RU208237U1 - Analog-to-digital aircraft flight control computer - Google Patents

Abstract

The utility model relates to the field of aviation instrumentation and can be used in fail-safe automatic control systems for aircraft (LA), for example, helicopters and general-purpose civil and military aircraft, acting as a central flight mode computer. EFFECT: aggregation of information-signals of various etymologies, both analog and digital, from external information systems, and the possibility of bitwise comparison of the calculation results of each of the computing processors. The technical result is achieved by an analog-to-digital aircraft flight control computer containing a two-channel computing module (MC), a serial exchange module (SME) that performs the function of receiving and issuing digital interface signals, equipped with a computer processor, an analog interface module (MAI) that performs the function of receiving and issuance of analog signals, equipped with a computing processor. The MB module contains two computing processors and performs the function of a central computing core. The processors of the MV, MPO and MAI modules are united by a synchronous serial interface, and each of the MPO and MAI modules form two independent heterogeneous channels for the receipt of information from their processors to each of the MV processors necessary to control the flight of the aircraft. 1 ill.

Description

The utility model relates to the field of aviation instrumentation and can be used in fail-safe automatic control systems for aircraft (AC), for example, helicopters and general-purpose civil and military aircraft, performing the function of a central computer for flight modes.

Known computer hardware flight control system of an unmanned aircraft, containing a minimum DSP system module and an analog signal processing module, an input / output digital signal module, a D / A output module and a serial communication module electrically connected to the minimum DSP system module; the hardware system also contains an air pressure altitude module, a restricted access guidance and attitude control module, and an extended ferroelectric memory module electrically connected to the serial communication module. The minimum system DSP module is powered by the TPS767D301 dual power IC. The hardware flight control system of the unmanned aircraft uses DSP as the processing core. The flight control computer is small and has extensive autonomous navigation capabilities and can be easily installed in the cockpit of an unmanned aircraft. The computer flight control system of an unmanned aircraft is lightweight, it can reduce the total weight of an unmanned aircraft, thereby improving the load on the task (see patent for invention No. CN107561957, IPC G 05B 19/042, publ. 09.01.2018).

The main disadvantage of the system is its insufficient reliability, which, in turn, reduces the flight safety of the aircraft. This is due to the lack of control over the correctness of the control signal issued at the output and the possibility of issuing a deliberately incorrect control signal, as well as the lack of protection against uncontrolled failure, i.e. such type of failures, the fact of occurrence and the cause of occurrence of which are not determined by control systems. A particular case of this type of failure is the impossibility of promptly establishing the source of such a signal if an incorrect signal is issued, namely, before entering the flight control hardware system or in it itself, which also negatively affects the maintainability of the system and complicates such work.

Also known is a flight control system of an aircraft having a matching device equipped with a controller containing analog and digital modules for receiving and issuing signals. The input part of the matching device interacts with the output part of the autopilot system, and the output part of the matching device interacts with the input part of the autopilot system. The controller contains conversion blocks for converting a different setpoint format, i.e. a digital setpoint, to the old format of another setpoint, i.e. analog setpoint (see patent for invention No. FR2939214, IPC G 05D 1/10, publ. 04.06.2010).

The well-known aircraft flight control system also lacks a mechanism for proper control over the correctness of the output signal and the correct processing of incoming signals from aircraft systems. This negatively affects the overall reliability of the flight control system and reduces the flight safety of the aircraft. In addition, it also results in a lack of protection against uncontrolled failure, reducing the functionality of the flight control system.

The closest in technical essence to the proposed utility model is a well-known autopilot for a training aircraft, containing a control computer connected by the first information exchange channel to the servos of the elevator, aileron, rudder and elevator trim tab, and the second information exchange channel to one or two multifunctional indicators, a set of equipment for short-range navigation and landing VOR / ILS / marker receiver / automatic radio compass and a radio altimeter interacting with the autopilot of the equipment of the avionics complex, while the control computer is two-channel and contains two simultaneously operating and duplicating computing modules with autonomous secondary modules power supply connected to the aircraft DC power supply system from two aircraft, each of the computing modules is connected to the other computing module by an internal data exchange channel via the RS-422 interface and with a servo elevator drives, aileron, rudder and elevator trimmer via two CAN interfaces (ARINC 825) and one-time commands of the first communication channel, as well as with flight and navigation information sensors and multifunctional indicators of the avionics complex via ARINC 429 code communication lines and one-time commands the second communication channel, and the electromagnetic clutches of all servos are powered from the DC mains through the switch on the aircraft control wheel (see. RF patent for useful model No. 191643, IPC B 64C 13/16, G05D 1/00, publ. 08/14/2019).

The known autopilot for a trainer aircraft is designed as two-channel and, to increase reliability, contains two simultaneously operating and duplicating computing modules with autonomous secondary power supply modules, each of which continues to operate in the normal mode if the first fails. To generate the output signal, the arithmetic mean values are used, which are calculated from the calculations of each of the computational module. In this case, in the event of failure of one of them, only the calculation results of this working module are used as a calculated indicator. At the same time, the computing system of the known autopilot does not provide the ability to check the correctness of the output computation of each of the computational modules, which leads to the incorrectness of both the arithmetic mean value with both computational modules working, and in the calculated indicators of one remaining computational module in case of failure of the other. ... Also, the computing system of the known autopilot does not provide protection against uncontrolled failure, can allow significant movement of the aircraft control elements by incorrect signals, and does not provide the possibility of physically disconnecting the control line of the aircraft actuators. These circumstances reduce the reliability of the known autopilot and narrow its functionality.

The problem to be solved by the present utility model is to increase the reliability of the flight control computer of the aircraft and expand its functionality by providing protection against uncontrolled failure and improving the maintainability of the onboard flight control system as a whole.

The technical result achieved when solving the problem is the integration of information-signals of various etymologies, both analog and digital, from external information systems, and the possibility of a bit-by-bit comparison of the results of calculations of each of the computational processors.

The specified technical result is achieved by the fact that in the analog-to-digital aircraft flight control computer, containing a two-channel computing module (MB), according to the utility model, a serial exchange module (MPO) is introduced, which performs the function of receiving and issuing digital interface signals, equipped with a computing processor, an analog interface module (MAI), which performs the function of receiving and issuing analog signals, equipped with a computing processor, while the MB module contains two computing processors and performs the function of a central computing core, and the processors of the MB, MPO and MAI modules are united by a synchronous serial interface, and each of The MPO and MAI modules form two independent heterogeneous channels for the receipt of information from their processors into each of the MB processors necessary for flight control of the aircraft.

The symmetric architecture, built around the core - processors of the MB computational module, implements the principles of a self-controlled processor pair.

The term "self-monitoring processor pair" is understood as a set of two processors performing the same applied task, with the possibility of comparing the calculation results of each of the processors.

In this case, the I / O resources are located on two modules - MPO and MAI, which are accessed via a synchronous serial interface by both MV processors as processors of a self-controlled pair.

In the process of processing and transmitting a signal between the serial exchange module (MPO), which performs the function of receiving and issuing digital interface signals, the analog interface module (MAI), which performs the function of receiving and issuing analog signals, and the computing module, the information-signals are combined (combined) of various etymologies, both analog and digital, after their corresponding mathematical processing (bringing to a single form) by the processor of the corresponding module, which is responsible for processing such a signal - the serial exchange module (MPO), which is responsible for processing the digital signal, or the analog interface module (MAI) responsible for processing an analog signal.

This integration is necessary because signals from external onboard information systems, such as basic flight data sensors, require validation. Comparison of signals from systems that measure various physical parameters and are based on different physical principles of operation, while generating both analog and digital output signals, with reduction to a general view and subsequent processing, will avoid the use of unreliable information in calculations and, accordingly, avoid uncontrolled failure.

A developed system of built-in control allows you to control your own serviceability, bit by bit, i.e. information packets of the minimum size, comparing the results of calculations of the MB processors, the serviceability of the data acquisition channels, also bit by bit comparing the values of the input signals, both analog and digital, to the MB processors, as well as to judge the serviceability of external information sources, which significantly increases the reliability and responsiveness to the emerging incorrect signals of on-board systems and systems of the architecture of the flight control computer and reduces the likelihood of an uncontrolled failure.

At the same time, if an error is detected in the output signal, the proposed design of the analog-to-digital aircraft flight control computer allows to exclude the computer itself or to confirm the presence of an error in it, which simplifies the restoration of the control system as a whole, to exclude potentially unnecessary operations for mounting / dismounting of composite components. system blocks and increases the maintainability of the aircraft flight control system as a whole.

The utility model is illustrated in the drawing, which shows a block diagram of the internal structure of the calculator. Positions in the drawing denote the following: 1 - computing module (MB); 2 - analog interface module (MAI); 3 - serial exchange module (MPO); 4 - computing processor of module 2 MAI; 5 - computing processor of module 3 of the MPO; 6 and 7 - computing processors of the 1 MB module; 8 - serial synchronous interface.

The analog-to-digital aircraft flight control computer contains a two-channel computing module 1 (MV), an analog interface module 2 (MAI), which performs the function of receiving and issuing analog signals, and a serial exchange module 3 (MPO), which performs the function of receiving and issuing digital interface signals. Each of modules 2 and 3 is equipped with a computing processor: module 2 of the MAI is equipped with a computing processor 4, and module 3 of the MPO is equipped with a computing processor 5.

Module 1 MB contains two computing processors 6 and 7 and performs the function of a central computing core.

Processors 4-7 modules 1-3 MV, MAI and MPO are united by a synchronous serial interface 8.

Each of the modules 2 MAI and 3 MPO form two independent etymologically dissimilar (analog or digital) channels of information flow from their processors 4 and 5 to each of the processors 6 and 7 of the 1 MB module, which is necessary for flight control of the aircraft.

A feature of the proposed flight control computer is its architecture, built around the core - computing module 1, which implements the principles of a self-controlled processor pair. With this structure, both processors 6 and 7 perform the same application task, comparing the results of calculations. I / O resources - computing processors 4 and 5 - are located respectively on two peripheral modules 2 MAI and 3 MPO, access to which both processors 6 and 7 of module 1 MV of a self-monitoring pair have via synchronous serial interface 8. One of the peripheral modules 2 MAI is designed for receiving and issuing analog signals. The second peripheral module 3 MPO is designed to receive and output digital interface signals (ARINC 429, MIL-STD-1553). All signals generated by modules 2 and 3 are received by the echo-control of the unit, which is a reverse reception of a signal by module 2 MAI and module 3 MPO, similar to that issued by these modules at the output, comparing it with the reference (target) signal. Thus, information redundancy is achieved, in which the amount of analyzed information exceeds the degree of its uncertainty, which makes it possible to increase the controllability of the unit, as well as the depth of the search for its own failures and part of the failures of the interfaced aircraft systems.

Analog-to-digital aircraft flight control computer operates as follows.

The analog-to-digital aircraft flight control computer receives information about the pilot / operator's requests to turn on / off the automatic control modes generated by the control panel. Having made the necessary calculations, the control computer generates control signals that set the position of the steering gears of the autopilot. For a specific type of aircraft, the use of a computer as part of the automatic control system of this aircraft is ensured by the coordination of protocols of information interaction with the on-board systems of the aircraft and the development of specialized software for loading into the flight control computer of the aircraft, which, together with the computer equipment, implements automatic control functions for this aircraft.

The analog-digital aircraft flight control computer receives information from the aircraft onboard systems / sensors about the angular position, speed, altitude parameters of the aircraft. At the same time, signals from different on-board systems have different etymologies: a number of on-board systems provide an analog signal, others - a digital signal.

In this case, the same indicators, for example, speed and acceleration, come in the form of both analog and digital signals from different systems. These signals are processed mathematically, respectively, by the processor 4 of the module 2 MAI and the processor 5 of the module 3 MPO and are transmitted to the computing processors 6 and 7 of the module 1 MB.

The analog-digital aircraft flight control computer is designed in such a way as to exclude the influence of failures and / or malfunctions on flight safety. For this purpose, the analog-to-digital aircraft flight control computer incorporates the principle of information redundancy in terms of interaction with on-board systems and in the computing part.

Information redundancy is understood as the excess of the volume of factual information over the information uncertainty of the system.

The analog-to-digital aircraft flight control computer consists of three functional modules:

a computing module 1 (MB) based on a self-controlled processor pair - a processor 6 and 7, performing the functions of a central computing core;

an analog interface module 2 (MAI) containing a processor 4 of an external analog interface;

module 3 of the serial exchange (MPO), containing the processor 5 of the external serial interface (receivers and transmitters ARINC429 and the terminator of the redundant multiplexed channel MIL-STD-1553).

All modules include secondary power supplies operating from the aircraft power supply system with a voltage of +27 V. Processors 4-7 modules 1 MV, 2 MAI and 3 MPO are united by a synchronous serial interface 8. One of the processors of the module acts as a regulator of the aircraft flight control computer 1 MB, for example, a processor 6, which generates a clock signal and synchronization signals for receiving and sending information to / from other processors 4 and 5, which are subscribers.

Processors 6 and 7 of the 1 MB module receive the same, bit by bit, information from processors 4 and 5 of the MAI module 2 and the MPO module 3, compare it, solve the same applied problem, exchange the results of calculations (including intermediate ones). One of the processors of the 1 MB module, for example, processor 7, is a controlling one, receiving information not only from processors 4 and 5, but also information from another processor of the 1 MB module - the regulating processor 6, which it sends to processors 4 and 5 for comparison with own calculations.

Based on this, the processors 6 and 7 can make a conclusion about the reliability of the information issued by the processor 6 to the modules 2 MAI and 3 MPO. In case of a single discrepancy in the results when receiving information, calculating and issuing information to modules 2 of the MAI and 3 of the MPO, the data obtained in the previous cycle of the solution are used. If the results differ within a certain number of decision cycles, each of the processors 6 and 7 of the 1 MB module has the ability to generate a signal "Failure" of the aircraft flight control calculator unit, which will lead to the termination of the issuance of automatic control signals and signaling to the pilot about the disconnection of automatic control and the need to accept manual aircraft control.

The use of the utility model provides the ability to quickly identify and localize the resulting failure / malfunction, preventing significant movement of the autopilot steering gears on incorrect signals, and also significantly reduce the likelihood of an uncontrolled failure, i.e. in fact, to detect the incorrectness of the information issued by the on-board aircraft systems that continue to visually operate normally. This is achieved by ensuring complete identity of the information coming from the onboard systems to both processors 6 and 7 of the computing module, and synchronous calculation of automatic control signals. If an abnormal situation is detected by means of built-in control, all output signals of the calculator are transferred to the "Break" state with the issuance of a failure signal to the external interfaced systems.

At the same time, by comparing the signals at the output from the 1 MV module with the reference - "target" - values, it is possible to potentially establish the incorrect operation of the systems of the aircraft flight control computer itself or to confirm its operability, which will simplify and speed up, in the end, the restoration of the system operability, excluding both unnecessary repair of the aircraft flight control computer itself.

At the same time, information redundancy and duplication of input information for analysis to increase the reliability of control is provided not by hardware redundancy (an increase in the number of peripheral modules), but by the integration (combination) of information from sensors with different interfaces (analog and digital) obtained through the above-described peripheral modules 2 MAI and 3 IGOs and, if necessary, further reformed. In addition to hardware redundancy in the computing part, this principle allows you to monitor the operability of data acquisition channels, aircraft flight control computer modules, as well as potentially judge the operability of external information sources, thereby increasing fail safety.

Claims (1)

An analog-to-digital aircraft flight control computer, containing a two-channel computing module, characterized in that a serial exchange module is inserted into it, which performs the function of receiving and issuing digital interface signals, equipped with a computing processor, an analog interface module performing the function of receiving and issuing analog signals, equipped with a computing processor, while the two-channel computing module contains two computing processors and performs the function of a central computing core, and the processors of the modules are a two-channel computing module, a serial exchange module and an analog interface module are united by a synchronous serial interface, and each of the modules is a serial exchange module and a module analog interface form two independent heterogeneous channels of information flow from their processors to each of the processors of a two-channel computing module, which is necessary to control the effects of the flight of the aircraft.

Images