JP3168448B2 - Digital flight control system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a digital flight control system in which a flight essential function and a flight phase essential function are integrated in order to improve the reliability of an aircraft flight control system.

[0002]

2. Description of the Related Art FIG. 5 shows a general configuration of an aircraft flight control system. FIG. 5 (a) shows a mechanical operation system, in which the operation of the control rod 10 'is applied to the control surface 30 via a link mechanism 10 "having an autopilot device (AP) and an actuator 12'. The transmission is performed mechanically, and the aircraft is steered by steering the control surface.

FIG. 5 (b) shows a fly-by-wire system (FBW), which has functions such as realizing a higher maneuverability than the above-mentioned mechanical control system. I have.

A signal generated by the operation of the side stick control can 10 under the electric connection from the control can 10 to the actuator 12 is input to the actuator control computer 14, and the auto-pilot device AP, the flight management system (FMS). ) Is input to the computer 14 via a data bus, and a control command for actuator control is output by the arithmetic processing to perform actuation, and the aircraft is steered by steering the control surface.

[0005] In a fly-by-light system (FBL) not shown, the FBW system is further developed, and the data bus and the like are opticalized to achieve high-speed optical transmission characteristics. The application is intended to achieve not only improved steering performance, but also reduced weight and improved lightning resistance.

FIG. 6 is a configuration diagram showing an example of the FBW steering system. In FIG. 6, the system includes a flight essential sensor 10a provided in a side stick control can 10 and the like, and an actuator control computer (Ac).
tuatorControl Computer (ACC) 14 and actuator 12, flight control computer (Flight Control
ol Computer: FCC) 16 or the like as a main component.

The ACC 14 has a flight essential function (a function essential for aircraft operation , for example, a control surface control function) .
A computer for executing a steering operation, etc. , and having a function of taking in a signal from the flight essential sensor 10a provided in the side stick steering wheel 10 and outputting a control command to the actuator 12, and a minimum required flight control function. To secure. The ACC 14 is configured as a redundant system having a high multiplicity of three to four times in order to improve the reliability of the system.

The FCC 16 detects a large number of parameters related to flight characteristics, such as the attitude angle of the airframe, air data, etc., by using the sensor 20 and receives the detection signals. The FCC 16 also receives the flight essential sensor 10a from the ACC 14. Data signal from the data bus 1
8 has been entered. This FCC16 is a flight phase essential function , that is, its function is
Otherwise, hazards or operations may occur only in certain flight conditions.
It becomes impossible to maintain vertical system operation state III
Essential functions (JIS, aircraft control system-
Meter, has a reference page 2) equipment and testing General rules performs specialized control law calculation such as the model following operation method optimal control for the maneuverability improvement, for example to enhance stability of the aircraft,
Maintain the attitude of the aircraft and maintain the function of the specific flight condition.
So as to lifting, and so as to achieve a higher flying property and maneuverability. The output data is ACC through the data bus 18 by the processing of the advanced control law by the FCC 16.
14 is instructed. FCC16 is specified
ACC because it is not essential for flight other than flight status
It is configured as a redundant system having a lower multiplicity than the multiplicity of 14.

In the configuration of the FBW system shown in FIG.
The on-board computer consisting of FCC16 and ACC14
The real-time processing is executed by software as shown in FIG.

FIG. 7 is an explanatory diagram showing software in the FBW system. FIG. 7A shows the FCC 16 software, and FIG. 7B shows the ACC 14 software.

In FIGS. 7 (a) and 7 (b),
The contents and order of processing in a software processing frame by a real-time clock interrupt are shown, and the structures and processing contents of each software are very similar. However, while the ACC 14 has only the simple control rules (shown by A in FIG. 7 (b)) necessary for the operation of the aircraft, the FCC 16 has the advantage of the FBW system, that is, the freedom of maneuverability design. The greatest difference is that it has a high-grade control law (indicated by F in FIG. 7A) that takes advantage of the high degree of control and actively improves the maneuverability.

As described above, the control rule A has an electric link function for driving the actuator 12 only by the data signal from the side stick 10. The FCC 16 is input from the dedicated multiplex sensor 20 for the control law F processing as described above. Generally, the processing of the control law F requires processing with a larger load than the processing of the control law A.

In FIG. 7A and FIG. 7B, the redundancy management process is a multiplex system management process mainly for sensor signal selection and fault detection.

[0014] The side stick 1 is also used in the FCC16.
The data signal from the flight essential sensor 10a such as 0 is always used because it is basic data for flight control. As described above, the contents of the redundancy management processing of the FCC 16 and the ACC 14 are very similar.

In a digital system such as an FBW system, a random fault (a single hardware fault that occurs at random) similar to that of a conventional electric device and the like, as well as a generic fault (a software error or a CP error).
Failure caused by an error caused by the U design).

Since the FBW system shown in FIG. 6 is a multiplex system, a random failure can be dealt with by maintaining the function of the remaining system. On the other hand, a generic fault is a fault that can occur simultaneously in a multi-system, such as a multi-system. This is one of the failures to consider.

In the above system, the FCC 16
And the ACC 14 are independent computers, and the FCC 16 cannot back up the ACC 14. Even if all the FCCs 16 are operating normally, if the ACC 14 goes down in all channels due to a generic fault, the whole system described above May not be able to continue operation. Thus, in the practical FBW system, various backup systems for coping with the above-described failure are considered.

[0018]

SUMMARY OF THE INVENTION In view of the above problems, the present invention provides a system reconfiguration function that can deal not only with random failures but also with the occurrence of generic faults and has high reliability. It is an object of the present invention to provide a digital flight control system capable of performing flight control.

[0019]

The present invention SUMMARY OF THE INVENTION In order to achieve the above object, an advanced flight and steering and <br/> flight essential functional portion to execute the required functions, such as steering the airplane
A flight control system including an integrated flight control device integrated with a flight phase essential function unit that performs a vertically essential function , wherein the integrated flight control device is provided.
The main unit corresponding to the flight essential function
CPU, flight phase essential function section
The flight phase essential function unit has a backup function of the flight essential function unit, and the main CPU
And to maintain the flight control function in the event of a generic fault of the sub CPU and software,
The present invention is characterized in that a system reconfiguration of the flight control system is executed.

[0020]

In the integrated flight control device (integrated FCC) of ACC and FCC, each CPU and input / output function unit (I / O channel) are connected to a common bus (back plane bus). And data exchange is performed. FCC
And ACC software are also integrated, and the integrated FCC
In the sub CPU, the control law A is always processed. As a result, when the ACC, which is the main CPU, goes down, the sub CPU immediately changes to the main CPU to perform a backup operation and execute the system reconfiguration, so that the flight control function can be maintained and the safety can be maintained. Operation is performed.

In this manner, the entire FBW system can be made compact, and the above-mentioned FBW system having a backup function of the flight essential function even for a generic fault can be obtained.

[0022]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below with reference to FIGS. Note that the same parts as those in the conventional example shown in FIGS.

[0023] In FIG. 1, integrated FCC50 the main CPU 52, the sub CPU 54, I / O unit 56 and
Integrated by a common bus, such as the backplane 58 ,
It is composed. The portion indicated by the chain line shows the correspondence with the conventional example. That is, the main CPU 52
C14, the sub CPU 54 and the FCC 16
The / O unit 56 corresponds to the I / O of the ACC 14 and the FCC 16 respectively. Further, the main CPU 52 and the
Data exchange between the CPU 54 and the I / O unit 56
Is performed.

FIG. 2A shows the sub CPU 5.
FIG. 2B shows software of the main CPU 52. In FIG. 2A, the software of the sub CPU 54 has the control rule A added to the software of the conventional FCC 16 shown in FIG. 7A, and the processing increases accordingly. In FIG. 2B,
The software of the main CPU 52 is almost the same as the software of the conventional ACC 14 shown in FIG.

Since the sensor data for executing the control rule A is only the data from the flight essential sensor 10a, it is included in the data obtained from the redundant management processing of the software of the conventional FCC 16. . The process of the control rule A is always executed as in the process of the control rule F.

In FIG. 2, the other processing indicates the output of maintenance data and the like.
Since the two units are integrated with the PUs 52 and 54, these processes are also performed in common, and most of these processes can be performed by the main CPU 52. Therefore, the processes of this portion of the sub CPU 54 are reduced. Can be executed.

By the processing described above, the software of the sub CPU 54 as a whole is
Significantly large scale compared to other software is avoided. Then, in the integrated FCC 50, when the main CPU 52 cannot continue the operation due to the failure, the sub CPU 54 performs the arithmetic processing of the control law A in place of the main CPU 52 to realize the backup function,
The processing result is output to the I / O unit 56, and the maintenance of the flight essential function can be achieved. Since the arithmetic processing of the control law A is always performed, the transient operation at the time of the backup switching can be suppressed to a small value.

FIG. 3 is a diagram showing an F using an integrated FCC.
1 shows a system diagram of a BW system. FIG. 3 shows an embodiment in which the FBW system is configured by a triple redundant system, and the integrated FCC 50 corresponds to the one shown in FIG.

FIG. 4 is an explanatory diagram showing the operation of the FBW system shown in FIG. 3 when a failure occurs, and is described in comparison with the operation of the conventional example. In the same figure, the ones indicated by crosses indicate computers for processing the flight essential function, and the ones indicated by X indicate computers in which a failure has occurred.

FIG. 4A shows the operation of the normally operating FBW system. 1 and 2, it is preferable that the main CPU 52 and the sub CPU 54 of the integrated FCC 50 be constructed using different types of CPUs, and by using the different type CPUs, the main CPU 52 and the sub CPU 54 are simultaneously down due to a generic fault. You are avoiding that. Examples of the heterogeneous CPU include a Motorola CPU and an Intel CPU.

FIG. 4B shows the operation of the FBW system when a random failure occurs in any one computer. In the conventional example, if one of the ACCs 14 and one of the main CPUs 52 of the integrated FCC 50 in the present invention have a random failure, the remaining normal computer is used for any system. The operation is continued with the backup function as described above.

FIG. 4 (3) shows the operation of the FBW system in the case where a multiplex system fault occurs due to a generic fault. In the conventional example, the multiplex ACC14
If the simultaneous failure occurs, the operation of the system cannot be continued, which may be dangerous.

According to the present invention, when a simultaneous failure occurs in all the channels of the main CPU 52, the backup switching to the sub CPU 54 is executed, and the flight essential function of the whole system is maintained to perform the flight control.

[0034]

As described above, according to the present invention, the hardware and software of the flight essential function unit and the flight phase essential function unit of the flight control system are integrated to form the flight phase essential function unit. Has a backup function of the flight essential function unit, so that the flight control function can be maintained by the above system reconfiguration in the event of a random failure of the control computer and software or a generic fault, and the reliability and fault tolerance of the flight control system Can be improved.

[Brief description of the drawings]

FIG. 1 is a configuration diagram showing one embodiment of the present invention.

FIG. 2 is an explanatory diagram of software in the present invention.

FIG. 3 is a system diagram of an FBW system using the present invention.

FIG. 4 is an explanatory diagram showing an operation of the FBW system when a failure occurs.

FIG. 5 is a configuration diagram showing a conventional flight control system.

FIG. 6 is a configuration diagram showing an example of a conventional FBW system.

FIG. 7 is an explanatory diagram showing software in a conventional FBW system.

[Explanation of symbols]

 14 Flight essential function section 16 Flight phase essential function section 50 Integrated flight control device

──────────────────────────────────────────────────続 き Continued on front page (58) Field surveyed (Int.Cl. ⁷ , DB name) B64C 13/00

Claims (1)

(57) [Claims] 1. A flight essential function unit (14) for executing essential functions such as steering of an aircraft and a flight phase essential function unit (16) for executing functions essential for advanced flight and maneuvering. A flight control system including an integrated flight control device (50) , wherein the integrated flight control device (50) is a flight control system.
Main CPU corresponding to the essential function unit (14)
(52) Flight phase essential function section
It consists of a sub CPU (54) corresponding to (16) ,
The flight phase essential function unit (16) has a backup function of the flight essential function unit (14) , and the main CPU (52) and the sub CPU (54) and software
A digital flight control system for executing a system reconfiguration of the flight control system in order to maintain a flight control function when a fault occurs.