EP2349833A2

EP2349833A2 - Adjuster device for an aircraft combination of an adjuster device and an adjuster device fault recognition function, fault -tolerant adjuster system and method for reconfiguring the adjuster system

Info

Publication number: EP2349833A2
Application number: EP09740276A
Authority: EP
Inventors: Martin Recksiek
Original assignee: Airbus Operations GmbH
Current assignee: Airbus Operations GmbH
Priority date: 2008-10-22
Filing date: 2009-10-22
Publication date: 2011-08-03
Also published as: CN102196964B; RU2011120362A; CA2741362A1; WO2010046111A3; WO2010046111A2; US20110255968A1; JP2012506336A; BRPI0919762A2; CN102196964A; DE102008052754A1

Abstract

Adjuster device (A11, A12, B11, B12, A21, A22, B21, B22) for coupling an adjuster flap (A1, A2; B1, B2) on an aircraft to an actuator (20), an adjuster mechanism (VK) for the kinematic coupling of the actuator (20) to the adjustment flap (A1, A2; B1, B2) and a gearbox (25), wherein the adjuster device (A11, A12, B11, B12, A21, A22, B21, B22) may be coupled to a control and monitoring device (5) for operation thereof, characterised in that the adjuster device comprises a first load sensor (S1; S11-a, S12-a, S21-a, S22-a), arranged at the input side (31) of the actuator (20) for recording the load occurring on the input side of the actuator (20) as a result of the operation of the adjustment flap (A1, A2; B1, B2), a second load sensor (S2; S11-b, S12-b, S21-b), arranged at the output side (32) of the actuator (20) for recording the load occurring on the output side (32) of the actuator (20) as a result of the operation of the adjustment flap (A1, A2; B1, B2), wherein the first load sensor (S1; S11-a, S12-a, S21-a, S22-a) and the second load sensor (S1; S11-b, S12-b, S21 -b, S22-b) are functionally connected to an adjuster device fault recognition function for receiving the sensor values delivered by the load sensors, in order to attribute a fault condition to the adjuster device and a combination of an adjuster device and an adjuster device fault recognition function, a fault-tolerant adjuster system and a method fro reconfiguring an adjuster system.

Description

Adjustment of an aircraft, combination of an adjustment and a Verstellvorrichtungsfehlererkennungsfunktion, fault-tolerant

Control system and method for reconfiguration of the control system

The invention relates to an adjustment device of an aircraft, combination of an adjustment device and an adjustment device error detection function, fault-tolerant positioning system and method for reconfiguration of the positioning system. The adjustment flap is generally an adjustable aerodynamic flap of an aircraft and may in particular be a high-lift flap. The adjusting system may in particular be a high-lift system of an aircraft.

From the general state of the art, high-lift systems with load limiter are known for the avoidance of overload, in particular in the event of force conflicts that may occur.

In US 7,195,209 a load sensor for drives of high-lift systems is described, with which the load at the output of an actuator is measured.

The object of the invention is to provide an adjusting device for coupling to an adjusting flap of an aircraft, a combination of an adjusting device with a Verstellvorrichtungsfehlererkennungsfunktion, a fault-tolerant control system and a method for reconfiguration of a control system, with the or with a minimum of equipment costs occurring in the high-lift system Localized fault and can be done with the efficient system degradation to compensate for the occurring error.

This object is achieved with the features of the independent claims. Further embodiments are given in the dependent on these dependent claims.

With the solution according to the invention, in particular, a prediction of error conditions can also be made on an adjusting device. According to the invention, an adjusting device or adjusting device is provided for coupling to an adjusting flap of an aircraft, comprising:

an actuator and an adjustment kinematics for the kinematic coupling of the actuator to the adjustment flap,

a first load sensor disposed on the input side of the actuator for detecting the load occurring on the input side of the actuator due to the operation of the adjustment flap,

a second load sensor disposed on the output side of the actuator for detecting the load occurring on the output side of the actuator due to the operation of the adjustment flap.

In this case, the first load sensor and the second load sensor are functionally connected to an adjustment device error detection function for transmitting the sensor values determined by the load sensors in order to monitor the functional state of the adjustment device. This is designed in such a way that, on the basis of the signals transmitted by the load sensors, the latter can assign an error state to the adjusting devices associated with a flap.

In the arrangement of two or more than two adjusting devices on a flap, it may be provided that only one of the adjusting devices according to the invention is designed with two load sensors. The at least one further adjusting device can be designed such that it has only one of the two load sensors or none of the load sensors.

In particular, the adjusting device according to the invention can be used at least as one of a plurality of adjusting devices of a high-lift system for distributing front edge flaps or trailing edge flap. The adjustment kinematics can be embodied in particular as "track kinematics" or as "dropped kinematics". In a "track kinematics", the adjusting device is designed as a carriage, which is guided via an actuator on a rail ("track"). The valve is coupled via a drive rod to the carriage, wherein Preferably, a first joint, the drive rod to the carriage and a second joint coupling the drive rod to the valve. In a so-called "dropped hinge kinematics", the actuator is designed as a rotary actuator.

According to another aspect of the invention, a combination of such an adjustment device and an adjustment device error detection function is provided. The adjusting device has an actuator and an adjustment kinematics for the kinematic coupling of the actuator to the adjustment flap. Optionally, the adjusting device can also have a gear via which the power generated by the drive device is transmitted to the actuator. The adjusting device can be coupled to a control and monitoring device for actuating the same. The adjusting device has:

The first load sensor and the second load sensor are functionally connected to the Verstellvorrichtungs-error detection function for receiving the sensor values determined by the load sensors to assign the adjustment device a fault condition when predetermined criteria are met in response to these sensor values. The Verstellvorricht-Fehiererkennungsfunktion is designed such that it can monitor the functional state of the adjustment.

The Verstellvorrichtungs error detection function may be designed such that in this the sensor values of the first and the second load sensor are each compared with at least one threshold and exceeding or falling below this limit by the signal values of the first and the second load sensor to determine the Error condition of the adjusting device is used. Specifically, the recliner error detection function may be configured such that in a case where the first load sensor and the second load sensor respectively detect the undershooting of a no-load threshold, the recliner error detection function of the respective recliner indicates the state of inoperability (error case A) and thus assigns an error state.

In this case, provision may be made for the load limit value to be undershot if the first load sensor transmits a sensor signal to the adjustment device fault detection function which indicates a load which is less than 1/5 of that at the location of the first load sensor Operational load is defined, and the second load sensor indicates a load that is defined under 1/5 of that in the location of the second load sensor as the maximum operating load or actually occurs in normal operation. A maximum operating load may be dictated by the design of the wing or the aircraft. An adjustment device can therefore be assigned an error state if the first load sensor transmits a sensor signal to the adjustment device fault detection function which falls below a no-load limit whose value is less than 1/5 of the maximum predetermined or actual operating load at the location of the first load. Sensor corresponding value, and the second load sensor transmits a sensor signal to the Verstellvorrichtungsfehlererkennungsfunktion, which falls below a no-load limit, whose value is less than 1/5 of the maximum predetermined or actual operating load at the location of the first load sensor value is. Furthermore, it can be provided in particular that the state of the inability to function is assigned, if at the same time as falling below the load-limit value, the condition is fulfilled that the aircraft is on the ground.

Specifically, the variator fault detection function may be configured such that in another case, herein also referred to as Case B, the variator misalignment function assigns an error state to an adjuster due to a clamp case when the second load sensor generates a signal value corresponding to a load L ₂ and transmitted to the variator error detection function, which is a predetermined one Limit value corresponding to an operating load at the location of the second load sensor, and when the load L ₁ measured by the first load sensor is in the operating range of the input side of the respective adjustment kinematics corresponding to the load L ₂ measured by the second load sensor.

In this case, provision may in particular be made for the predetermined limit value of an operating load at the location of the second load sensor to be a predefined or determined maximum load L _max for the output side.

In particular, the recliner fault detection function may be configured such that in another case, as shown in the case C, the recliner fault detection function of the respective recliner device will be in an error condition due to a stuck case of the actuator or a transmission part related to the mechanical transmission chain between the first load Sensor and the second load sensor when the signal value of a load L _{1 of} the input side generated by the first load sensor exceeds a value for the operating range of the input side of the respective displacement kinematic, nominally the adjuster error detection function from that of the second load sensor. Sensor measured load L ₂ determined.

It may be provided in particular that the load L ₁ measured by the first load sensor is more than twice as large as the load L ₂ measured by the second load sensor, taking into account the ratio of the actuator.

Specifically, the recliner error detection function may be configured such that in a case (D), the adjuster error detection function of an actuator or a transmission part located between the first load sensor and the second load sensor, an error state due to a state of a limited Assigns efficiency when the Verstellvorrichtungs- fault detection function determines that the determined with the first load sensor load exceeds a predetermined limit and the load detected with the second load sensor falls below a predetermined limit, or if the

Ratio - the determined with the first load sensor load L ₁ with respect to the

L ₂ the second load sensor detected load L ₂ exceeds a predetermined limit.

In the exemplary embodiments, a position sensor for detecting the position of the vertical flap can generally be arranged on the adjusting kinematics.

According to a further aspect of the invention, a fault-tolerant control system with at least one flap which can be adjusted on one of the wings of an aircraft and with a control and monitoring device is provided, comprising adjusting devices controlled by the control and monitoring device, at least one of which is assigned to each flap ,

Of the adjusting devices, at least one or at least two may be arranged at a respective flap of a wing and spaced from each other in the spanwise direction of the flap and which is coupled to a drive connection. It can be provided that several or the respectively connected to an adjusting flap adjusting devices are each coupled to a separate drive device or that the adjustment of all the flaps of a control system or high-lift system are coupled to a drive device, in particular centrally and e.g. may be located in the fuselage of the aircraft, the propulsion device being connected to the adjustment devices of each wing via a drive train, such as a drive train. a rotary shaft is mechanically coupled to the actuation thereof.

In this case, at least one adjusting device of a flap is formed according to one of the embodiments of the invention and comprises: a first load sensor on the input side of the actuator for detecting a load and a second load sensor on the output side of the actuator for detecting a load. According to the invention, the fault-tolerant control system further has a control and monitoring device, which is functionally connected to the load sensors and is configured in such a way that, on the basis of the signals transmitted by the load sensors, it can assign an error state to the control devices associated with a flap. The fault-tolerant control system may in particular comprise drive devices, of which in each case one of the at least one adjusting device is assigned in each case to a flap which is functionally connected to a control and monitoring device controlling the latter, and each comprising: two drive motors, two brake devices, wherein the drive motors is associated with at least one brake device for stopping the output of the respective drive motor.

The adjusting devices can be coupled via a respective drive connection to one of the flap associated drive device. Furthermore, at least two adjusting devices can be connected to each flap and spaced from one another in the spanwise direction of the flap.

In this case, a drive device can be assigned to each flap.

According to one exemplary embodiment of the fault-tolerant actuating system according to the invention, it is provided that the drive device coupled to at least one adjusting device has at least one braking device and the control and monitoring device has:

a control function for actuating the drive device of the flap,

a monitoring function that generates and sends a command signal to at least one brake device and optionally in addition to a differential lock for actuating the same when the monitoring function of the adjustment device has assigned an error state.

The control and monitoring device of the fault tolerant control system may also include:

a control function for actuating the drive device of the flap,

a monitoring function that generates and sends a command signal to at least one brake device (Ba, Bb) for actuating the same when the monitoring function of the adjusting device due to the Comparison of position sensors on two different adjustment devices of a flap determines different adjustment states that exceeds a predetermined level.

In the embodiments of the fault-tolerant control system according to the invention, the latter can in particular have a high-lift system reconfiguration function which is functionally connected to an adjuster error detection function and which generates commands for controlling the adjusters in response to error states transmitted thereto by the adjuster error detection function affected.

The actuator or the transmission gear can be formed from a rotary actuator or from a linear drive. The two drive motors used may be electric drive motors. Also, two drive motors can be used, one of which is an electric drive motor and the other is a hydraulic drive motor. Also, the at least one drive motor may be a hydraulic drive motor.

According to the invention, a method for reconfiguring a high-lift system with adjustable adjustment flaps is provided with the steps:

Determining signal values of a first load sensor and a second load sensor for detecting loads occurring at an actuator with an actuator, wherein the first load sensor is arranged on the input side and the second load sensor on the output side,

as a function of the examination of the fulfillment of conditions with the signal values determined by the first load sensor and the second load sensor, assignment of an error state to a component of the respective adjustment device.

In the following, embodiments of the invention will be described with reference to the attached figures, which show: Figure 1 is a schematic representation of an embodiment of the high-lift system Verstellklappen invention, of which two are provided for each wing, with adjusting devices for actuating the adjustment, wherein the adjusting devices each at least one actuator and each at least one located on the input side first load sensor and on the Output side of the at least one actuator located second load sensor and wherein the adjusting devices are driven by a central drive motor and coupled thereto a rotary shaft;

FIG. 2 shows an enlarged view of the part of the high-lift system according to FIG. 1 provided for the right wing seen in the aircraft longitudinal axis;

3a shows an embodiment of an adjusting device according to the invention, in which the load sensor arranged on the output side thereof is designed as a torque sensor;

Figure 3b shows an embodiment of an adjusting device according to the invention, in which the load sensor arranged on the output side thereof is designed as a force sensor;

Figure 4a shows an embodiment of an adjusting device according to the invention, in which the load sensor arranged on the output side thereof is designed as a force sensor and in which the two load sensors are functionally connected to a local data concentrator; and

Figure 4b shows an embodiment of an adjustment device according to the invention, in which the arranged on the output side of the same load sensor is designed as a force sensor and in which the two load sensors is functionally connected directly to a central control and monitoring device.

FIG. 1 shows an embodiment of the high-lift system 1 according to the invention for adjusting at least one landing flap on each wing. FIG. 1 shows two flaps per wing, which is not shown in the representation of FIG. shown. In detail, an inner landing flap A1 and an outer flap A2 on a first wing and an inner flap B1 and an outer flap B2 on a second wing are shown. In the high-lift system according to the invention, one or more than two landing flaps per wing can also be provided. The high-lift system 1 is operated and controlled via a pilot interface, which in particular has an actuating member 3 such as an actuating lever. The actuator 3 is functionally coupled to a control and monitoring device 5, which transmits control commands via a control line 8 for controlling a central drive unit 7. The control and monitoring device 5 is a central control and monitoring device 5, ie it has control and monitoring functions for several and in particular all adjusting devices A11, A12, B11, B12, A21, A22, B21, B22 of the high-lift system.

The central, ie arranged in the trunk area drive unit 7 may be formed with one or more drive motors. In the illustrated embodiment of the high-lift system, the drive unit 7 has two drive motors Ma, Mb, which can be realized, for example, by a hydraulic motor and an electric drive. Furthermore, the drive unit 7 can have at least one brake device assigned to the drive motors Ma, Mb, which can each be actuated by a command signal of the control and monitoring device 5. In the embodiment of the high-lift system shown in FIG. 1, the drive unit 7 has two brake devices Ba, Bb, which can each be actuated by a command signal of the control and monitoring device 5. The at least one brake device is operatively connected to the control and monitoring device 5, which can actuate the brake device at predetermined conditions and thus lock the rotary shaft drive trains 11, 12. In the case of a defect of the drive motor or one of several drive motors, this can be switched off by the central drive unit 7 or a drive motor control associated with the at least one drive motor. The central drive unit 7 can, as shown in Figure 1, have a differential which is coupled to the output sides of the hydraulic motor Ma and the electric motor Mb such that the respectively provided by the hydraulic motor H and the electric motor outputs are summed and to drive - Rotary shafts 11, 12 are transmitted. In the exemplary embodiment of the high-lift system according to the invention shown in FIG. 1, two brake devices Ba, Bb are furthermore provided, which are functionally connected to the control and monitoring device 5. The control and monitoring device 5 is listed such that it can operate at predetermined conditions, the brake devices Ba, Bb and thus the rotary shaft drive trains 11, 12 can lock. If one of the two drive motors, for example the hydraulic motor H or the electric drive E in the illustrated embodiment, is switched off, the central drive unit 7 will be summed due to the differential, which is designed to summate the respective powers provided by the hydraulic motor H and the electric motor, a reduced by the amount of the off drive motor power.

To the central drive unit 7 are a total of two drive rotary shafts 11, 12 each coupled to actuate the at least one flap A1, A2 and B1, B2 per wing. The two drive rotary shafts 11, 12 are coupled to the central drive unit 7 and are synchronized with each other. On the basis of corresponding control commands, the central drive unit 7 sets the drive rotary shafts 11, 12 in rotation for the purpose of actuating movements of the adjusting devices of the respective flap coupled thereto. In a shaft portion of the drive rotary shafts 11, 12 close to the drive unit 7, a load limiter or torque limiter T may be integrated.

At least one adjusting device for adjusting the same is coupled to each flap A1, A2 or B1, B2. In the high-lift system shown in FIG. 1, two adjustment devices are arranged on each flap, specifically the adjusting devices A11, A12 or B11, B12 on the inner flaps A1 and B1 and the adjusting devices A21 on the outer flaps A2, B2. A22 or B21, B22. The at least one Adjustment device, each actuates a flap, is called in the following adjustment.

In the following, the adjusting devices A11, A12, B11, B12, A21, A22, B21, B22 are described, the components of different adjusting devices having the same function being provided with the same reference in each adjusting device.

Each of the adjusting devices A11. A12, B11, B12, A21, A22, B21, B22 has an actuator or a transmission gear 20, an adjustment kinematics VK for kinematic coupling of the actuator 20 to the adjustment flap and optionally a position sensor 22, a transmission 25 and at least two load sensors 31, 32 on. With the transmission 25, the movement of the respective drive shaft 11, 12 is converted into a movement of a drive member or drive member 24 which is coupled to the actuator 20 to transmit an input member 20a or a downdrive link on the input side of the actuator 20 an input movement ,

The adjustment kinematics VK can be used, for example, as a track-carriage adjustment device with a carriage which can be moved on a track to which the respective flap is coupled, or as a dropped-hinge adjustment device with a fixed flap. Pivotable rotary lever, to which the respective flap is coupled, be formed. The actuator or the transmission gear 20 is mechanically coupled to the respective drive rotary shafts 11, 12 and converts a rotational movement of the respective drive rotary shafts 11, 12 into an adjustment movement of the flap region, which is connected to the respective adjusting devices A11, A12, B11, B12, A21, A22, B21, B22 is coupled. It can be provided that a position sensor 22 is arranged on each adjustment device A11, A12, B11, B12, A21, A22, B21, B22 of a flap, which determines the current position of the respective flap and this position value via a line, not shown to the control and monitoring device 5 sends.

The actuator 20 has on its output side an output element or an output lever 20b, which is coupled to a flap-side coupling device 27 for coupling the actuator 20 with the respective adjustment flap and transmits due to a input at its input side via the input element 20a Movement of a movement of the flap-side coupling device 27 for adjusting the respective flap A1, A2, B1, B2 from. The input element 20a and the output element 20b are designed as mechanical functional parts. In this case, the input element 20a or the output or transmission element 20b may be designed in particular as a rotary shaft and / or as a tension-pressure rod. The input member 20a is a torque or power transmitting member that introduces a mechanical power into the actuator while the output member 20b transmits the torque generated by the actuator 20 or the force generated by the actuator 20 to the coupling device 27 and thus to the flapper. Between the input member 20a and the output member 20b is thus a mechanical transmission mechanism with a translation function.

In addition, at the ends of the rotary shaft drive trains 11 and 12, an asymmetry sensor 23 may be arranged, which is also connected via a line not shown functionally connected to the control and monitoring device 5 and via this line a current value to the control and Monitoring device 5 sends, which states whether the ends of the rotary shaft drive trains 11 and 12 are rotated within a predetermined range or whether an asymmetric rotational position of the drive rotary shafts 11 and 12 is given.

Furthermore, a wing end region brake WTB can be arranged on each drive rotary shafts 11 and 12, which can block the respective drive train 11 or 12 when actuated. In this case, the one Flügelendbereichs- brake WTB is arranged in particular at a point of the drive rotary shafts 11 and 12, which is located in an outer region of the respective wing. Each of the Flügelendbereichs brakes WTB is connected via a line, also not shown functionally connected to the control and monitoring device 5 and can be controlled and actuated by the control and monitoring device 5 via this line. In operation, the normal initial state of the wing end region brake WTB is a non-actuated state in which they do not interfere with the rotation of the drive rotary shafts 11 and 12, respectively. With a corresponding control signal from the control and monitoring device 5, the wing end portion brakes WTB may be operated to lock the respective associated drive rotation shafts 11 and 12, respectively.

In the formation of the adjustment kinematics VK as a dropped hinge adjustment device, the flap-side coupling device 27 may be formed in particular by a rotatable adjusting lever and the actuator by a rotary actuator or rotary actuator. In the formation of Versteil kinematics VK as Track Carriage- adjustment with a track on a track (carriage) movable carriage to which the respective flap is coupled, the flap-side coupling device 27 of a combination of a car and an this coupled lever or a rod and in this case the actuator may be formed in particular a spindle drive. In this case, the carriage is mounted movably on a guide track (track) mounted on the main wing. In both cases, the flap is guided with a main wing arranged flap guide, which may be formed from a lever arrangement or a guideway.

According to the invention, each adjusting device A11, A12, A21, A22, B11, B12, B21, B22 comprises a first load sensor S11-a, S12-a, S21-a, S22-a, also generally designated by the reference character S1, and a second load sensor S11-b, S12-b, S21-b, S22-b, also generally designated by the reference numeral S2, on. The first load sensor S11-a, S12-a, S21-a, S22-a and / or the second load sensor S11-b, S12-b, S21-b, S22-b may or may not have a torque Be a sensor or a force sensor. The first load sensor S11-a, S12-a, S21-a, S22-a is generally provided on the input side 31 thereof and can be connected to the respective drive element 26 and / or to the input element 20a of the respective actuator 20 and / or a coupling between the drive element 26 and the input member 20a may be arranged. The first load sensor S11-a, S12-a, S21-a, S22-a is configured to detect the load occurring due to the operation of the central drive unit 7, which is applied to the input side of the actuator 20 or the input member the actuator 20 is transmitted or impressed. The second load sensor S11-b, S12-b, S21-b, S22-b can be connected to the output element 20b of the respective actuator 20 and / or to the respective flap-side coupling device 27 and / or to a coupling between the output element 20b and Coupling device 27 may be arranged. The second load sensor S11-b, S12-b, S21-b, S22-b is configured to detect the load occurring due to the operation of the central drive unit 7, which is applied to the output side of the actuator 20 or to the output member transmitted to the actuator 20 or the flap-side coupling device 27 is impressed.

Under load in this context is generally understood a moment and / or force.

The first load sensor S11-a, S12-a, S21-a, S22-a and the second load sensor S11-b, S12-b, S21-b, S22-b is each functional via a line, not shown An adjustment device evaluation function of an adjustment device monitoring function 40 is connected and sends via this line a current signal value for the amount of each detected load to the Verstellvorrichtungs- monitoring function 40. The Verstellvorrichtungs monitoring function 40 or individual functions thereof may or may be part of the central control and monitoring device 5. Alternatively, the adjustment device monitoring function 40 or individual functions thereof may also be part of a local and thus remote control and monitoring device 41, which is arranged in the vicinity of the actuator 20 or the flap-associated actuators 20. A decentralized control and monitoring device 41 on each adjusting device or on a group of adjusting devices can be provided, in particular, in a high-lift system which is driven in a decentralized manner. In this case, instead of being driven by a central drive unit 7, the adjusting devices are each driven by a drive device which is commanded specifically by the central control and monitoring device 5 but is not mechanically coupled to drive devices which are connected to other adjustment flaps. In this case, the other functions of the adjustment device monitoring function 40 may be implemented in the central control and monitoring device 5. Such a decentralized control and monitoring device 41 may be mounted on the main wing and located at different positions in the spanwise direction. In one embodiment, the distributed control and monitoring device 41 Seen in the spanwise direction arranged in a span portion of the main wing, in which ei de flaps extends. In this case, in each case a decentralized control and monitoring device 41 for the actuators 20 are each provided a flap, so that in the embodiment of Figure 1 on each wing two decentralized control and monitoring device 41 are arranged. Alternatively, a decentralized control and monitoring device 41 in which the Verstellvorrichtungs- monitoring function 40 is implemented also on each actuator 20 and in particular on a support member of the respective adjustment device may be arranged. Also, a decentralized control and monitoring device 41 may be provided for several adjusting devices

As shown in FIGS. 4a and 4b in comparison, the two load sensors of the adjustment device can be functionally connected to a local data concentrator RDC (FIG. 4a) or functionally connected directly to a central control and monitoring device (FIG. 4b). In the exemplary embodiment according to FIG. 4a, a local data concentrator RDC, which is arranged locally in the vicinity of the respective at least one adjusting device, can be provided for the at least one adjusting device connected to one adjusting flap in each case. In particular, in this embodiment, the recliner evaluation function and / or the recliner error detection function may be implemented in the local data concentrator RDC.

The adjuster monitoring function 40 includes an adjuster evaluation function and an adjuster error detection function. The Verstellvorrichtauswertungsfunktion receives the signals of the load sensors and evaluates them, i. this determines corresponding load values from the sensor signals. The adjuster error detection function may be part of the remote control and monitoring device 41 or the central control and monitoring device 5.

To reconfigure the high lift system to associate an error status with an adjuster, the adjuster error detection function may be used be associated with a high-lift system reconfiguration function, which may also be integrated in the remote control and monitoring device 41 or the central control and monitoring device 5. Such a high-lift system reconfiguration function generates from the assignment of at least one error state to one or more adjustment devices, if necessary, reconfiguration commands to one or more adjustment devices in order to compensate for the respective error corresponding to the at least one error state.

Such Rekonfiugrations commands may include switching off an adjustment. A reconfiguration command may also include that an adjustment device is no longer controlled. Such a reconfiguration command can be sent to FIG. 5 so that it takes into account such a non-control command in the control of adjusting devices. The high lift system may e.g. be designed by redundancy of components of the adjusting devices such that certain errors can be tolerated and in their occurrence no commands are transmitted to adjusting. The high lift system reconfiguration function takes into account the error condition of all the adjusting devices in the formation of such commands. In a further exemplary embodiment of the high-lift system, the decentralized control and monitoring device 41 can be embodied such that it itself generates such commands as switching off the respective associated adjusting device; however, a central high lift system reconfiguration function is integrated in the central control and monitoring device 5 which takes into account the effects for other adjustment devices and then generates further reconfiguration commands for other adjustment devices.

According to the invention, the first load sensor S11-a, S12-a, S21-a, S22-a and the second load sensor S11-b, S12-b, S21-b, S22-b are functional with an adjuster error detection function for Receiving the sensor values determined by the load sensors connected to assign an error state of the adjusting device. In this case, it can be provided, in particular, that in the adjusting device Error detection function, the sensor values of the first and second load sensor are each compared with at least one threshold and exceeding or falling below this limit by the signal values of the first and second load sensor is used to determine the error state of the adjustment.

The Verstellvorrichtungs error detection function can use the transfer function of this each associated actuator 20 and / or have stored. In this, the efficiency of the actuator and depending on the design of the actuator whose transmission ratio.

In particular, the adjustment device error detection function can be set up to identify the following error cases:

For an error case A, a loadless limit value or noload limit value can be preset to determine a substantially no-load state on the input side 31 or the output side 32 of the respective actuator 20, which is assumed to be the case when load sensor values occur under the load lot Limit no load or at least no operating load on the input side 31 and the output side 32 of the respective actuator 20 acts or is applied. The load-free limit value may in particular be 1/5 of the maximum operating load of the actuator or the load occurring on the input side 31 or the output side 32 of the actuator, and in particular 1/5. It may also be provided for checking that the load limit value is undershot, that the first load sensor S11-a, S12-a, S21-a, S22-a transmits a sensor signal to the adjustment device fault detection function, which indicates a load that is below 1/5 is defined at the location of the first load sensor as the maximum operating load, and the second load sensor S11-b, S12-b, S21-b, S22-b indicates a load that is less than 1/5 of the location of the second load sensor is defined as maximum operating load.

In the event of breakage or mechanical decoupling of a mechanical transmission part of the input side 31, the output side 32 and / or the flap guide, no load is applied to any of the load sensors 31, 32, so that the first load sensor S11-a, S12 -a, S21-a, S22-a and the second load sensor S11-b, S12- b, S21-b, S22-b a indicate a value below the no-load limit. This therefore applies in particular to a breakage of the drive element 26, the input element 20a, the output element 20b, the flap-side coupling device 27 as well as a decoupling of at least one of these components of the force or torque transmission chain of the respective adjusting device A11, A12, B11, B12, A21 , A22, B21. B22.

In accordance with the invention, when the sensor signals transmitted to the adjustment device fault detection function are below both the first load sensor S11-a, S12-a, S21-a, S22-a and the second load sensor S11-b, S12-b, S21 -b, S22-b an error state break or "disconnect" of a mechanical transmission part of the input side 31 and / or a transmission part of the output side 32 of the respective adjustment A11, A12, B11, B12, A21, A22, B21, B22 and thus inoperability of the respective Assigned adjusting A11, A12, B11, B12, A21, A22, B21, B22.

Optionally, it may be provided that the Verstellvorrichtungs- fault detection function checks whether the aircraft is in a mode in which this error is not critical. For this purpose, in particular the query or condition can be decisive, whether the aircraft is on the ground. If, therefore, the sensor signals are not undershot and, at the same time, the aircraft is not in a critical state, a measure for reconfiguring the high-lift system, which may also consist in the respective adjusting devices A11, A12, B11, B12, A21, A22, B21, B22 is deactivated and no longer activated.

The Verstellvorrichtungs error detection function can also for an error case B of a terminal case on the output side 32 of an adjustment A11, A12, B11, B12, A21, A22, B21, B22 of the flap, ie on the output member 20b and / or on the flap-side coupling device 27 and / or the flap guide, in which the entire drive torque is applied to the affected adjustment station. In the event of a fault, this generally leads to a case of a damper. If such a clamping case occurs, this can lead to an overload and as a result to a breakage of the Drive train lead. In this case, the sum of the forces and / or torques generated by those actuators is applied to the output side of the actuator, which are connected via respective adjusting devices A11, A12, B11, B12, A21, A22, B21, B22 to the respective flap. To determine this fact, according to the invention, there is generally provided the condition that the second load sensor S2 generates a signal value corresponding to a load L ₂ and transmits it to the variator fault detection function which exceeds a predetermined threshold value of an operating load at the location of the second load sensor S2 equivalent. In particular, it may be provided as a condition that the operating load and in particular the maximum operating load and in particular the maximum permissible operating load for which the relevant actuator is provided are exceeded. The maximum allowable operating load is the upper limit of the range within which the operation of the actuator is provided and, in particular, the area on the output side 32. This means that according to this range forces and / or moments in components of the output side 32 are permitted. This range of forces and / or moments is admitted in particular on that component of the output side 32 on which the second load sensor S11-b, S12-b, S21-b, S22-b is arranged. The maximum operating load is the maximum permissible force or the maximum permissible torque at this point. In this error case B, therefore, a sensor signal is transmitted from the second load sensor S11-b, S12-b, S21-b, S22-b to the adjusting device fault detection function, which corresponds to a load representing the maximum operating load or the maximum permissible force or exceeds the maximum permissible torque or the largest load actually occurring in normal operation, in each case in particular at the location of the second load sensor. These alternative maximum loads are referred to below as L _max , so that these conditions can be described as L ₂ > I _max .

For fault case B, such a sensor value is the only indicator. However, for the presence of a clamping case on the output side 32 of an adjusting device A11, A12, B11, B12, A21, A22, B21, B22 or the respective associated adjustment flap can be specified as a further condition that the first load sensor S11-a , S12-a, S21-a, S22-a determines a load that is in the range

lies. It is

the variable "i" is the ratio that the actuator implements between input side 31 and output side 32,

the constant "ki" is an amount that is an area around the respectively determined value

- defined, with which the efficiency of the actuator is taken into account. i

In particular, the constant ki may be 15% of the maximum operating load permitted at the input side 31 and, in particular, at the location of the first load sensor S11-a, S12-a, S21-a, S22-a or actually occurring in normal operation ,

According to the invention, the adjusting device fault detection function generally assigns a clamping case to the output side 32 of an adjusting device A11, A12, B11, B12, A21, A22, B21, B22 or an adjusting kinematics VK of the associated adjusting flap, if

when the second load sensor S2 generates a signal value corresponding to a load L ₂ and transmits it to the adjustment device fault detection function, which exceeds a predetermined limit, which corresponds to an operating load at the location of the second load sensor S2, wherein it is provided in particular that the load L ₂ exceeds a predetermined maximum load, ie when L ₂ > I _1113x , and

when the load L ₁ measured by the first load sensor S1 is in the operating range of the input side 31 of the respective adjusting kinematics VK, which corresponds in particular to the load L ₂ measured by the second load sensor S2, taking into account the ratio and efficiency of the actuator 20, or L = \ - ± k _λ holds. i The Verstellvorrichtungs error detection function assigns to meet these conditions the output side 32 of an adjustment A11, A12, B11, B12, A21, A22, B21, B22 of the flap, ie on the output member 20b and / or on the flap-side coupling device 27 to a terminal case.

According to the present invention, by the displacement error detection function in case of a fault C, the pinch position of the actuator or a part of the respective displacement device located between S1 and S2 can be determined when the load L ₁ measured by the first load sensor S1 has an operating range of the input side (31 ) exceeds the respective displacement kinematics (VK), which is nominally the load (L ₂ ) measured by the second load sensor (S2). In particular, it can be provided that the load L ₁ measured by the first load sensor S _{1 is} more than twice as large as the load L ₂ measured by the second load sensor S ₂ , taking into account the ratio of the actuator 20 Adjustment of a terminal case of the actuator 20 is assigned when the first load sensor S1 determines a load value L1, for the condition

+ *,

- is satisfied. With the constant k ₂ , in particular the efficiency of the actuator 20 can be considered. In this condition, the expression describes -

Lastwetf + k ₂

a load value L1 corresponding to the rt present on the output side 32 in consideration of the gear ratio realized by the actuator 20. To distinguish the condition Z _{1 of} the error case C from

the condition L = - ^ - ± k of the error case B may be provided in particular

the constant k _{2 is} greater than the constant k ₁ . In particular, it can be provided that the constant k _{2 is} greater than the constant K ₁ and especially twice as large as the constant ^. For the sensor value of S2, no Test be performed because the air force acts on the output side 32 and the measured value is not in any clear analytical relationship with the measured value of the first load sensor S1.

The recliner error detection function may also have a function of detecting or associating an error case D of deterioration in efficiency and e.g. a Reiberhöhung in the actuator 20 and generally a state of limited performance of each of the actuator or a transmission part, which is located between the first load sensor S1 and the second load sensor S2 occurs. According to the invention the adjuster failure detection function assigns the actuator 20 or a transmission part located between the first load sensor S1 and the second load sensor S2 to a state of limited performance when it has a ratio - out of that of the first load. Sensor S1 respectively

L ₂ measured load value L ₁ and the second load sensor S2 respectively measured load value L ₂ forms and determines if this ratio falls below a predetermined threshold k ₃ . The limit k ₃ can be

in particular from k ₃ 'is ^{ur |} d that

Ratio is a nominal load ratio, which is intact

Actuator at a nominal or normal efficiency results. The condition

can be formulated by the expression or from this be derived. Instead of the condition can also be the conditions

L ₂ <k ₃ ^■ - L ₁ and / or Z ₁ > - • Z ₂ as mathematical

Reformulations of the former formula can be used.

Further, the variator fault detection function may have a function whereby, upon satisfaction of certain conditions mentioned below, the first load sensor S1 may receive a mechanical sensor error, e.g. a so-called sensor disconnect, referred to in this context as an error case E, can be assigned. This is the case when the Verstellvorrichtungs- fault detection function determines that the first load sensor S1 falls below a predetermined no-load signal value and the second load sensor S2 exceeds a predetermined load signal value indicating a load. The no-load signal value can be defined in particular as described with regard to the error case A. The adjuster error detection function may have a function that the load signal value to be exceeded by the second load sensor S2 to meet the above condition depending on the respective actuation of the actuator and / or the size and / or type of actuation of the actuator Actuator at this skillful command signal.

In an analogous manner, the Verstellvorrichtungs-error detection function may have a function to be assigned to the second load sensor S2, a mechanical sensor error and in particular a so-called sensor disconnect on the fulfillment of certain, hereinafter mentioned in relation to the error case E in the reverse manner to be defined conditions can (error F). In this case, such an assignment occurs when the Verstellvorrichtungs-error detection function determines that the second load sensor S2 falls below a predetermined loadless signal value and the first load sensor S1 exceeds a predetermined load signal value indicating a load. The no-load signal value can be defined in particular as described with regard to the error case A. The Verstellvorrichtungs- fault detection function may have a function that the of the first load Sensor S1 to meet the above-mentioned condition to be exceeded load signal value as a function of the respective actuation of the actuator and / or depending on the size and / or type of the sent to actuate the actuator sent to this command signal.

The high lift system reconfiguration function may be initiated to reconfigure the high lift system to a secure system configuration depending on the fault cases identified by the recliner fault detection function or due to the assignment of fault conditions to a component or component combinations.

In a high-lift system, in which the actuators of the adjusting devices A11, A12, B11, B12, A21, A22, B21, B22 are commanded via electrical lines via a central control and monitoring device 5 and in which two actuators 20 to a valve for actuating the same are connected, it can be provided that on the assignment of the respective adjustment A11, A12, B11, B12, A21, A22, B21, B22 of the state of inability to function (error case A) to an adjustment by the Verstellvorrichtungs- error detection function, the flap no longer is pressed. In order to avoid control asymmetries, it can furthermore be provided that the adjusting flap which is symmetrically arranged with respect to the adjustment flap, which is symmetrical with respect to the aircraft longitudinal axis, is no longer actuated. In addition, it may be provided that a brake provided in the actuator 20 for this case is actuated for locking the adjustment flap in its current adjustment state.

If the actuators are driven by a common rotary shaft 11, 12 and the respective components of the adjusting kinematics VK are equipped with a failsafe mechanism, the high-lift system reconfiguration function may be provided, the relevant adjusting device being further actuated.

In such a high-lift system with a command of actuators of the adjusting devices A11, A12, B11, B12, A21, A22, B21, B22 via a central control and monitoring device 5 via electrical lines can at an assignment of the error case B the same action options as in the case of an error A are initiated. In a high-lift system according to FIG. 1, in which the adjusting devices A11, A12, B11, B12, A21, A22, B21, B22 are mechanically driven via drive rotary shafts 11, 12, it may be provided for an adjustment device in the assignment of the fault case B, the system is blocked via the engine brakes Ma, Mb and / or the wing-end-range brake WTB in order to avoid system-internal power conflicts.

At a central, i.e. driven by rotary shafts 11, 12 driven high-lift system can be provided in an unacceptable deviation of the determined by the control and monitoring device 5 target positions of the detected by means of the position sensors 22 actual positions that the control and monitoring device 5 or the high lift system reconfiguration function actuation Signal to a Flügelendbereichs-brake WTB and to the at least one brake device Ba, Bb for locking both shaft strands 11, 12th

Furthermore, the high-lift system reconfiguration function can be designed such that the signal value L1_RW for an applied load determined by the first load sensor S1_RW of the right-hand wing is compared with the signal value which the first load sensor S1_LW has at the position symmetrical to the aforementioned adjustment device Adjustment of the left wing generated. The adjuster error detection function may be e.g. Allocate a terminal case even at low loads of the respective right flap, if the determined in each case due to the signal values L1_RW, L1_LW loads LI, L2 differ by a minimum amount. In order to assign this terminal case, so must the condition

M-A_RH> M-A_KH + k ₅

be fulfilled.

The difference can be constant or determined depending on the load. In the reverse manner, a clamping case can be determined for each left flap.

Claims

claims

1. adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) for coupling to an adjustment flap (A1, A2, B1, B2) of an aircraft, comprising:

an actuator (20) and an adjustment kinematics (VK) for the kinematic coupling of the actuator (20) to the adjustment flap (A1, A2, B1, B2),

a first load sensor (S1, S11-a, S12-a, S21-a, S22-a) provided on the input side (31) of the actuator (20) for detecting the input side of the actuator (20) due to Actuation of the adjustment flap (A1, A2, B1, B2) occurring load is arranged,

a second load sensor (S2, S11-b, S12-b, S21-b) provided on the output side (32) of the actuator (20) for detecting the output side (32) of the actuator (20) due to the operation the load flap (A1, A2, B1, B2) is arranged,

wherein the first load sensor (S1; S11-a, S12-a, S21-a, S22-a) and the second load sensor (S1; S11-b, S12-b, S21-b, S22-b) are functionally connected to a Verstellvorrichtungs- fault detection function for transmitting the sensor values determined by the load sensors to monitor the operating state of the adjusting device.

2. A combination of an adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) according to claim 1 and an adjusting device error detection function, wherein the first load sensor (S1, S11-a, S12-a, S21-a, S22-a) and the second load sensor (S1, S11-b, S12-b, S21-b, S22-b) are operatively connected to the variator fault detection function for communicating the sensor values determined by the load sensors with the adjuster error detection function is designed such that it can monitor the functional state of the adjustment.

3. Combination of an adjustment device (A11, A12, B11, B12, A21, A22, B21, B22) and an adjustment device error detection function according to claim 2, characterized in that in the Verstellvorrichtungsfehlererkennungsfunktion the sensor values of the first and the second load Sensors are each compared with at least one threshold and exceeding or falling below this limit by the signal values of the first and second load sensor is used to determine the error state of the adjustment.

Combination of an adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) and an adjusting device error detecting function according to claim 2 or 3, characterized in that in a case (A) in which the first load Sensor (S1, S11-a, S12-a, S21-a, S22-a) and the second load sensor (S1, S11-b, S12-b, S21-b, S22-b) are each underflowed No load limit detected, the Verstellvorrichtungsfehlererkennungsfunktion the respective adjustment (A11, A12, B11, B12, A21, A22, B21, B22) assigns the state of inability (error case A).

5. Combination of an adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) and an adjusting device error detection function according to one of the preceding claims, characterized in that the shortfall of the load-free limit value is present when the first load Sensor (S1, S11-a, S12-a, S21-a, S22-a) transmits a sensor signal to the Verstellvorrichtungsfehlererkennungsfunktion transmitted, which falls below a no-load limit, its value below 1/5 of the maximum predetermined or actual operating load is the location of the first load sensor corresponding value, and the second load sensor (S1; S11-a, S12-a, S21-a, S22-a) transmits a sensor signal to the variator fault detection function which falls below a no-load threshold whose value is less than 1/5 of the maximum predetermined or actual operating load at the location of the first load sensor Value is.

Combination of an adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) and an adjusting device error detection function according to claim 5, characterized in that the state of the inoperability is assigned, if at the same time as falling short of the load lot Limit is the condition that the aircraft is on the ground.

Combination of an adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) and an adjusting device error detection function according to one of the preceding claims, characterized in that the adjusting device error detection function of the adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) assigns an error condition when the second load sensor (S2) generates a signal value corresponding to a load L ₂ and transmits it to the variator fault detection function exceeding a predetermined threshold corresponding to an operating load at the location of second load sensor S2, and when the load L ₁ measured by the first load sensor (S1) is in the operating range of the input side (31) of the respective adjustment kinematics (VK) that corresponds to the load measured by the second load sensor (S2) ( L ₂ ) corresponds.

Combination of an adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) and an adjusting device error detection function according to claim 7, characterized in that the predetermined limit value of an operating load at the location of the second load sensor ( S2) is a predetermined maximum load (L _max ) for the output side (32).

Combination of an adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) and an adjusting device error detection function according to one of the preceding claims, characterized in that the adjusting device error detection function of the respective adjusting device A11, (A12, B11 , B12, A21, A22, B21, B22) assigns a fault condition when the signal value of a load (L ₁ ) of the input side (31) generated by the first load sensor (S1) exceeds a value that the adjuster failure detection function derives from that of second load sensor (S2) measured load (L ₂ ) determined.

Combination of an adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) and an adjusting device error detection function according to claim 8, characterized in that the load L ₁ measured by the first load sensor (S1) exceeds is twice as large as the load L ₂ measured by the second load sensor (S2) taking into account the ratio of the actuator (20).

A combination of an adjustment device (A11, A12, B11, B12, A21, A22, B21, B22) and an adjustment error detection function according to any one of the preceding claims, characterized in that in a case (D) the adjustment error detection function is an actuator ( 20) or a transfer part located between the first load sensor (S1) and the second load sensor (S2) assigns an error condition when the shift error detection function determines that the load detected by the first load sensor is a predetermined limit exceeds and the load detected with the second load sensor falls below a predetermined limit, or if the

Ratio - the load (L ₁ ) determined with the first load sensor relative to the load (L ₂ ) determined with L _{2 of} the second load sensor (S2) exceeds a predetermined limit value.

12. A combination of an adjusting device (A11, A12, B11, B12, A21, A22, B21, B22) and a Verstellvorrichtungs error detection function according to any one of the preceding claims, characterized in that on the adjustment kinematics (V), a position sensor (22) for detecting the position of the distribution flap is arranged.

13. Fault-tolerant control system with at least one flap (A1, A2, B1, B2) which can be adjusted in each case on one of the wings of an aircraft, comprising:

Adjustment devices (A11, A12, A21, A22, B11, B12, B21, B22), at least one of which is arranged on a respective flap (A1, A2, B1, B2) and which is coupled to a drive connection, wherein each Adjustment device an actuator (20) and an adjustment kinematics (VK) for the kinematic coupling of the actuator (20) to the adjustment flap (A1, A2; B1, B2) and wherein at least one of the adjustment devices of a flap comprises: a first load sensor ( S 1, S11-a, S12-a, S21-a, S22-a) on the input side (31) of the actuator (20) for detecting a load and a second load sensor (S2, S11-b, S12-b , S21- b) on the output side (32) of the actuator (20) for detecting a load,

a control and monitoring device (5) functionally connected to the load sensors (S1; S11-a, S12-a, S21-a, S22-a; S2; S11-b, S12-b, S21-b); is designed such that it can assign a Fehierzustand the flap associated adjusting devices on the basis of the signals transmitted from the load sensors.

14. fault-tolerant control system according to claim 13, characterized in that the fault-tolerant control system comprises a plurality of drive devices (PA1, PA2, PB1, PB2), of which in each case one of the at least one adjusting device (A11, A12, A21, A22, B11, B12, B21, B22) is in each case associated with a flap (A1, A2, B1, B2), which is connected to a control and monitoring device (5) which activates this flap. functionally communicate, and each comprising: two drive motors (M-A, MB), two brake devices (Ba, Bb), wherein the drive motors (Ma, Mb) at least one braking device (B1, B2) to stop the output of the respective drive motor (Ma, Mb) is assigned;

wherein the adjusting devices (A11, A12, A21, A22, B11, B12, B21, B22) are each connected via a drive connection to the respective drive device (PA1, PA2, PB1, PB2) assigned to the flap (A1, A2; B1, B2) ) are coupled and

wherein at least two adjusting devices (A11, A12, A21, A22, B11, B12, B21, B22) are connected to each flap (A1, A2, B1, B2) and spaced from each other in spanwise direction of the flap (A1, A2, B1, B2 ) are arranged at a distance.

15. Fault tolerant positioning system according to claim 13, characterized in that the drive device coupled to at least one adjusting device (A11, A12, A21, A22, B11, B12, B21, B22) has at least one braking device (Ba, Bb) and the Control and monitoring device (5) comprises:

a control function for actuating the drive device of the flap,

a monitoring function which generates and sends a command signal to at least one brake device (Ba, Bb) for actuating the same when the monitoring function of the adjustment device (A11, A12, A21, A22, B11, B12, B21, B22) has assigned an error state.

16. Fault-tolerant positioning system according to claim 13, 14 or 15, characterized in that the at least one adjusting device (A11, A12, A21, A22; B11, B12, B21, B22) coupled to the drive device comprises at least one braking device (Ba, Bb) and the control and monitoring device (5) comprises:

a control function for actuating the drive device of the flap, a monitoring function which generates and sends a command signal to at least one brake device (Ba, Bb) for actuating the same when the monitoring function of the adjustment device (A11, A12, A21, A22, B11, B12, B21, B22) determines different adjustment states which exceed a predetermined level on the basis of the comparison of sensor values of position sensors on two different adjustment devices of a flap.

17. Fault-tolerant control system according to claim 13, characterized in that the fault-tolerant control system has a drive unit (7), which is controlled by the control and monitoring device (5) and with the adjusting devices (A11, A12, B11, B12, A21 , A22, B21, B22) of both wings via a rotary shaft (11, 12) is mechanically coupled to the actuation thereof.

18. Fault tolerant control system according to one of claims 13 to 17, characterized in that the fault-tolerant control system comprises a Hochauftriebssystem- reconfiguration function, which is functionally connected to a Verstellvorrichtungs- error detection function and in response to error conditions, this transmitted by the Verstellvorrichtungsfehlererkennungsfunktion are generated or influenced commands for controlling the adjustment.

19. Method for reconfiguring a positioning system with adjustable adjusting flaps comprising the steps of:

Determining signal values from a first load sensor (S1) and a second load sensor (S2) for determining loads occurring at an adjusting device with an actuator (20), wherein the first load sensor (S1) the input side (31) and the second load sensor (S2) are arranged on the output side (32),

in dependence on the checking of the fulfillment of conditions with the signal values determined by the first load sensor (S1) and the second load sensor (S2), assignment of an error state to a component of the respective adjustment device (A11, A12, B11, B12, A21, A22, B21, B22).