standby control system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105550077B (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106774058A (en) * | 2016-12-02 | 2017-05-31 | 博太科防爆设备（上海）有限公司 | A kind of nuclear power anti-explosion time-delay fuse control system and method |
| CN106933094A (en) * | 2017-03-01 | 2017-07-07 | 北京天恒长鹰科技股份有限公司 | A kind of pair of airborne flight control computer of remaining |
| CN113534655A (en) * | 2021-09-07 | 2021-10-22 | 中国商用飞机有限责任公司 | Telex flight backup control system and starting method thereof |
| WO2023035497A1 (en) * | 2021-09-07 | 2023-03-16 | 中国商用飞机有限责任公司 | Fly-by-wire flight backup control system and method |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140303812A1 (en) * | 2013-04-05 | 2014-10-09 | Hamilton Sundstrand Corporation | Backup control system |
| CN104192300A (en) * | 2014-04-22 | 2014-12-10 | 中国商用飞机有限责任公司北京民用飞机技术研究中心 | A flight control system and a method |
| CN104934086A (en) * | 2015-04-27 | 2015-09-23 | 中广核工程有限公司 | Equipment multipath instruction control method and preferable control instruction output device of nuclear power station |
-
2015
- 2015-12-10 CN CN201510909280.2A patent/CN105550077B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140303812A1 (en) * | 2013-04-05 | 2014-10-09 | Hamilton Sundstrand Corporation | Backup control system |
| CN104192300A (en) * | 2014-04-22 | 2014-12-10 | 中国商用飞机有限责任公司北京民用飞机技术研究中心 | A flight control system and a method |
| CN104934086A (en) * | 2015-04-27 | 2015-09-23 | 中广核工程有限公司 | Equipment multipath instruction control method and preferable control instruction output device of nuclear power station |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106774058A (en) * | 2016-12-02 | 2017-05-31 | 博太科防爆设备（上海）有限公司 | A kind of nuclear power anti-explosion time-delay fuse control system and method |
| CN106933094A (en) * | 2017-03-01 | 2017-07-07 | 北京天恒长鹰科技股份有限公司 | A kind of pair of airborne flight control computer of remaining |
| CN106933094B (en) * | 2017-03-01 | 2020-08-18 | 北京天恒长鹰科技股份有限公司 | Dual-redundancy airborne flight control computer |
| CN113534655A (en) * | 2021-09-07 | 2021-10-22 | 中国商用飞机有限责任公司 | Telex flight backup control system and starting method thereof |
| WO2023035497A1 (en) * | 2021-09-07 | 2023-03-16 | 中国商用飞机有限责任公司 | Fly-by-wire flight backup control system and method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105550077B (en) | 2019-02-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105550077A (en) | Backup control system | |
| CN112124568B (en) | Fly-by-wire flight control system and control method | |
| CN202372803U (en) | Hot-standby redundancy control system | |
| CN107347018A (en) | A kind of triple redundance 1553B bus dynamic switching methods | |
| US20120101663A1 (en) | Distributed flight control system implemented according to an integrated modular avionics architecture | |
| CN108776486B (en) | Redundancy architecture method for flight control system of large-scale medium-high altitude scouting and printing integrated unmanned aerial vehicle | |
| CN103822539B (en) | A kind of rocket ground test control system based on redundancy structure | |
| CN202244061U (en) | Multifunctional intelligent control device for ship propelling | |
| CN110710164B (en) | Flight control system | |
| CN109558278B (en) | Dual-redundancy CPU control board based on DSP and CPLD | |
| CN113093618B (en) | Brake controller hardware architecture and control method | |
| CN104199440A (en) | Four-unit three-bus redundancy heterogeneous GNC (guidance navigation control) system | |
| CN104192300A (en) | A flight control system and a method | |
| CN107031867A (en) | A kind of configurable Integrated Electronic System for implementing space tasks contexture by self | |
| CN114415572B (en) | Integrated test launch control method and equipment for liquid carrier rocket | |
| CN113534656B (en) | Telex flight backup control system and telex flight backup control method | |
| CN104536850A (en) | Multi-level redundancy backup system and working mode thereof | |
| CN109345699B (en) | Single-layer independent control equipment and method for vending machine | |
| CN110968021A (en) | Interlocking machine dual-system switching system and control method | |
| CN104597827A (en) | Smart electric control execution system supporting loop redundancy control and control method thereof | |
| CN110161880B (en) | Simulation system and method for launching system of general aircraft | |
| CN115556924A (en) | Flight control system and actuator control electronics and method | |
| CN116483106A (en) | Integrated unmanned aerial vehicle system for inspection and beating | |
| CN115499321B (en) | Design and implementation method of simulation test equipment signal switching system | |
| CN112731793B (en) | Redundant system of space mechanism controller |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |