GB2290141A - Aircraft fuel tank monitoring system with fail safe redundancy - Google Patents
Aircraft fuel tank monitoring system with fail safe redundancy Download PDFInfo
- Publication number
- GB2290141A GB2290141A GB9508703A GB9508703A GB2290141A GB 2290141 A GB2290141 A GB 2290141A GB 9508703 A GB9508703 A GB 9508703A GB 9508703 A GB9508703 A GB 9508703A GB 2290141 A GB2290141 A GB 2290141A
- Authority
- GB
- United Kingdom
- Prior art keywords
- fuel
- tank
- processor
- processors
- output
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01F—MEASURING VOLUME, VOLUME FLOW, MASS FLOW OR LIQUID LEVEL; METERING BY VOLUME
- G01F23/00—Indicating or measuring liquid level or level of fluent solid material, e.g. indicating in terms of volume or indicating by means of an alarm
- G01F23/22—Indicating or measuring liquid level or level of fluent solid material, e.g. indicating in terms of volume or indicating by means of an alarm by measuring physical variables, other than linear dimensions, pressure or weight, dependent on the level to be measured, e.g. by difference of heat transfer of steam or water
- G01F23/26—Indicating or measuring liquid level or level of fluent solid material, e.g. indicating in terms of volume or indicating by means of an alarm by measuring physical variables, other than linear dimensions, pressure or weight, dependent on the level to be measured, e.g. by difference of heat transfer of steam or water by measuring variations of capacity or inductance of capacitors or inductors arising from the presence of liquid or fluent solid material in the electric or electromagnetic fields
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01F—MEASURING VOLUME, VOLUME FLOW, MASS FLOW OR LIQUID LEVEL; METERING BY VOLUME
- G01F23/00—Indicating or measuring liquid level or level of fluent solid material, e.g. indicating in terms of volume or indicating by means of an alarm
- G01F23/22—Indicating or measuring liquid level or level of fluent solid material, e.g. indicating in terms of volume or indicating by means of an alarm by measuring physical variables, other than linear dimensions, pressure or weight, dependent on the level to be measured, e.g. by difference of heat transfer of steam or water
- G01F23/28—Indicating or measuring liquid level or level of fluent solid material, e.g. indicating in terms of volume or indicating by means of an alarm by measuring physical variables, other than linear dimensions, pressure or weight, dependent on the level to be measured, e.g. by difference of heat transfer of steam or water by measuring the variations of parameters of electromagnetic or acoustic waves applied directly to the liquid or fluent solid material
- G01F23/296—Acoustic waves
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01F—MEASURING VOLUME, VOLUME FLOW, MASS FLOW OR LIQUID LEVEL; METERING BY VOLUME
- G01F23/00—Indicating or measuring liquid level or level of fluent solid material, e.g. indicating in terms of volume or indicating by means of an alarm
- G01F23/80—Arrangements for signal processing
- G01F23/802—Particular electronic circuits for digital processing equipment
-
- G—PHYSICS
- G01—MEASURING; TESTING
- G01F—MEASURING VOLUME, VOLUME FLOW, MASS FLOW OR LIQUID LEVEL; METERING BY VOLUME
- G01F23/00—Indicating or measuring liquid level or level of fluent solid material, e.g. indicating in terms of volume or indicating by means of an alarm
- G01F23/80—Arrangements for signal processing
- G01F23/802—Particular electronic circuits for digital processing equipment
- G01F23/804—Particular electronic circuits for digital processing equipment containing circuits handling parameters other than liquid level
Landscapes
- Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Fluid Mechanics (AREA)
- General Physics & Mathematics (AREA)
- Signal Processing (AREA)
- Electromagnetism (AREA)
- Thermal Sciences (AREA)
- Power Engineering (AREA)
- Acoustics & Sound (AREA)
- Measurement Of Levels Of Liquids Or Fluent Solid Materials (AREA)
Abstract
An ultrasonic fuel-gauging system for an aircraft with two fuel tanks 1, 2 has probes 10, 11 in each tank connected to dual-lane data concentrator circuits 31, 41. The digital outputs from one lane 32, 42 of the data concentrator circuits are supplied to respective tank circuits 36, 46, the outputs of which are connected to two output circuits 38, 48. The outputs of the other lanes 33, 43 of the data concentrator circuits are connected directly to one or other of the two input/output circuits 38 or 48. The tank circuits and input/output circuits are processors of identical construction programmed with different software. If a tank circuit or input/output circuit should fail, its function is taken over by reconfiguration of one of the remaining processors. <IMAGE>
Description
Fuel-Gauging Systems
This invention relates to fuel-gauging systems.
The invention is more particularly, but not exclusively, concerned with fuel-gauging systems in aircraft.
Accurate fuel gauging in an aircraft plays an important part in the economic operation ofthe aircraft. If the quantity offuel on an aircraft can be measured accurately and reliably it enables the minimum amount of fuel to be carried without any risk of danger. In a modern aircraft the weight of fuel can account for half the total weight of the aircraft. By reducing the amount of fuel carried, more passengers or freight to be carried. Alternatively, it can enable the aircraft to have a longer range and reduce the need for refuelling stops.Modern fuel-gauging systems can be highly accurate when operating correctly but there is always a risk that an element in the systems, such as a probe or processor, will fail leading to a loss, or a reduction in accuracy, ofthe fuel quantity measurement in one ofthe tanks. It is possible to provide redundancy in the system by duplicating elements of the system so that failure of any one element will not damage the system accuracy. However, this duplication can lead to increased cost, weight and power consumption.
It is an object of the present invention to provide an improved fuel-gauging system.
According to one aspect of the present invention there is provided a fuel-gåuging system for at least two fuel tanks including first and second processors associated with respective ones of the tanks, the first and second processors being arranged to receive output
signals derived from a fuel-gauging probe in the associated tank and to provide outputs indicative of fuel quantity in the respective tank, the system including third and fourth processors both arranged to receive the outputs from both the first and second processors and to provide nominally-identical outputs indicative ofthe fuel quantity in both tanks, and the third and fourth processors being also arranged to receive the output signals derived from the probes without processing by the first or second processor and being arranged such that, in the event of a failure ofthe first processor, the third processor is configured to perform in the same way as the first processor and provide an output to the fourth processor indicative offuel quantity in the first tank and, in the event of a failure ofthe second processor, the fourth processor is configured to perform in the same way as the second processor and provide an output to the third processor indicative offuel quantity in the second tank.
In the event of a failure of both the third and fourth processors, the system may be arranged such that one ofthe first or second processors is configured to perform in the same way as the third or fourth processor. The first, second, third and fourth processors are preferably of identical construction and are configured to perform in different ways by programming with different software.The system may include two data concentrator circuits associated with each tank arranged to convert the output signals from the fuel-gauging probes into a digital form, the first and third processors being connected to receive outputs from respective ones ofthe data concentrator circuits associated with one tank, and the second and fourth processors being connected to receive outputs from respective ones of the data concentrator circuits associated with the other tank.
The system may include a third fuel tank and a fifth processor arranged to receive an output from a fuel-gauging probe in the third tank and to provide an output indicative of fuel quantity in the third tank, the fifth processor being connected to supply an output signal to both the third and fourth processors. The fuel-gauging probe in the third tank is preferably connected to supply an output signal to the third or fourth processor without processing by the fifth processor. The fifth processor is preferably of identical construction to the first, second, third and fourth processors.The system may include two data concentrator circuits
associated with the third tank arranged to convert the output signals from the fuel-gauging
probe in the third tank into a digital form, the fifth processor being connected to receive the
output from one of the data concentrator circuits associated with the third tank, and the other
of the data concentrator circuits associated with the third tank being connected to supply its
output to either the third or fourth processor.
A fuel-gauging system for an aircraft will now be described, by way of example, with reference to the accompanying drawings, in which:
Figure 1 is a schematic diagram of a system for two fuel tanks; and
Figure 2 is a schematic diagram of a system for three fuel tanks.
With reference first to Figure 1, there is shown a fuel-gauging system 100 for measuring the quantity of fuel in the left tank 1 and the right tank 2 of an aircraft. The left tank 1 has at least two fuel height probes 10 and 11, although usually more than two probes are provided to enable the orientation of the fuel surface to be determined in different aircraft attitudes. The probes 10 and 11 are ultrasonic fluid height probes, such as ofthe kind described in GB2265219 or GB2265005, although any other conventional probe could be used, such as a capacitance probe. The tank also includes a temperature sensor 12, a densitometer 13 and a water detector 14 of conventional construction. Identical probes 20 and 21 and sensors 22 to 24 are included in the right tank 2, which is ofthe same shape as the left tank 1.
The outputs ofthe probes 10 and 11 and the sensors 12 to 14 are connected to a data concentrator 31, which has two identical, parallel circuits 32 and 33 both of which receive the tank output signals. The circuits 32 and 33 convert the tank outputs into digital signals and provide nominally-identical signals onto respective data lines 34 and 35. The outputs from the right tank 2 are similarly converted into digital signals in a data concentrator 41, identical to the left data concentrator 31, and supplied on lines 44 and 45. Because the quantity of fuel in the left tank 1 will not in general be the same as that in the right tank 2, the signals on lines 34 and 35 will differ from those on lines 44 and 45.
The left lane has a first processor or tank circuit 36 having its input connected to the data line 34. The tank circuit 36 computes the quantity of fuel in the left tank 1 in terms of mass or volume. Similarly, the right lane has a second processor or tank circuit 46 with an input connected to the data line 44. The tank circuit 46 computes the quantity of fuel in the right tank 2. These signals indicating the quantity of fuel in the left and right tanks are supplied on lines 37 and 47 respectively to third and fourth processors or input/output circuits 38 and 48. The input/output circuit 38 in the left lane also receives signals on line 47 from the right lane tank circuit 46 so that it can compute the total mass of fuel in the two tanks 1 and 2. The right lane input/output circuit 48 also receives signals on line 37 from the left tank circuit 36 and computes the total mass offuel.The data lines 35 and 45 are connected to the inputs ofthe input/output circuits 38 and 48 but, in normal operation, the circuits do not respond to signals on these lines. The outputs ofthe circuits 38 and 48 are supplied on lines 39 and 49 to respective ARINC databus cards 60 and 61, which communicate the fuel-gauging information to the aircraft instrumentation and controls.
The two tank circuits 36 and 46, and the two input/output circuits 38 and 48 are all provided by processors of identical hardware construction but are configured to operate differently by virtue of the different parts of the software installed in the processors, so that they function either as a tank circuit or as an input/output circuit.
In normal operation, fuel quantity information from the left tank 1 is converted to digital form in the data concentrator circuit 32 and supplied to the tank circuit 36. The tank circuit 36 computes the fuel quantity in the tank 1 and supplies this information to both input/output circuits 38 and 48. The two input/output circuits 38 and 48 receive information about the quantity in the two tanks and compute two nominally-identical indications of the total fuel quantity, which are supplied onto the aircraft databus.
The system is arranged such that failure of any one of the elements in the system will not prevent gauging or degrade the performance and accuracy of the system. Furthermore, no failure of two elements in the system will cause a total loss of gauging although it might cause loss of gauging in one tank or reduced accuracy.
If, for example, the circuit 32 in the data concentrator 31 should fail, this would be identified by the tank circuit 36 and cause it to signal the failure to the input/output circuit 38. This would cause the input/output circuit 38 to run different software so that it became configured to perform the function of the tank circuit 36. The circuit 38 now processes the information on line 35 from the working circuit 33 in the data concentrator 31 to derive an indication ofthe quantity offuel in the left tank 1. The circuit 38 provides an output on line 62 to an input of the input/output circuit 48 representative of fuel quantity in the left tank 1 and, from this, the input/output circuit 48 computes the total fuel quantity and provides this as the sole output of the system.
Similarly, if the tank circuit 36 should fail, the input/output circuit 38 would identify this failure and would again be configured to perform as a tank circuit and would provide an output to the right lane input/output circuit 48 via line 137. The output ofthe input/output circuit 38 would be derived from the output ofthe circuit 33 in the data concentrator 31.
Corresponding failures in the right lane would cause the right input/output circuit 48 to be configured as a tank circuit.
It can be seen, therefore, that it is not necessary in the present invention to duplicate the tank circuit 36 or 46 in either lane.
Failure ofthe left lane inputloutput circuit 38 would still enable the right lane circuit 48 to receive the output from the left tank circuit 36.
If two elements in one lane should fail, such as, for example, both circuits 32 and 33 in the data concentrator 31, this would lead to complete loss of information about the left tank 1 but it would not affect operation ofthe right lane and the system would still be able to provide an indication of fuel quantity in the right tank 2. The system can also provide an indication of fuel quantity if both input/output circuits 38 and 48 should fail. If this should happen, one of the tank circuits 36 or 46 would be reconfigured as an input/output circuit.If, for example, the right tank circuit 46 were reconfigured as an input/output circuit it would no longer process the data on line 44 but instead would process the output of the left tank circuit 36 and provide an output on line 47 representative of fuel quantity in the left tank 1 in a suitable form for supply to the ARINC card 61. In these circumstances the signals on line 47 would either bypass the circuit 48 or pass through the circuit without being affected by it.
With reference now to Figure 2 there is shown a system for use with three tanks 1 to 3, the third tank being located centrally in the aircraft. The outputs ofthe probes and sensors in the third tank 3 are supplied to a central data concentrator 51 having two identical, parallel circuits 52 and 53. The output of one of the circuits 52 is connected via line 54 to a tank circuit 56 identical to the left and right tank circuits 36 and 46. The output ofthe other circuit 53 is connected via line 55 directly to the left input/output circuit 38, although it could be connected to the right input/output circuit 48. The output of the central tank unit 56 is connected via line 57 to both the left and right input/output circuits 38 and 48.
In normal operation, the central tank unit 56 provides an output indicative of the quantity offuel in the central tank 3 and this is summed by both input/output circuits 38 and 48 so that the outputs of both input/output circuits represent the total fuel quantity in all three tanks and the individual quantities in each ofthe three tanks.
Failure of any one of the elements in the central lane again has no effect on the
performance and accuracy of the system. For example, if the central tank circuit 56 should
fail, the left input/output circuit 38 would be reconfigured to take over its function.
The present invention enables a high degree of reliability to be provided without the
need for a large amount of processing capacity.
Claims (11)
1. A fuel-gauging system for at least two fuel tanks including first and second processors
associated with respective ones ofthe tanks, wherein the first and second processors are
arranged to receive output signals derived from a fuel-gauging probe in the associated
tank and to provide outputs indicative of fuel quantity in the respective tank, wherein the
system includes third and fourth processors both arranged to receive the outputs from
both the first and second processors and provide nominally-identical outputs indicative ofthe fuel quantity in both tanks, and wherein the third and fourth processors are also
arranged to receive the output signals derived from the probes without processing by the
first or second processor and are arranged such that, in the event of a failure ofthe first
processor, the third processor is configured to perform in the same way as the first
processor and to provide an output to the fourth processor indicative of fuel quantity in
the first tank and, in the event of a failure ofthe second processor, the fourth processor
is configured to perform in the same way as the second processor and provide an output
to the third processor indicative offuel quantity in the second tank.
2. A fuel-gauging system according to Claim 1, wherein the system is arranged such that
one of the first or second processors is configured to perform in the same way as the
third or fourth processor if both the third and fourth processors should fail.
3. A fuel-gauging system according to Claim 1 or 2, wherein the first, second, third and
fourth processors are of identical construction and are configured to perform in
different ways by programming with different software.
4. A fuel-gauging system according to any one of the preceding claims, including two
data concentrator circuits associated with each tank arranged to convert the output
signals from the fuel-gauging probes into a digital form, wherein the first and third
processors are connected to receive outputs from respective ones of the data
concentrator circuits associated with one tank, and wherein the second and fourth
processors are connected to receive outputs from respective ones of the data
concentrator circuits associated with the other tank.
5. A fuel-gauging system according to any one of the preceding claims including a third
fuel tank, wherein the system includes a fifth processor arranged to receive an output
signal derived from a fuel-gauging probe in the third tank and to provide an output
indicative of fuel quantity in the third tank, and wherein the fifth processor is
connected to supply an output signal to both the third and fourth processors.
6. A fuel-gauging system according to Claim 5, wherein the fuel-gauging probe in the
third tank is connected also to supply an output signal to the third or fourth processor
without processing by the fifth processor.
7. A fuel-gauging system according to Claim 5 or 6, wherein the fifth processor is of
identical construction to the first, second, third and fourth processors.
8. A fuel-gauging system according to any one of Claims 5 to 7, including two data
concentrator circuits associated with the third tank arranged to convert the output
signals from the fuel-gauging probe in the third tank into a digital form, wherein the
fifth processor is connected to receive the output from one of the data concentrator
circuits associated with the third tank, and wherein the other of the data concentrator
circuits associated with the third tank is connected to supply its output to either the
third or fourth processor.
9. A fuel-gauging system substantially as hereinbefore described with reference to Figure
1 of the accompanying drawings.
10. A fuel-gauging system substantially as hereinbefore described with reference to Figure
2 ofthe accompanying drawings.
11. Any novel feature or combination of features as hereinbefore described.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| GB9508703A GB2290141B (en) | 1994-06-09 | 1995-04-28 | Fuel-gauging systems |
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| GB9411525A GB9411525D0 (en) | 1994-06-09 | 1994-06-09 | Fuel gauging systems |
| GB9508703A GB2290141B (en) | 1994-06-09 | 1995-04-28 | Fuel-gauging systems |
Publications (3)
| Publication Number | Publication Date |
|---|---|
| GB9508703D0 GB9508703D0 (en) | 1995-06-14 |
| GB2290141A true GB2290141A (en) | 1995-12-13 |
| GB2290141B GB2290141B (en) | 1998-03-25 |
Family
ID=26305024
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| GB9508703A Expired - Lifetime GB2290141B (en) | 1994-06-09 | 1995-04-28 | Fuel-gauging systems |
Country Status (1)
| Country | Link |
|---|---|
| GB (1) | GB2290141B (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| GB2326779A (en) * | 1997-06-27 | 1998-12-30 | Solartron Group Ltd | Fail-safe system for use with a sensor |
| DE19934876B4 (en) * | 1998-08-12 | 2009-11-12 | Ge Aviation Uk | Füllstandsmeßsystem |
| RU2478528C2 (en) * | 2009-07-24 | 2013-04-10 | Открытое акционерное общество "ОКБ Сухого" | Method of defining target fuel residue in slipper fuel tank in fueling |
| EP3155184A4 (en) * | 2014-05-29 | 2018-04-11 | Avtechtyee, Inc. | Storage tank having an active support rod measurement system |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0136560A2 (en) * | 1983-09-02 | 1985-04-10 | Nec Corporation | Loosely coupled multiprocessor system capable of transferring a control signal set by the use of a common memory |
| US4918619A (en) * | 1984-12-20 | 1990-04-17 | Gull Inc. | Multiplexed junction probe for fuel gaging system and system containing same |
-
1995
- 1995-04-28 GB GB9508703A patent/GB2290141B/en not_active Expired - Lifetime
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP0136560A2 (en) * | 1983-09-02 | 1985-04-10 | Nec Corporation | Loosely coupled multiprocessor system capable of transferring a control signal set by the use of a common memory |
| US4918619A (en) * | 1984-12-20 | 1990-04-17 | Gull Inc. | Multiplexed junction probe for fuel gaging system and system containing same |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| GB2326779A (en) * | 1997-06-27 | 1998-12-30 | Solartron Group Ltd | Fail-safe system for use with a sensor |
| US6118190A (en) * | 1997-06-27 | 2000-09-12 | Solartron Group Limited | Fail-safe system |
| GB2326779B (en) * | 1997-06-27 | 2001-06-06 | Solartron Group Ltd | Fail-safe system |
| DE19934876B4 (en) * | 1998-08-12 | 2009-11-12 | Ge Aviation Uk | Füllstandsmeßsystem |
| RU2478528C2 (en) * | 2009-07-24 | 2013-04-10 | Открытое акционерное общество "ОКБ Сухого" | Method of defining target fuel residue in slipper fuel tank in fueling |
| EP3155184A4 (en) * | 2014-05-29 | 2018-04-11 | Avtechtyee, Inc. | Storage tank having an active support rod measurement system |
| US10345134B2 (en) | 2014-05-29 | 2019-07-09 | AvtechTyee, Inc. | Storage tank having an active support rod measurement system |
Also Published As
| Publication number | Publication date |
|---|---|
| GB9508703D0 (en) | 1995-06-14 |
| GB2290141B (en) | 1998-03-25 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US5513527A (en) | Fuel-gauging systems | |
| US4611304A (en) | Transducer memory circuit | |
| US4420976A (en) | Multiplexed true mass gaging system | |
| EP0393730A1 (en) | Integrated aircraft air data system | |
| US7712958B2 (en) | Measuring device, especially temperature measuring transducer | |
| US20080272237A1 (en) | Aircraft Auxiliary Fuel Tank System and Method | |
| Favennec | Smart sensors in industry | |
| EP3096196B1 (en) | System and method for diagnosing line replaceable unit failure | |
| Chen et al. | A re-examination of fault detectability and isolability in linear dynamic systems | |
| NO862510L (en) | DIAGNOSTIC CIRCUIT WHICH USES TWO-TEST DATA COMPARISONS. | |
| US20020178809A1 (en) | Fluid-gauging systems and methods | |
| GB2290141A (en) | Aircraft fuel tank monitoring system with fail safe redundancy | |
| JP2001033298A (en) | Fluid metering system | |
| GB2168818A (en) | Establishing synthesis validity between two signal sources in a turbine control system | |
| Zheng et al. | New level sensor system for ship stability analysis and monitor | |
| US3391568A (en) | Navigation system | |
| Hashemian | Response time and drift testing | |
| Johnston | An opto-isolator interface circuit designed for testability | |
| Newport et al. | Digital fuel quantity indicating system for aircraft | |
| Campbell | Instrument failure detection using functional redundancy applied to a nuclear pressurizer.[PWR] | |
| JP3522951B2 (en) | Display device with abnormality detection function | |
| Marshall et al. | Optimizing Performance and Reliability of Automated Machinery Control Systems and Instrumentation | |
| Beeny | A review of UK developments in aircraft fuel management systems | |
| Vieweg | Integrity monitoring and failure identification within an integrated satellite/inertial navigation system | |
| Tzanos | Validation of plant-wide data and fault identification at steady-state |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 732E | Amendments to the register in respect of changes of name or changes affecting rights (sect. 32/1977) | ||
| PE20 | Patent expired after termination of 20 years |
Expiry date: 20150427 |