GB2450503A

GB2450503A - Ice protection system with plural heating elements

Info

Publication number: GB2450503A
Application number: GB0712398A
Authority: GB
Inventors: Ian Mcgregor Stothers
Original assignee: Ultra Electronics Ltd
Current assignee: Ultra Electronics Ltd
Priority date: 2007-06-26
Filing date: 2007-06-26
Publication date: 2008-12-31
Also published as: WO2009001104A2; WO2009001104A3; GB0712398D0; GB0713674D0; US20100243811A1; GB2450566A; EP2195238B1; EP2195238A2; ATE522439T1

Abstract

A structure, such as an aircraft wing leading edge 500, is provided with an ice protection system in which underperformance or failure of an individual heating element C1 (example) in an array is compensated for by additional heating being directed to one or more surrounding heating elements B1 (example). Also disclosed are a related control system, control method, installation method and design method. Also disclosed is a control system providing heating in travelling wave effect across plural heating elements. Also disclosed is a structure ice protection system with a plurality of diagonally arranged heating elements (figs. 10,11). Also disclosed is a structure ice protection system with a matrix of heater elements divided both in line with, and perpendicular to an aerodynamic member. Additional safety redundancy, to that of the heating elements, may be provided by the provision of more than one heating controller.

Description

ICE PROTECTION HEATER SYSTEM

The present invention relates to a heater system, a control system, a method of installing a heater system and a method of controlling a heater system.

Ice protection systems protect against the build-up of ice on structures. One common application of ice protection systems is on aircraft. During flight, the surfaces of an aircraft can be exposed to water vapour at low temperatures and, if no preventative action is taken, ice can quickly form on the wings, on control surfaces, and on other parts of the aircraft in such a way as to alter the aerodynamic performance of the aircraft (for example by altering the airflow around the aircraft and by adding additional weight to it) with potentially catastrophic consequences.

Electrothermal ice protection systems typically comprise a number of electrically-powered heater elements such as heater mats, which can be used as anti-icing zones in which a sufficient temperature is maintained at the surface of the wing in order to prevent the formation of ice. These heater mats can also be used as de-icing zones to shed ice that has been allowed to accrete on the protected region. The de-icing mats are cyclically energised in order to melt the interface between the wing and the accreted ice, causing the ice to be shed.

Figure 1 is an illustration of a portion of an aircraft, showing the placement of heater zones in a conventional electrothermal aircraft ice protection system. The aircraft 100 includes a fuselage portion 102 and a wing portion 104. On the leading edge 106 of the wing 104, where ice accumulates most quickly, a plurality of heating mat zones 108, 110, 112 are provided. The heater mats may either be bonded to the outer or inner surface of the wing leading edge, or may be made an integral part of the structure.

A portion 200 of one of the heater zones of Figure 1 is shown in Figure 2. On the wing* section 202, shown head-on in Figure 2A and in cross-section in Figure 2B, four heater mat strips A 204, B 206, C 208, and D 210 are provided.

The operation of the four heater mat strips is illustrated in Figure 3. The portion of the heater zone 300 (shown in cross-section) includes a wing section 300 as before. In this example, all of the strips A, B, C and D are ice-breaking de-icer strips. During operation, ice accumulates 304 on the strip C at the stagnation zone of the wing. When the de-icing strip C is cycled', causing the bond between the ice and the wing.to melt, some of the ice is shed and some of the water runs-off 306 up the wing surface, driven by the airflow over the wing. Some of the run-off water then freezes 308 in the cooler areas of the wing beyond the anti-icing strip C. Intermittently the de-icing strip B is cycled, again causing some ice to be shed 308, but also some remaining water to run back 310 to further parts of the wing to refreeze again 312. De-icing strip A is also cycled, causing most of the remaining water to be shed as ice 314 or to be carried off the wing or evaporated by the airflow. A similar process of run-off 316, re-freezing 318 and ice shedding 320 takes place on the lower portion of the wing.

Such ice protection systems have some drawbacks. If any one of the heater strips A, B, C or D fail, the ice protection system may be rendered ineffective. A single failed heater strip could leave the entire wing exposed to ice accretion, for example. In this case, the build up of ice would be expected to change the aerodynamic performance of the wing and to cause large unbalanced moments to be exerted on the aircraft (due to the differing drag and lift of each of the wings). Aircraft control surfaces (such as the ailerons and rudder, for example) can compensate for these changes to some degree but, with ice continuing to accrete, the control surfaces will eventually be overcome and a catastrophic failure of the aircraft is to be expected.

It is therefore desired to provide some redundancy against failure. One approach is to provide a backup version of each heater mat. Figure 4 is an illustration of such a redundant heater mat arrangement 400 that could be provided, in which each of the heater mat strips of Figure 2 have been duplicated. The wing portion 402, shown front-on in Figure 4A and in cross-section in Figure 4B, includes eight heater mat strips A1 and A2 404, B1 and B2 406, C1 and C2 408, and D1 and 1)2 410. In the event ofa failure of one of the primary heater mats A1, B1, C1, D1, the appropriate one of the backup heater mats A2, B2, C2, D2 could commence operation.

A problem with this system, however, is that overlaying the mats may not provide adequate protection, because a fault in a mat may affect the corresponding redundant mat. Also, any external fault caused by impact would also probably affect both mats.

Another approach is therefore required, that assumes that a failure of at least one heater zone during normal operation should be accounted for.

In a first aspect, the present invention provides an ice protection system for a structure (which may be a fixed structure, or a land, air or sea-based vehicle, for example), the ice protection system comprising: a plurality of independently controllable heater elements (which may be heater mats, engine air bleed channels, or any other appropriate heater device) arranged on the structure; and a control system, operable: to detect an underperformance of at least one underperforming heater element; and to control the supply of power to at least one further heater element in dependence on a stored relationship or algorithm relating said at least one further heater element to said at least one underperforming heater element.

Thus, in the event of a heater element failure, the power supply to one or more further heater elements is altered in order to reduce the impact of the failure. A number of different choices of further heater element(s) can be made in dependence on one or more variables that are sought to be controlled. The stored relationship may be, for example, a look-up table storing for each heater element an identifier of a further heater element (or elements) to be adjusted in the event of the heater element underperforming.

An algorithm could be used which takes an identifier associated with an underperforming heater element as an input and gives as an output an identifier associated with the further heater element(s). The ice protection system may be designed such that the relevant identifiers have a simple mathematical relationship, for example. The underperforming may be a full or partial failure of the heater element or associated power supply, for example.

If the structure has a desired aerodynamic performance, the control system may be operable to control the supply of power to said at least one further heater element in order to counteract a change in aerodynamic performance caused by said at least one underperforming heater element. The term aerodynamic performance' preferably refers to the general behaviour of the structure in an airflow, and is not intended to be especially limiting. A desired aerodynamic performance may relate to a desired relationship between an applied airflow (due to prevailing winds or arising from the movement of the structure, for example) and mechanical stresses, moments or forces applied to the structure, for example. It may be desired, for example, to minimise external moments about particular axes, or total drag, or total lift.

In an embodiment in which the structure has an axis of symmetry, a position of said at least one further heater element may be substantially the reflection of a position of said at least one underperforming heater element about the axis of symmetry. This can be effective in cancelling out the effect of one or more underperforming heater elements, especially if the axis of symmetry is substantially aligned with an average or prevailing direction of air flow relative to the structure.

The control system may be operable to reduce the supply of power to said at least one further heater element (and may disconnect the supply of power entirely, for example).

The control system may also reduce (or disconnect) the power to the original heater element, for example to ensure that both the underperfonning and further heater elements are outputting a consistent and reliable amount of power (which may be zero).

In more detail, the control system may be operable to cease the supply of power to the heater elements by disconnecting them from a power supply, for example by operating switches or by physically breaking the power supply connection (permanently, for example). In the case of a permanent disconnection, there is no risk of either the failed heater element or further heater element(s) coming back on line and upsetting the aerodynamic equilibrium again.

The heater elements may be sized such that the structure can remain substantially operational despite a failure of at least two of the heater elements. If the size of the elements is reduced further, the structure will be able to remain substantially operational despite multiple heater element failures.

In one embodiment, the control system may be operable to switch the heater elements on and off so as to produce a travelling wave for transferring ice across a surface. The wave may travel in a preferred direction that may or may not be aligned with the direction of airflow (in use). The invention may encompass a method and apparatus for controlling an ice protection system substantially as described herein with reference to Figure 13, and any obvious variants. This can improve the ice shedding performance.

The control system may comprise a plurality of controllers, each controller being operable to control at least one of the heater elements. The heater elements may be grouped into a plurality of groups, and each controller may be operable to control at least one group. In one embodiment, at least one group of heater elements is operable to be controlled by more than one of the controllers. This can provide increased redundancy in the event of a controller failure.

The heater elements may be arranged substantially perpendicular to the leading edge of an aerodynamic member (such as the leading edge of a wing). Alternatively, the heater elements may be arranged substantially diagonally in relation to the leading edge of an aerodynamic member (such as the wing leading edge again). The ice protection system may comprise at least one breaker strip, and may comprise at least one stagnation zone heating mat.

In another aspect the invention provides an aircraft (such as an aeroplane or a helicopter) including an ice protection system as aforesaid.

In further aspects, the invention provides the control system in independent form.

In a yet further aspect of the invention, there is provided a method of controlling an ice protection system for a structure, the ice protection system including a plurality of independently controllable heater elements, and the method comprising: detecting an underperforrnance of at least one underperforming heater element; and controlling the supply of power to at least one further heater element in dependence on a stored relationship or algorithm relating said at least one further heater element to said at least one underperforming heater element.

In a further aspect of the invention there is provided a method of installing an ice protection system for a structure having a desired aerodynamic perfonnance, the method comprising: arranging a plurality of independently controllable heater elements on the structure; and installing a control system, operable: to detect an underperformance of at least one underperforming heater element; and to control the supply of power to at least one further heater element in dependence on a stored relationship or algorithm relating said at least one further heater element to said at least one underperforming heater element.. Other method features may be provided corresponding to the apparatus features mentioned above.

In another aspect of the invention there is provided a method of installing an ice protection system for a structure having an axis of symmetry, the method comprising: arranging a plurality of independently controllable heater elements on either side of the axis of symmetry; and installing a control system, operable: to detect a failure associated with one of the heater elements; and to cease the supply of power to both to the failed heater element and also to a heater element having a position that is substantially the reflection of the position of the failed heater element about the axis of symmetry. As before, further method features may be provided corresponding to the apparatus features mentioned above.

In a further aspect of the invention there is provided a method of designing an ice protection system for a structure, comprising: determining a portion of the structure to which ice protection heating is to be provided during use of the structure; determining an extent to which the ice protection heating can fail before the structure will experience operational failure; and designing an arrangement of independently controllable heater elements that are sufficiently small that the failure of any heater element will not cause a failure beyond the determined extent.

The method may further comprise subjecting at least the portion of the structure to icing conditions that may be expected during use of the structure; providing ice protection heating to only part of the determined portion of the structure; and measuring the amount of ice accretion on the structure in order to determine the extent to which the ice protection heating can fail. Alternatively, the method may further comprise modelling the amount of ice accretion on the structure in order to determine the extent to which the ice protection heating can fail. The step of designing the ice protection heater system may further comprise designing an arrangement of heater elements in which heater elements are arranged on either side of an axis of symmetry of the structure. A control system as aforesaid may be incorporated into the design. The method may further comprise installing at least part of the ice protection system (such as the control system) in a structure.

In another aspect, the invention provides a control system for an ice protection system on a structure, the ice protection system having a plurality of heater elements, and the control system being operable to switch the heater elements on and off so as to produce a travelling wave for transferring ice across a surface.

In a further aspect, the invention provides an ice protection system for a structure having at least one aerodynamic member, wherein the ice protection system comprises a plurality of heater elements arranged substantially diagonally in relation to the leading edge of said at least one aerodynamic member. The diagonal arrangement can reduce the incidence of bridging' between heater elements (because the gap between adjacent heater elements can be smaller in the direction of airflow than in other arrangements) and the redundancy of the system can be improved (because in the event of a heater element failure, ice protection heating can still be provided along the entire width of the ice protection heater area).

In a yet further aspect, the invention provides an ice protection system for a structure having at least one aerodynamic member, wherein the ice protection system comprises a plurality of heater elements arranged in a matrix divided both substantially in line with and substantially perpendicular to the leading edge of said at least one aerodynamic member. This can improve the redundancy of the heater mat system and also increase the flexibility of the system with regard to power cycling patterns (which can cause ice to be shedded more effectively). Other arrangements are of course possible.

The present invention can be implemented in any convenient form, for example using dedicated hardware, or a mixture of dedicated hardware and software. The invention may further comprise a data network (for example to enable communications between the control system and other parts of the structure), which can include any local area network or other appropriate network. Aspects of the present invention encompass computer software implementable on a programmable device. The computer software can be provided to the programmable device using any conventional carrier medium.

The carrier medium can comprise a transient carrier medium such as an electrical, optical, microwave, acoustic or radio frequency signal carrying the computer code. An example of such a transient medium is a TCP/IP signal carrying computer code over an IP network, such as the Internet. The carrier medium can also comprise a storage medium for storing processor readable code such as a floppy disk, hard disk, CD ROM, magnetic tape device or solid-state memory device.

Although each aspect and various features of the present invention have been defined hereinabove independently, it will be appreciated that, where appropriate, each aspect can be used in any combination with any other aspect(s) or features of the invention. In particular, features disclosed in relation to apparatus aspects may be provided in appropriate form in relation to method aspects, and vice versa.

Embodiments of the present invention will now be described with reference to the accompanying drawings, in which: Figure 1 is an illustration of the placement of heater mats and heater zones of an ice protection system of an aircraft; Figure 2A and 2B are an illustration of a portion 200 of one of the heater zones of Figure 1; Figure 3 is an illustration of the operation of the four heater mat strips of Figure 2; Figures 4A and 5B are an illustration of one redundant heater mat arrangement; Figures 5A and 5B are an illustration of a redundant heater mat arrangement of a first embodiment; Figures 6A and 6B are an illustration of a redundant heater mat arrangement of a second embodiment; Figure 7 is an illustration of an arrangement of the heater mats of Figures 5A and 5B; Figure 8 is a schematic of a control system for controlling the heater mats of Figure 7; Figure 9 is a simplified example of heater mat placements on an aircraft; Figure 10 is an illustration of the effect of a heater mat failure in the system of Figure 9; Figure 11 is an illustration of the effect of a disconnection of a further heater mat in the system of Figure 10; Figures 12A, 12B, 12C and 12D are illustrations of different embodiments of a control system for controlling the system of Figures 9 to 11; Figure 13 is an illustration of a heater mat cycling schedule for operating the heater mats of Figures 5A and 5B; Figure 14 is an illustration of a redundant heater mat arrangement of a third embodiment; and Figure 15 is an illustration of a redundant heater mat arrangement of a fourth embodiment.

Two embodiments of a redundant heater mat arrangement will first be described. A control system for controlling the heater mats and associated control systems will then be described. Further, non- exhaustive examples of redundant heater mat arrangements will then be given.

Figures 5A and SB are an illustration of a redundant heater mat arrangement of a first embodiment. The arrangement 500 is shown in a front view in Figure 5A and in cross-section in Figure SB. The wing section 502 is covered by a first row 504 anda second row 506 of de-icing strips. The strips are divided lengthwise (that is, divided along the length of the leading edge of the wing) and also chordwise (that is, divided along a line extending from the leading edge to the trailing edge of the wing).

Figures 6A and 6B are an illustration of a redundant heater mat arrangement of a second embodiment. The arrangement 600 is shown in a front view in Figure 6A and in cross-section in Figure 6B. The wing section 602 is covered by a single row 604 of de-icing strips. The strips are divided lengthwise (that is, divided along the length of the leading edge of the wing).

Figures 5 and 6 schematically illustrate embodiments of a heater mat arrangement in which heating mats are split chordwise or lengthwise in order to provide redundancy and some robustness against certain types of damage (such as a limited external impact,

for example).

As noted, in the first embodiment (Figure 5) the mats are both split chordwise and lengthwise and in the second embodiment (Figure 6) the mats are split lengthwise only.

The lengthwise division may be a division by a line essentially transverse to a stagnation zone of the wing. The chordwise division may be division by a line essentially parallel to a stagnation zone of the wing.

In the embodiments shown in Figures 5 and 6, each mat is separately controllable, allowing a high degree of redundancy in the event that a single mat fails. The number of mats may be limited by the control system and available switches but otherwise there may be no theoretical upper limit on the number of mats. ii

Figure 7 is an illustration of an arrangement of the heater mats of Figures 5A and 5B.

The arrangement 700 of mats includes a plurality of groups 702, 704, 706 of mats. Each group of mats 702, 704, 706 is independently controlled and powered. The modular arrangement can increase the ease of installation of the mats as well as provide redundancy. Yet further redundancy can be provided, as explained below.

Figure 8 is a schematic of a control system for controlling the heater mats of Figure 7.

The control system 800 includes a heater mat group 802, a first controller 804 and a second controller 806.

The first controller 804 controls mats B1, D1, A2 and C2, and the second controller 806 controls mats A1, C1, B2 and D2.

The two controllers 804, 806 provide further redundancy, because the heater mat size can be chosen such that the failure of a controller (equivalent to a loss of four heater mats) will not lead to a serious failure of the ice protection system. The control can of course be divided between a larger number of controllers (for example, to reduce the number of mats controlled by a single controller to below the critical number required for a major ice protection failure).

The controllers 804, 806 synchronise by appropriate means (using an external clock or network signal, or by communications with each other or with a central ice protection controller, for example) so that the heater mats are synchronised in a coordinated fashion.

Timing sequences can be chosen such that the controllers 804, 806 are alternately operating. For example one sequence for de-icing or carrying out an anti-icing startup procedure is to power diagonal mats in sequence (energising mats A2 and B1, then mats B2 and C1, and so on). Alternatively, timing sequences and/or the allocation of heater mats to controllers can be such that both controllers are both continuously engaged (which can simplify the power distribution, for example). Other timing sequences are of course possible.

At the changeover between heater mat D2 of the first heater group 702 of Figure 7 being powered, and heater mat A1 of the second heater group 704 of Figure 7 being powered, for example, bridging by ice may occur.

Breaker strips could also be employed between surfaces to remove bridges. A stagnation zone heater mat could also be utilised if required. The zones could be broken down into 12 rather than 8 zones for 3 phase applications, in order to minimise the required number of switches, for example.

Other embodiments of the control system (which may share features with, and be compatible with, the scheme shown in Figure 8) will now be described.

Figure 9 is a simplified example of heater mat placements on an aircraft 900. The fuselage 902, right wing 904 (as view from the rear of the aircraft) and left wing 906 are shown in diagrammatic form. The right wing 904 is provided with heater mats 908, 910, 912, 914, 916, and the left wing 906 is provided with heater mats 918, 920, 922, 924, 926. (In most applications, a greater number of heater elements would be provided, but in this example the number of heater elements is kept small for convenience and simplicity.) Figure 10 is an illustration of the effect of a heater mat failure in the system of Figure 9.

Again, the aircraft 1000 includes a fuselage 1002, right wing 1004 and left wing 1006.

The right wing 1004 includes heater elements 1008, 1010, 1012, 1014, 1016 and the left wing 1006 includes heaterelements 1018, 1020, 1022, 1024, 1026.

A failure of the heater mat 1014 is indicated by cross-hatching. A corresponding build-up of ice 1028 is shown, caused by the lack of heating in the region of the heater mat 1014. As a result of the build-up of ice 1028, the aerodynamic performance of the wing 1004 is changed. For example, the wing may have increased lift (due to the airflow over the wing becoming more turbulent) and also increased drag, applying a banking moment 1030 and a yawing moment 1032. Unless counteracted by movements of the aileron and rudder control surfaces (not shown), the moments 1030, 1032 would in effect pull the aircraft nose away from the direction of travel and cause the aircraft to bank to the left (for example). If ice continues to accrete on the wing, the moments 1030, 1032 may become too strong to be counteracted by adjustments to the control surfaces, and a catastrophic failure of the aircraft could be expected. Alternatively, the accretion of ice could cause a reduction in the amount of lift, also potentially causing a catastrophic failure of the aircraft (for analogous reasons).

In the present embodiment, the ice protection control system detects the failure of a heater mat and, as will now be described, carries out a disconnection of another heater mat in order to attempt to counteract the problems mentioned above.

Figure 11 is an illustration of the effect of a disconnection of a further heater mat in the system of Figure 10.

Again the aircraft 1100 is shown with fuselage 1102, right wing 1104, left wing 1106 and heater elements 1180, 1110, 1112, 1114, 1116, 1118, 1120, 1122, 1124, 1126. In this instance, having detected the failure of heater element 1114, the ice protection control system (not shown) forces the disconnection of the heater element in the corresponding position on the opposite side of the aircraft, namely element 1120. As a result of the failure and disconnection, two areas 1128, 1130 of ice accrete on the wings.

Because ice may accrete differently over the two areas 1128, 1130, there may still be an imbalance between the aerodynamic properties of the wings, causing a banking moment 1132 and a yawing moment 1134, but the imbalance will be kept relatively low and manageable by manipulation of control surfaces.

In the event of any further heater mat failures, the same process can be followed. Again, some imbalance may be expected, but not generally any further imbalance than might.

be expected with one failed heater element.

The number of heater mat failures that can occur is largely determined by the amount of ice that will accrete (and where it will accrete) due to each failed heater mat. This is largely determined by the size of the heater mat. Therefore the individually controlled (disconnectable) heater elements must be made sufficiently small that the loss of 2 x n heater mats will not cause operational failure of the aircraft (that is, will not cause sufficient ice to accumulate to overcome the pilot's ability to compensate for the change in aerodynamic properties), where n is the number of heater mat failures that will be tolerated during normal operation.

In an alternative embodiment, without the symmetric disconnection control system, the same design process can be followed in which the individually controlled (disconnectable) heater elements are made sufficiently small that the loss of n heater mats will not cause operational failure of the aircraft, where again n is the number of heater mat failures that will be tolerated during normal operation. The determination of the maximum heater size can be made by wind tunnel

testing of a wing section (or other part of the structure that is to be actively protected from ice accumulation) and measuring how much ice accretes when parts of the ice protection heating are switched off, for example. The aerodynamic effects of the ice accretion can be measured or simulated to determine the limits of safe operation. Other methods, including simulation qf the ice accretion process, are also possible.

The heater element control system will now be described in more detail.

Figures 12A, 12B, 12C and 12D are illustrations of different arrangements of a control system for controlling the system of Figures 9 to 11. In these figures a portion of the aircraft 1200 is shown diagrammatically, including (for illustration) a couple of heater elements 1202, 1204 and symmetric partner (mirror image') heater elements 1206, 1208.

In the embodiment of Figure 1 2A, a central controller 1210 controls the supply of power to all of the ice protection heater elements, including the heaters elements 1202, 1204, 1206, 1208, and also monitors the status of the elements. In the event of a failure of a heater such as heater 1202, the controller 1210 detects the failure by an appropriate means (see below) and ensures that both a failed heater element 1202 (for example) and the corresponding mirror image' heater element 1208 are disconnected. The control system of this embodiment can minimise the amount of wiring and control circuitry that is required.

The determination of which heater element to disconnect can be made using a look-up table having an entry for each heater element (for example). Each entry in the table contains an identifier of a corresponding (symmetric pair) heater element that should be disconnected if the indexed heater element fails. Alternatively, each heater element may have an identifier that can be mapped algorithmically to a corresponding identifier of a symmetrically opposed heater element. For example, if the heater elements are allocated an identifier number between 0 and 7 (say), going from left to right across both wings, the mirror image heater element can be determined by subtracting the identifier from 7 (so the mirror image of element 0 is element 7, the mirror image of element 1 is element 6, and so on). Other referencing schemes are of course possible.

In the embodiment of Figure 1 2B, a number of controllers 1210, 1212 are provided, each being responsible for a group of heater elements. In particular, controller 1210 controls the heater elements 1202, 1204 and controller 1212 controls the mirror image' heater elements 1206, 1208. Additional controllers may of course be provided. Again the controllers 1210, 1212 both control and monitor the heater elements, and have appropriate connections (such as a serial data network) to allow communication between the controllers.

In the event of a heater element failure, for example the failure of heater element 1202, the relevant controller 1210 ensures that the heater element 1202 is disconnected, and instructs the other controller 1212 to disconnect the corresponding symmetric heater element 1208.

In a variant of this embodiment, one controller 1210 monitors the heater elements 1206, 1208 of the symmetric partner controller 1212 as well as, or instead of, monitoring its own associated heater elements 1202, 1204. Additionally or alternatively, the controller 1210 can monitor the performance of the other controller 1212 (from which it can infer whether or not the associated heater elements 1206, 1208 are being correctly switched).

In the event of a failure being detected, either of the controller 1212 or of the associated heater elements 1206, 1208, the controller 1210 can both cause the relevant heater element(s) 1206, 1208 to be disconnected and also its own heater element(s) 1202, 1204. This system requires a larger number of controllers and additional wiring, but can provide additional protection in the event of a controller-level failure.

In this way or otherwise, it is possible for each heater element 1202, 1204, 1206, 1208 to be independently controlled by more than one controller, thus increasing redundancy.

In the embodiment of Figure 12C, a first controller 1210 and second controller 1212 are again provided, but a further central controller 1214 is provided. In this embodiment, some fault detection functionality is delegated to the central controller 1214, which coordinates with the local controllers 1210, 1212 if any heater elements 1202, 1204, 1206, 1208 are required to be disconnected in the event of a failure elsewhere.

In the embodiment of Figure l2D, two controllers 1210, 1212 are again provided. A central controller (not shown) may also be provided, as described above. In this embodiment, each controller 1210, 1212 controls a number of symmetric heater element pairs. Thus, in the event of a controller failure, no asymmetry will arise as a result of the corresponding heater element failures. In practice there may be impracticalities in providing a sufficiently large amount of cross.wiring between the different wings.

Further redundancy may be provided in addition to that described above in relation to Figures 12A to 12D, for example by providing backup versions of each controller. For example, three versions of each controller may be provided, and the controller output may be decided by a majority voting scheme. Alternatively, backup controllers may remain dormant until a failure is detected in the currently operating controller. Other appropriate redundancy schemes may be used.

The detection of a heater element failure may be made by any appropriate means. For example, a failure may be detected directly, by temperature measurement, or inferred by current, power, resistance andlor voltage measurements taken in relation to indididual heater elements.

The heater elements can be disconnected when desired for example by operating a suitable electronic or mechanical switch, or by causing the heater element connections to become permanently disconnected from the power supply (until repairs can be carried Out).

Figure 13 is an illustration of an alternative heater mat cycling schedule for operating the heater mats of Figures 5A and 5B.

This schedule may provide improved performance with regard to the ice bridging mentioned above. In such a sequence, the aim is to produce a travelling wave that is in effect transferring the ice across the surface. The travelling wave could move in one of a number of directions, such as substantially parallel to or substantially perpendicular to the normal airflow direction, for example, or any other angle inbetween.

There are potentially other sequences and timings that could be employed to achieve the same aim.

The heater mats can also be shaped to improve performance, and two examples will now be given.

Figure 14 is an illustration of a redundant heater mat arrangement of a third embodiment.

The arrangement 1400 comprises a wing section 1402 and an overlaid series 1404 of diagonally inclined heater mats.

Figure 15 is an illustration of a redundant heater mat arrangement of a fourth embodiment.

The arrangement 1500 comprises a wing section 1502 and a first row 1504 and second row 1506 of diagonally inclined heater mats.

In the two embodiments of Figures 14 and 15, runback from the mats and/or bridging may be limited. Other angles of inclination of the mat and other shapes and sizes of mat are of course possible.

The heater mat arrangements and control system have generally been described as applicable to the leading edge of an aircraft wing, but may of course be applied to other parts of an aircraft, such as propeller blades, engine inlets, tail sections and so on. The heater mat arrangements may also be applied to other air vehicles such as helicopters (applied to the rotors, and so on) and space craft. The heater mat arrangements may also be applied to other types of vehicle (land or sea) and also to fixed structures (for example for attachment to antennae and to parts of buildings that are particularly prone to icing).

In the case of fixed structures, it may be the case that the method of design provides considerable rigidity in one direction but less in another. It may also be the case that a structure is more susceptible to twisting than to directional forces. In this case the various embodiments described above can be used to minimise the twisting (caused by high winds, for example) by disabling symmetric pairs of ice protection heaters as described above (with central support columns defining the relevant axis of symmetry,

for example).

In one embodiment, the control system is able to determine a degree to which a heater element is underperforming (that is, it can detect a partial failure as well as a total failure). In the event of detecting an underperformance, the power supply to the symmetric opposite heater element can be adjusted to match the loss of power in the underperforming heater element. Alternatively, for example if partial power control is not possible or at least impractical, both heater elements in the symmetric pair can be disconnected in the event of one or both of them underperformining by any degree (to avoid any imbalance).

In another embodiment, the power supply can be more generally altered in response to detecting an underperformance of a heater element. For example, the power supply to heater elements adjacent to an underperforming heater element can be increased in order to reduce the amount of ice accretion in the vicinity of the underperforming heater element. In many circumstances, however, it may be dangerous or not possible to increase the power to heater elements beyond normal operating levels.

In a yet further embodiment, the control system may be operable to alter (for example, to reduce) the power supply to one or more heater elements that are not the symmetric opposite to an underperforming heater element. For example, if a heater element near the end of one wing is operating at half nominal power, it may be preferred to completely disconnect one or more heater elements further towards the fuselage on the other wing. This can substantially reduce any force and moment imbalances while resulting in less ice accretion overall (compared, for example, to the alternative course of action of fully disconnecting both the underperforming heater and its symmetric opposite heater on the other wing). Other courses of action are of course possible.

Appropriate disconnection or power reduction strategies can be determined during pre-flight testing andlor simulation and stored in controller look-up tables (for example).

It will be appreciated that other types of electrically powered elements may be substituted (where applicable) for the above-described heater mats. For example the de-icing elements can comprise magnetic force pulse elements as for example described in US 4,895,322 (the content of which is hereby incorporated by reference), or electra impulsive elements (where a large electrical pulse is applied to the area) as for example described in US 6,427,946 and US 6,027,075 (the contents of which are hereby incorporated by reference), or any combination thereof.

Further modifications lying within the spirit and scope of the present invention will be apparent to a skilled person in the art.

Claims

CLAIMS: 1. An ice protection system for a structure, the ice protection

system comprising: a plurality of independently controllable heater elements arranged on the structure; and a control system, operable: to detect an underperformance of at least one underperforming heater element; and to control the supply of power to at least one further heater element in dependence on a stored relationship or algorithm relating said at least one further heater element to said at least one underperforming heater element.
2. An ice protection system according to Claim 1 for a structure having a desired aerodynamic performance, wherein the control system is operable to control the supply of power to said at least one further heater element in order to counteract a change in aerodynamic performance caused by said at least one underperforming heater element.
3. An ice protection system according to Claim 1 or 2 for a structure having an axis of symmetry, wherein a position of said at least one further heater element is substantially the reflection of a position of said at least one underperforming heater element about the axis of symmetry.
4. An ice protection system according to Claim 3, wherein, during operation of the structure, the axis of symmetry is substantially aligned with an average or prevailing direction of air flow relative to the structure.
5. An ice protection system according to any preceding claim, wherein the control system is operable to reduce the supply of power to said at least one further heater element.
6. An ice protection system according to any preceding claim, wherein the heater elements are sized such that the structure can remain substantially operational despite a failure of at least two of the heater elements.
7. An ice protection system according to any preceding claim, wherein the control system is operable to switch the heater elements on and off so as to produce a travelling wave for transferring ice across a surface.
8. An ice protection system according to any preceding claim, wherein the control system comprises a plurality of controllers, each controller being operable to control at least one of the heater elements.
9. An ice protection system according to Claim 8, wherein the heater elements are grouped into a plurality of groups, and each controller is operable to control at least one group.
10. An ice protection system according to Claim 9, wherein at least one group of heater elements is operable to be controlled by more than one of the controllers.
11. An ice protection system according to any preceding claim, wherein the heater elements are arranged substantially perpendicular to the leading edge of an aerodynamic member.
12. An ice protection system according to any one of Claims I to 10, wherein the heater elements are arranged substantially diagonally in relation to the leading edge of an aerodynamic member.
13. An ice protection system according to any preceding claim, comprising at least one breaker strip.
14. An ice protection system according to any preceding claim, comprising at least one stagnation zone heating mat.
15. An aircraft including an ice protection system according to any one of Claims 1 to 14.
16. A control system for a structure including a plurality of independently controllable heater elements, the control system comprising: an interface for interfacing with the heater elements; and a controller, operable: to detect an underperformance of at least one underperforming heater element; and to control the supply of power to at least one further heater element via said interface in dependence on a stored relationship or algorithm relating said at least one further heater element to said at least one underperforming heater element.
17. A control system according to Claim 16 for a structure having a desired aerodynamic performance, wherein the controller is operable to control the supply of power to said at least one further heater element in order to counteract a change in aerodynamic performance caused by said at least one underperforming heater element.
18. A control system according to Claim 16 or 17 for a structure having an axis of symmetry, wherein a position of said at least one further heater element is substantially the reflection of a position of said at least one underperforrning heater element about the axis of symmetry.
19. A control system according to any one of Claims 16 to 18, wherein the controller is operable to reduce the supply of power to said at least one further heater element.
20. A control system according to any one of Claims 16 to 19, wherein the controller is operable to switch the heater elements on and off so as to produce a travelling wave for transferring ice across a surface.
21. A control system according to any one of Claims 16 to 20, comprising a plurality of controllers, each controller being operable to control at least one of the heater elements.
22. A control system according to Claim 21 for use with heater elements grouped into a plurality of groups, wherein each controller is operable to control at least one group.
23. A control system according to Claim 22, wherein the controllers are operable such that at least one group of heater elements is controlled by more than one of the controllers.
24. A method of controlling an ice protection system for a structure, the ice protection system including a plurality of independently controllable heater elements, and the method comprising: detecting an underperformance of at least one underperforming heater element; and controlling the supply of power to at least one further heater element in dependence on a stored relationship or algorithm relating said at least one further heater element to said at least one underperforming heater element.
25. A method according to Claim 24 for use with a structure having a desired aerodynamic performance, further comprising controlling the supply of power to said at least one further heater element in order to counteract a change in aerodynamic performance caused by said at least one underperforming heater element.
26. A method according to Claim 24 or 25 for use with a structure having an axis of symmetry, wherein a position of said at least one further heater element is substantially the reflection of a position of said at least one underperforming heater element about the axis of symmetry.
27. A method according to any one of Claims 24 to 26, wherein the controller is operable to reduce the supply of power to said at least one further heater element.
28. A method according to any one of Claims 24 to 27, further comprising switching the heater elements on and off so as to produce a travelling wave for transferring ice across a surface.
29. A method of installing an ice protection system for a structure having a desired aerodynamic performance, the method comprising: arranging a plurality of independently controllable heater elements on the structure; and installing a control system, operable: to detect an underperformance of at least one underperforming heater element; and to control the supply of power to at least one further heater element in dependence on a stored relationship or algorithm relating said at least one further heater element tsaid at least one underperforming heater element.
30. A method of designing an ice protection system for a structure, comprising: determining a portion of the structure to which ice protection heating is to be provided during use of the structure; determining an extent to which the ice protection heating can fail before the structure will experience operational failure; and designing an arrangement of independently controllable heater elements that are sufficiently small that the failure of any heater element will not cause a failure beyond the determined extent.
31. A method according to Claim 30, further comprising: subjecting at least the portion of the structure to icing conditions that may be expected during use of the structure; providing ice protection heating to only part of the determined portion of the structure; and measuring the amount of ice accretion on the structure in order to determine the extent to which the ice protection heating can fail.
32. A method according to Claim 30, further comprising modelling the amount of ice accretion on the structure in order to determine the extent to which the ice protection heating can fail.
33. A method according to any one of Claims 30 to 32, wherein the step of designing the ice protection heater system further comprises designing an arrangement of heater elements in which heater elements are arranged on either side of an axis of symmetry of the structure.
34. A method according to any one of Claims 30 to 33, further comprising incorporating into the design a control system as defined in any one of Claims 16 to 23.
35. A method according to any one of Claims 30 to 34, further comprising installing at least part of the ice protection system in a structure.
36. A control system for an ice protection system on a structure, the ice protection system having a plurality of heater elements, and the control system being operable to switch the heater elements on and off so as to produce a travelling wave for transferring ice across a surface.
37. An ice protection system for a structure having at least one aerodynamic member, wherein the ice protection system comprises a plurality of heater elements arranged substantially diagonally in relation to the leading edge of said at least one aerodynamic member.
38. An ice protection system for a structure having at least one aerodynamic member, wherein the ice protection system comprises a plurality of heater elements arranged in a matrix divided both substantially in line with and substantially perpendicular to the leading edge of said at least one aerodynamic member.
39. An ice protection system substantially as herein described, with reference to Figures 5A to 15 of the drawings.