EP3881023B1 - Weapon-launching system for a submersible vessel - Google Patents

Description

The present invention relates to a weapon-launching system for a submersible vessel.

By submersible vessel is meant in particular a submarine, for example a military submarine.

A weapon-launching system is known for example from US 8,677,920 B1 .

In a manner known per se, the systems integrated into military submarines are subject to numerous constraints specific to this environment. Among these constraints, mention may be made in particular of shocks, vibrations, acoustic discretion, electromagnetic emission/sensitivity, size, passive and active diving safety, weapon safety, energy efficiency, etc.

Moreover, due to their use, installations relating to the weapons of submarines, such as for example weapons-launching tubes, must meet numerous requirements in terms of performance. These requirements relate in particular to the time required to implement a weapon, the energy consumption, the cost of ownership, security, reliability and availability.

Thus, conventionally, these installations are implemented on board submarines using hydraulic actuators. Hydraulic actuators make it possible to meet most of the aforementioned constraints and requirements.

However, installations using hydraulic actuators have a cumbersome, heavy, energy-intensive and expensive architecture in operation and maintenance. This is mainly due to a large piping network necessary to ensure the operation of these facilities.

This network generally makes it possible, on the one hand, to remotely control the operation of the hydraulic actuators and, on the other hand, to supply the necessary power to these actuators. It can thus extend all along the ship, which involves a very large footprint.

The aim of the present invention is to propose an architecture which can be used for an on-board weapon-launching system which makes it possible to avoid the use of hydraulic actuators while respecting the aforementioned constraints and requirements.

To this end, the subject of the invention is a weapon-launching system for a submersible ship, in accordance with the characteristics of claim 1.

According to other advantageous aspects of the invention, the system comprises one or more of the features of claims 2 to 10.

• la figure 1 est une vue schématique d'un système lance-armes selon l'invention, ce système comprenant notamment des moyens d'actionnement et des moyens de commande ;
• la figure 2 est une vue schématique détaillée des moyens d'actionnement de la figure 1 ; et
• la figure 3 est une vue schématique illustrant le fonctionnement des moyens de commande de la figure 1.

These characteristics and advantages of the invention will appear on reading the following description, given solely by way of non-limiting example, and made with reference to the appended drawings, in which:

• the figure 1 is a schematic view of a weapon-launching system according to the invention, this system comprising in particular actuating means and control means;
• the figure 2 is a detailed schematic view of the actuating means of the figure 1 ; and
• the picture 3 is a schematic view illustrating the operation of the control means of the figure 1 .

The launcher system 10 of the figure 1 is intended to be embarked on board a submarine and makes it possible to activate the launching of a weapon from this submarine. To do this, the weapon-launching system 10 is intended to be associated with at least one weapon-launching tube and makes it possible to exercise a sequence of mechanical actions on this tube to launch an underwater vehicle contained in it. this. The underwater vehicle corresponds in particular to a weapon but in the general case, can comprise any other object capable of being launched from the submarine.

In the remainder of the description, the weapon-launching system 10 will be explained with reference to a single weapon-launching tube, for example that on the port side. However, in the general case, it must be understood that this system can be associated with several weapons launching tubes, for example with two tubes, the port side and the starboard side.

With reference to the figure 1 , the weapon-launching system 10 comprises at least one electric actuator 12, means 14 for actuating the electric actuator 12, safety means 16 monitoring the operation of the actuating means 14 and control means 18 controlling the actuating means 14.

The electric actuator 12 is associated with the weapon launch tube and makes it possible to exert a mechanical action on this tube in order to trigger a launch. This mechanical action can comprise for example the pressurization of the tube with a pressure necessary for a launch.

The electric actuator 12 is connected to the actuating means 14 by an electric connection 21 and able to exert the corresponding mechanical action when the electric connection 21 supplies the necessary electric power.

Of course, when the weapon-launching system 10 is associated with several weapons-launching tubes, it comprises at least one actuator for each of these tubes.

The actuating means 14 are capable of creating in the electrical connection 21 the electrical power necessary to actuate the electrical actuator 12.

To do this, the actuating means 14 are connected to a main power source 23 via an electrical connection 24 and to a backup power source 25 via an electrical connection 26.

The main and backup power sources 23, 25 correspond for example respectively to the main and backup electrical networks present on board the submarine.

The actuating means 14 are illustrated in more detail on the figure 2 .

So, with reference to this picture 2 , the actuating means 14 are in the form of two boxes, called first box 31 and second box 32.

Each of these cabinets 31, 32 have a box containing the mechanical/electronic/electrical components necessary to implement the corresponding functions as will be explained later.

Advantageously, each box 31, 32 is sealed. In addition, it can be resistant to shocks, to different pressures as well as to other types of attack (of an electromagnetic, thermal or other nature) likely to appear in the corresponding environment.

Again advantageously, the boxes 31, 32 are configured to be placed in different compartments/enclosures of the submarine.

Between them, the boxes are connected by an electrical connection 33.

The first cabinet 31 comprises a power module 35 connected directly to the power sources 23, 25.

The power module 35 thus makes it possible to supply the weapon-launching system 10 by selecting one of the supply sources 23, 25.

In particular, the main power source 23 is chosen when the weapon-launching system 10 is in its nominal operating mode and the backup power source 25 is chosen when the weapon-launching system 10 is in its faulty operating mode. .

The power module 35 is thus composed of relays and/or corresponding electrical circuits making it possible to select one or the other power source.

By selecting one of the two sources, the power module 35 also makes it possible to isolate the corresponding electrical components upstream from the other source and to offload the electrical energy in the system 10.

In addition, the power module 35 comprises other electrical components making it possible, for example, to adapt the electrical power supplied by the power sources 23, 25 to the power supply of the actuator 12.

The second box 32 comprises a control module 36 making it possible to control the electric actuator 12 by supplying the electric connection 21 with the electric power supplied by the power module 35.

To do this, the control module 36 is connected via a controller 38 also integrated into the second cabinet 32, to the control means 18 and capable of receiving commands supplied by these means 18. It is also capable of processing these commands.

The control module 36 is thus at least partially in the form of a computer comprising the software necessary to ensure the processing of the corresponding commands and/or in the form of programmable logic circuits configured to ensure such processing.

The safety means 16 form two safety barriers capable of monitoring the operation of the control means 14 independently of each other.

To do this, the security means 16 are in the form of a first security module 41 integrated into the first box 31 and a second security module 42 integrated into the second box 32.

In particular, the first security module 41 electrically connects the power module 35 to the control module 36 and makes it possible in particular to monitor the operation of this power module 35.

The first security module 41 is also connected to first instrumentation means 45 via a direct control link 46.

The first instrumentation means 45 make it possible to observe the operation of at least certain components of the weapon-launching system 10 and of its environment. Thus, for example, these instrumentation means 45 are in the form of a first set of sensors. Each sensor of this set is associated with at least one component of the weapon-launching system 10 or of its environment and makes it possible to measure a physical quantity (such as pressure, temperature, etc.) associated with this component. The junction of these sensors to the first security module 41 is done for example via a first junction box 47 visible on the figure 1 .

To monitor the operation of the power module 35, the first security module 41 implements a first monitoring logic.

This first monitoring logic is implemented using hardware devices such as, for example, safety relays and thus presents a so-called “hard-wired” logic.

This logic makes it possible, for example, to control the electrical power supplied by the power module 35 and in the event of its non-compliance, to cut the electrical connection 33 between the power module 35 and the control module 36.

The second safety module 42 electrically connects the control module 36 to the actuator 12 and makes it possible to monitor the operation in particular of this control module 36.

The second security module 42 is also connected to second instrumentation means 55 via a link 56 different and dissimilar to the link 46 connecting the first security module 41 to the first instrumentation means 45.

Link 56 in particular comprises a physical support different from that of link 46 with different characteristics, such as for example a different electromagnetic sensitivity.

Thus, for example, this link 56 corresponds to a computer network of the submarine explained in more detail later.

As in the case of the first instrumentation means 45, the second instrumentation means 55 are in the form of a second set of sensors. These sensors are similar to the sensors of the first set but have different and independent devices thereof. Advantageously, the sensors of the second set operate according to different technologies from those of the sensors of the first set. The junction of the sensors of the second set to the link 56 is provided for a second junction box 57 visible on the figure 1 .

In addition, the junction of the link 56 to the second control module 42 is ensured by the controller 38.

To monitor the operation of the control module 36, the second security module 42 implements a second monitoring logic which is different and dissimilar to the first monitoring logic.

Thus, for example, this second monitoring logic is implemented by at least partially using software implementing a safety automaton. In this case, the second security module 42 is at least partially in the form of a computer implementing such software.

The second monitoring logic consists in particular in analyzing the consistency of all the data accessible to the second security module 42 via the computer network 56 and the various control links.

When the second monitoring logic is not verified, the second security module cuts the electrical connection 21 between the control module 36 and the electric actuator 12.

Advantageously, according to an exemplary embodiment, the second security module 42 is also connected to the first security module 41 by a data link. In this case, this second security module 42 is able to receive security information produced by the first security module 41 and to analyze the consistency of this security information with security information produced by itself. If this information is not consistent, the second security module 42 is also able to cut the electrical connection 21.

The control means 18 make it possible to control the operation of the control module 36 and are connected to this module 36 via the controller 38.

With reference to the figure 1 , the control means 18 comprise a remote control station 61, a local control station 62 and a local control panel 63.

The remote control station 61 is arranged for example in a piloting center of the submarine and takes the form of a man-machine interface known per se.

The remote control station 61 is connected to the control module 36 via the computer network 56 of the submarine and is capable of sending commands in the form of digital data to this module 36.

The computer network 56 of the submarine presents a protected computer network known per se. This network meets all the standards relating to its security as well as the security of the data transmitted via this network.

The local command post 62 is located close to the weapons launch tube with which the system 10 is associated.

This local control station 62 is in the form of a man-machine interface also known per se, such as for example a touch screen.

Just like the remote control station 61, the local control station 62 is connected to the control module 36 via the computer network 56 and is able to control the operation of this module 36 by transmitting corresponding commands in the form of digital data via this network 56.

The local control panel 63 is also arranged near the corresponding weapon launch tube and is connected to the control module 56 via a direct control link 66 separate from the computer network 56.

This local control panel 63 is capable of controlling the operation of the control module 56 by transmitting corresponding commands via this direct command link 66. The commands are transmitted for example in the form of analog signals.

The local control panel 63 is for example in the form of mechanical buttons and/or lights associated with each command.

Advantageously, the local control panel 63 also comprises control means making it possible to activate the electric power supply of the electric actuator 12 by the backed-up power source 25 in the event of loss of the main power source 23.

To do this, the local control panel 63 is connected for example to the power module 35 via a specific control link (not illustrated on the figure 1 ) to control the selection of the backup power source 25.

Of course, when the weapon-launching system 10 is associated with several weapons-launching tubes, it advantageously comprises a local control station and a local control panel for each of the tubes.

In the embodiment of the figure 1 , the control means 18 further comprise a weapon interface module 71, a combat management system 72, a weapon handling module 73, a firing authorization module 74 and a diving safety panel 75 .

The weapons interface module 71, the combat management system 72 and the weapons handling module 73 are connected to the computer network 56. The diving safety panel 75 is connected to the controller 38 via a direct link. These components are known per se and will not be described in detail below.

The firing authorization module 74 is connected to the command module 36 via a direct command link 76 and via the controller 38. This module is also known per se and makes it possible in particular to authorize a firing, i.e. say the actuation of the actuator 12, when a specific key (physical or digital) is introduced into this module.

Furthermore, according to a particular embodiment of the invention illustrated in the figure 1 , the electric actuator 12 is connected to the actuation means 14 also via the computer network 56 through the second junction box 57 for example to communicate the state of its operation to these means.

According to the same exemplary embodiment, the weapon-launching system 10 further comprises third instrumentation means 80 independent of the first and second instrumentation means 45, 55. These third instrumentation means 80 are connected to the actuation means 14 via the computer network 56 through the second junction box 57 and make it possible, for example, to transmit to these means information relating to the operating states of the various components of the system 10.

The operation of the weapon-launching system 10 will now be explained with particular reference to the picture 3 schematically illustrating different command levels implemented by the control means 18 of this system 10.

Initially, all of the components of the weapon-launching system 10 are in their nominal operating mode. The operation of the actuating means 14 is monitored by the safety means 16 using the two safety barriers described above. The actuating means 14 are powered by the main power source 23.

To launch an underwater vehicle, the operator enters a command via the remote command post 61 or the local command post 62 which together form a first command level N ₁ . This command level has priority over the other levels.

The command then issued by one of the stations 61, 62 is transmitted via the computer network 56 to the actuating means 14 to actuate the actuator 12. After an analysis of this command as well as the information possibly coming from the other modules, the control module 36 supplies electrical connection 21 with the electrical power transmitted by power module 35.

In the event, for example, of the loss of the computer network 56, the weapon-launching system 10 goes into faulty operating mode and the commands are given from a second command level N ₂ which is formed by the control panel 63. In this case, the commands from this panel 63 are transmitted to the actuating means 14 via the command link 66.

In the event, for example, of loss of the main power source 23, the weapon-launching system 10 switches to degraded operating mode.

In this mode, the commands are for example given from the second level N ₂ in particular to activate the power supply by the backed-up power source 24.

When this is not possible, the electric actuator 12 can still be actuated manually by an operator. It is therefore a third level of command N ₃ .

It can then be seen that the present invention has a certain number of advantages.

First of all, the proposed architecture of the weapon-launching system 10 makes it possible to use an electric actuator instead of a hydraulic actuator conventionally used in submarines. Indeed, this architecture makes it possible to meet all the requirements and constraints linked to the specific environment of submarines.

Replacing a hydraulic actuator with an electric actuator therefore makes it possible to avoid the use of a complex piping network, thus making the system more compact and easier to install and maintain.

In addition, the proposed architecture has a block architecture which makes it possible to modify one of the components of this system without causing modifications to the other components.

So, for example, it is possible that different submarines have different power supply networks. In this case, it is enough to modify only the power module of the weapon-launching system to adapt it to the corresponding submarine.

In addition, certain functions of the weapon-launching system may present a lower level of security than the others. In this case, one of the safety barriers can be removed for these functions.

According to another example, the weapon-launching system can comprise an already existing actuator. In this case, to order it, it suffices to suitably adapt only the control module.

Furthermore, the proposed architecture of the weapon-launching system according to the invention makes it possible to guarantee a high level of security for this system.

Indeed, according to this architecture, the logic processing is separated between two distinct security modules which are integrated in two distinct cabinets. Thus, in the event that one of these modules loses its integrity, the safety function is ensured by the other module. Such a loss can for example occur in the event of loss of tightness on one of the cabinets.

Furthermore, according to the proposed architecture, the security information and the commands are conveyed to the corresponding modules via different physical media which are implemented according to different technologies. This then makes it possible to increase the level of security of the system.

Finally, the architecture of the weapon-launching system according to the invention makes it possible to guarantee the latter a high level of availability.

Indeed, in the event of loss of the computer network, the weapon-launching system can be controlled from the control panel which is connected to the actuating means via a direct link independent of the computer network.

In the event of loss of the main power source, it remains possible to use the backup source and in the event of total loss of the electrical power sources, it remains possible to operate the actuator manually.

Claims (10)

1. A weapon launch system (10) for a submersible vessel, comprising :

   - at least one electrical actuator (12) capable of exerting a sequence of mechanical actions on a weapon launch tube;

   - a power module (35) capable of providing electrical power;

   - a control module (36) capable of controlling the operation of the electric actuator (12);

   - a first security module (41) electrically connecting the power module (35) to the control module (36) and capable of monitoring the operation of the power module (35) by implementing a first monitoring logic ;

   - a second security module (42) electrically connecting the control module (36) to the actuator (12) and capable of monitoring the operation of the control module (36) by implementing a second monitoring logic, the second monitoring logic being different and dissimilar to the first monitoring logic.
2. The system (10) according to claim 1, wherein the first security module (41) is connected to a first set of sensors (45) via the first connecting means (46) and the second security module (42) is connected to a second set of sensors (55) via the second connecting means (56), each set of sensors (45, 55) being capable of providing information relating to the operation of components of the system (10).
3. The system (10) according to claim 2, wherein the first set of sensors (45) is different from the second set of sensors (55).
4. The system (10) according to claim 2 or 3, wherein the first link means (46) is different from the second link means (56) and is configured to operate according to a different operating technology from that of the second link means (56).
5. The system (10) according to any one of the preceding claims, wherein the first monitoring logic is implemented at least partially by hardware devices.
6. The system (10) according to any one of the preceding claims, wherein the second monitoring logic is implemented at least partially by software.
7. The system (10) according to any one of the preceding claims, wherein the second security module (42) is capable of receiving security information produced by the first security module (41) and of analyzing the coherence of this security information with the security information produced by itself.
8. The system (10) according to any one of the preceding claims, wherein the power module (35) and the first security module (41) are integrated together in a first box (31), and the control module (36) and the second security module (42) are integrated together in a second box (32).
9. The system (10) according to claim 8, wherein the first box (31) is separate from the second box (32).
10. The system (10) according to claim 9, wherein the first box (31) and the second box (32) are configured to be placed in different enclosures of the submersible vessel.

Images