JPS62230132A - Dual control system - Google Patents

Abstract

PURPOSE:To prevent the reduction in the reliability based on improper contact by adopting multi-point contacts for an operation switch of a master equipment, applying AND operation to outputs of the contacts, supplying the result to a redundancy transmissioin system and detecting improper contact. CONSTITUTION:The operation switch of the master equipment consists of three make contacts PB1-1 PB1-3, contacts outputs are subjected to logical operation by a logical operation circuit 50 and the result is outputted respectively to a duplicated light pattern control system comprising systems A,B. The circuit 50 outputs the outputs of the contacts PB1-1,1-2 to said systems via OR circuits 51,52 when the contacts PB1-l,l-2 are normal and so long as the contact PB1-3 is not short-circuited. When the contact PB1-3 is normal, so long as the contacts l-l,l-2 are not short-circuited, the output of the contact 1-3 is sent to said systems. When NAND circuits 56,57 detect the fault of the contacts PB1-l,1-2, its output signal is sent to said systems.

Description

[Detailed Description of the Invention] [Field of Industrial Application] The present invention relates to a dual control system, that is, a remote control system in which the transmission system is duplicated to improve reliability and redundancy, and in particular, to a remote control system that improves reliability and redundancy by duplicating the transmission system. It has multiple contacts, and the outputs of these contacts are logically operated and supplied to two transmission systems.
The present invention also relates to a dual control system that is roughly redundant by detecting contact failure.

[Prior Art] Various lights are installed at airports to ensure the safety of aircraft takeoff and landing. Approach taxiway lights (APCH) that indicate the approach path to the runway during landing, runway lights (RWL) placed on both sides of the runway to indicate the position of the runway, and whether the approach angle to the runway is appropriate or too high. These include the Approach Angle Indicator Light (VASIS), which indicates whether the aircraft is too low, the Runway Center Line Light (RWCL), which indicates the center line of the runway, and the Landing Landing Zone Light (TDZ), which indicates the landing zone. These lights are grouped by type and connected to a dedicated power control device, and are remotely controlled by operating switches on a control desk located in the control tower.

For example, the power control device may include or be located adjacent to a light pattern control device, and the control desk may transmit data to and from the light pattern control device. In other words, when the background brightness (daytime, twilight, and nighttime), visibility conditions, and cloud base height, or brightness increase or decrease commands for each light group are input through switch operations, the control desk converts the switch operation information into control signals. It is sent to the lighting pattern control device as The light pattern control device selects a light pattern according to this control data (switch operation status), controls the power control device, and sends data such as the control status of the power control device, such as the current value supplied to the light, to the control desk as monitoring data. Send. The control desk uses this monitoring data to display the brightness and operating status of each light group. In addition, the transmission system performs self-diagnosis by checking the transmitted and received signals, and if an abnormality occurs in the transmission system, an alarm is displayed on the control desk or light pattern control device.

[Problems to be Solved by the Invention] Incidentally, such a dual control system has generally not been duplicated in the past, although it is greatly involved in the safety of aircraft operation. Also,
In some cases, duplex systems have been implemented, but switching to the standby system when the system goes down is done manually, which has the disadvantage that it takes time to switch, that is, to return to normal.

In order to solve the above problem, the present inventors have made the control system from the switch contact of the control desk to the light pattern control device via the transmission system 2@, and the output of the light pattern control device of both control systems. In addition, if there is a discrepancy between the two outputs, the abnormality can be identified by comparing the inputs of both lighting pattern control devices, checking the model input/output using the comparison control device, and referring to the self-diagnosis signal of the transmission system. After analyzing this, we devised an airport lighting control system in which if the control system was on the active side, it would be replaced with the standby side control system.

This system can automatically detect when a system goes down and automatically switch to a normal system, so the time it takes for a system to return to normal from a system down time is within the time stipulated by the International Convention on Civil Aviation (ICAO). Category n
(CAT II, a lighting condition that allows operation even under visibility conditions of 800 m or less), the switching time of 1 second or less can be satisfied.

The present invention further increases the redundancy of the system described above.

[Means and effects for solving the problem] In order to achieve the above object, the present invention provides operation switch contacts of the main device in a remote control system with dual transmission systems, in addition to one corresponding to each transmission system. 1 or 2 are attached, and in each transmission system, a logical sum signal is input between the contact assigned by duplication and one of the attached contacts, and the operation of the operation switch is detected by the logical sum of all contacts. However, failure of each contact is detected by the output of each contact during this operation.

[Effects of the Invention] According to the present invention having the above configuration, in this main system,
The operating switch contacts, which are one of the few mechanical parts and have a weak point, are tripled or quadrupled, which greatly improves the reliability (redundancy) of the system as a whole.

[Example] Hereinafter, the present invention will be explained in detail using the drawings.

FIG. 2 shows a block configuration of an airport lighting control system using dual control that was previously devised by the present inventors. In the figure, 1 is a remote control desk with two momentary a contacts PB1 (PB 1-1.PB
1-2> and a transmission device master station 2 that transmits the state of each contact as control data.
(2-1, 2-2>.3 (3-1, 3-
2) is a transmission device slave station, 4 (4-1゜4-2.4-3) is a lighting pattern control device, 5 is a changeover switch, 6 is a power control device, 7 is an input side changeover switch, 8 is a monitoring module , 9 are comparators. Furthermore, a solid line with an arrow indicates the flow of a control signal, and a dotted line with an arrow indicates the flow of a monitor signal.

This device doubles the transmission system from the operation switch contact PB1 to the transmission system of the transmission device master station 2 and transmission device slave station 3, and the light pattern control device 4 to make the system redundant and improve reliability. There is. In the following,
A control system constituted by members indicated by the symbols with a suffix of -1 is referred to as an A system, and a side with a suffix of -2 is referred to as a B system. Light pattern control device 4-3
is used as a comparison control device for generating verification signals, and is operated in parallel with the lighting pattern control device 4-1, 4-2, thereby making the input and output conditions the same.

The transmission device master station 2, the transmission device slave station 3, and the lighting pattern control device 4 are each equipped with a central processing unit (CPU) such as a microprocessor, and operate under the control of the CPLI.

The power control device 6 is one of a plurality of isolation transformers (not shown).
The secondary windings are connected in series, and the lamps (airport lights) connected to the secondary side of each isolation transformer are lit by a phase-controlled constant current output.

The reason why lamps are lit in series is that if these lamps are runway lights, for example, they are usually distributed at both ends of a runway of 2 to several krn, and when they are lit in parallel, the brightness of each lamp varies due to the resistance of the wiring. This is to prevent this from occurring.

The monitoring module 8 includes a first combiner that compares the output of the lighting pattern control device 4-1 and the output of the lighting pattern control device 4-2;
A flip-flop circuit that is set by the mismatch signal generated from the comparator, and a lighting pattern control device 4.
- second and third comparators that respectively compare the outputs of 1 and 4-2 with the output of the comparative lighting pattern control device 4-3, and mismatch between the output of the flip-flop circuit and the second and third comparators, respectively; First and second AND circuits that output the logical product with the signal; the output of the first AND circuit switches the switch 5 from the A system side to the B system side; and the output of the second AND circuit switches the changeover switch 5 from the A system side to the B system side. It is equipped with a switching control circuit and the like for switching the switch 5 from the B system side to the A system side.

Next, the operation of this airport lighting control system will be explained. Assume that system A is now in the active (main) state and system B is in the standby state.

During normal operation, the A system operates in exactly the same manner as in the conventional example.

The comparator 9 constantly compares the input of the lighting pattern control device 4-1 and the input of the lighting pattern control device 4-2, and generates an H level match or mismatch signal depending on the comparison result.

The AND circuit 10 supplies the same input as the A-system lighting pattern control device 4-1 to the comparison lighting pattern control device 4-3 while the matching signal is generated from the comparator 9.

The monitoring module 8 constantly compares and monitors the output of each control system, that is, the output of the lighting pattern control device 4-1 and the output of the lighting pattern control device 4-2. These outputs match if both control systems are normal.

When an abnormality occurs, the lighting pattern control devices 4-1 and 4-2
There will be a shift in the output. When the monitoring module 8 detects this difference between the outputs, it controls the lighting pattern control device a4-1 under the condition that the comparator 9 outputs a matching signal.
The output of the comparison light pattern control device 4-3 is compared with the output of the comparison light pattern control device 4-3. If these outputs do not match, it is determined that an abnormality has occurred in the lighting pattern control device 4-1,
Change the switch 5 to control the power control@station 6 in the B system.

On the other hand, the monitoring module 8 is connected to the lighting pattern control device 4-1.
If the comparator 9 generates a mismatch signal when detecting a discrepancy between the outputs of M4-1 and M4-2, this indicates an abnormality in the lighting pattern control device M4-1 or 4-2. Each transmission device 2 has a self-diagnosis function of the transmission status by comparing the control signal with the reply signal or the monitoring signal, or by checking the parity of each signal, similar to the conventional one. generate a signal representing the Of these signals, those related to the A system are input to the OR circuit 11 via the B system transmission devices 2-2 and 3-2. The output of the AND circuit 12 becomes H due to the mismatch signal being output from the comparator 9 and the occurrence of this A optical transmission abnormal signal.
level. This H level signal moves the selector switch 5 to B.
Used to switch to the prefecture side.

FIG. 1 shows the configuration of essential parts of a dual control system according to an embodiment of the present invention. The device shown in the figure differs from the device shown in FIG.
31-3 (momentary triple switch)
and three contacts P B 1-1 to P B 1
A logic circuit 50 is added for supplying redundant contact output to the transmission master station 2-1, 2-2 and detecting a faulty contact by performing logical operations on the output of -3.

In FIG. 1, when the contacts PB1-1 and PB1-2 are normal, the output of the contact PB1-1 is transmitted to the transmission master station 2 via the OR circuit 51 unless the contact P81-3 is short-circuited. -1, and the output of contact Pa1-2 is OR circuit 52
It is transmitted to the transmission master station 2-2 via.

In addition, if contact PBI-3 is normal, contact PB1-1
, unless PBl-2 is short-circuited, the transmission master station 2-
1. The output of the contact PSI-3 is transmitted to the transmission master station 2-2.

By configuring in this way, the contact points P B 1-1~
Unless there is a short circuit abnormality in any of PB1-3, PB1-1
6 and PBI-2, or contact P81-3, the system operates normally.

Therefore, in switch contacts for small signals, contact failures account for the majority, short circuit failures are extremely rare, and the average failure interval of logic circuits is 1 to 2 times higher than that of switch contacts.
Considering the fact that the length is longer, it is clear that the system shown in FIG. 1 has further improved redundancy than the system shown in FIG.

In FIG. 1, the OR circuit 53 has all contacts P B 1-1
- It is detected that the operation switch Pa has been operated by the output of pB1-3. The delay circuit 54 and the AND circuit 55 cut off the output of the circuit 54 within the delay time to prevent the chattering output of the contacts PB1-1 to PB1-3 from being transmitted to the subsequent stage at the initial stage of operation of the operation switch. , thereby preventing malfunction of the failure detection circuits 56 and 57.

The NAND circuit 56 constitutes a failure detection circuit for the contact P B 1-1. That is, this circuit 56 has contact P
The AND output of the output of B 1-1, the output of contact P B 1-3, and the operation switch open detection output from the AND circuit 55 is inverted, and when the operation switch is closed, contact P B
When at least one of contact point PB1-1 and contact PB1-3 has a poor contact, the level is H, and otherwise the level is L. This H-level failure detection signal is transmitted to a failure display circuit (not shown), and a failure of the contact PB1-1 is displayed. In addition, in this NAND circuit 56, the contact P j31-3
It also outputs a failure signal when there is a poor contact at contact PB.
If 1-3 has a poor contact, the output of the NAND circuit 51 will also be H.
The reason why the outputs of both NAND circuits 56 and 57 are at H level is because contact PBI-3 has a poor contact, or both contact P B 11 and contact PB1-2 have poor contact at the same time. However, when the contact point P B
Since the probability that both contact point PB1-1 and contact point PB1-2 will have poor contact at the same time is extremely low, contact point PB1-1 and contact point P
It is possible to determine with high accuracy which one of B1-3 has a poor contact.

Similarly, the NAND circuit 51 also constitutes a failure detection circuit for the contact PBI-2.

Note that the present invention is not limited to the above-described embodiments, and can be implemented with appropriate modifications. For example, it is also possible to replace the logic operation circuit 50 with program processing using a CPU. If the transmission master station 2 is CPLI controlled, the above program can be executed by either or both of the transmission master stations 2.

Furthermore, in the above description, the reliability is greatly improved if the number of contacts of the operating switch PB is increased from three.

In this case, all of the increased contacts may be connected in parallel and used as one contact P B 1-3, or the number of inputs of the OR circuit 51, 52 may be increased and each increased contact may be connected to each input. You may also do so. Each contact may be connected to both OR circuits 51 and 52, such as contact PB 1-3, and contact PB 1-1 or PB 1-2.
It is also possible to connect only to one side, as in

[Brief explanation of drawings]

FIG. 1 is a block diagram of main parts of a dual control system according to an embodiment of the present invention, and FIG. 2 is a schematic block diagram of an airport lighting system previously devised by the present inventors. 1: Control desk, PB: Operation switch, Pa1
-1, FBI-2, PBL-3: Contact, 2 (2-
1, 2-2): Transmission equipment master station, 3 (3-1, 3-2)
): Transmission device slave station, 4 (4-1, 4-2): Light pattern control device, 4-3: (for reference) Light pattern control device, 5.7: Changeover switch, 6: Power control device, 8
: Monitoring module, 50: Logical operation circuit, 51, 52.
53: OR circuit, 56.57: NAND circuit.

Claims (1)

[Claims] 1. In a dual control system in which the a-contact of the operation switch of the main device for remote control and the transmission system are duplexed, the first and second a-contact for duplication are further provided with a second a-contact. One or two A contacts including No. 3 A contacts are attached, and the logical sum of the output of the first contact and the output of the third contact is
The logical sum of the first OR circuit that supplies the duplicated first transmission system, the output of the second contact, and the output of the fourth contact is
a second OR circuit that supplies the redundant second transmission system; a detection circuit that detects the closing operation of the operation switch from the logical sum of the outputs of all the contacts; and the output of the first contact; a first NAND circuit that detects a defect in the first or third contact from the output of the third contact and the output of the detection circuit; the output of the second contact, the output of the fourth contact and the detection circuit; A second circuit that detects a failure of the second or fourth contact from the output of
A dual control system featuring a NAND circuit. 2. The dual control system according to claim 1, wherein the attached A contact is one, and the third contact also serves as a fourth contact.