Real time recovery of fault tolerant processing elements

A critical problem in the design of ultra-reliable fault tolerant systems is that of how to bring a redundant member back on-line, after a transient fault, without degrading critical real-time functions. Recovery from transients is imperative to maintain necessary system reliability in the face of transient errors which have been estimated to occur at a rate of 5 to 100 times that of permanent failures. Excessive delays associated with recovery become a problem when as much as 1 Mbytes of RAM in the faulty processor must be made congruent with the processing majority while maintaining full functionality of critical, real-time control algorithms. This paper describes a hardware assisted recovery technique which uses memory “tags” to determine which memory segments need to be restored such that recovery can be performed incrementally without affecting real-time operational tasks. Also presented is performance data associated with this technique's application to a Draper Laboratory quad-redundant processor responsible for vehicle control of a manned undersea vehicle     

Investigations of a distributed real-time information system for flight measuring applications

Modern aircraft require complex systems of complementary sensors for the achievement of precise and dynamic on-line flight measurements. For the computation, transmission and storage of sensor data a distributed information system is needed which has to respect hard real-time demands. In this paper the demands of an aircraft sensor system on the components of the distributed information system are analysed allowing the allocation and partitioning of the tasks to the resources. Simulation experiments are used to investigate the real-time behaviour of the whole information system, consisting of several RISC-processors, DRAMs and bus systems. The bus systems are divided into parallel and serial buses; the serial field bus system is realized by PROFIBUS. The real-time behaviour of PROFIBUS is additionally analysed by hardware experiments.     

Boeing 777 high lift control system

The Boeing 777 high lift control systems (HLCS), a state-of-the-art microprocessor-based system that provides fly-by-wire control, protection, and built-in-test and maintenance access functions for the leading edge slats and trailing edge flaps drive and actuation systems, is discussed. This system is designed to take advantage of technologically proven concepts as well as judicious application of new concepts in response to market demands, airline customer input, and a thorough review of lessons learned from previous aircraft programs. The purpose of the HLCS, the wing high lift devices it controls, the HLCS components, its three modes of operation, automatic functions, and system failure protections are described. The use of the EASY5 engineering analysis program developed by the Boeing Company to model dynamic systems in both the time and frequency domains for modeling mechanical and hydraulic portions of the high lift system is discussed     

Electromechanical Actuation Technology for the All-Electric Aircraft

Electromechanical actuation is a critical element that must be developed and verified to make the all-electric aircraft a viable concept. For several years the Flight Control Division of the Air Force Wright Aeronautical Laboratories has sponsored activities to demonstrate the credibility of electromechanical actuation systems (EMAS) for primary flight control actuation functions. The foundation for these EMAS activities and several electromechanical actuation development programs are described here. One involves the design, fabrication, and laboratory test of a rotary, hingeline electromechanical actuator. Another involves the development and flight test demonstration of a linear electromechanical actuator for controlling an aileron of a C-141 aircraft. A third involves the design and development of a linear electromechanical actuator for missiles having severe performance, temperature, and volumetric requirements. In addition, a brief summary of the results from two aircraft actuation trade studies compare the baseline (conventional) hydraulic flight control system with an all-electric airplane concept including quantitative comparisons of weight, reliability and maintainability, and life cycle costs.     

ROSA Rotorcraft Open Systems Avionics

Commercial standards adopted from the volume-driven electronics markets provide improved processing capacities over those widely used military standards and at reduced cost. Desired future capabilities and advanced functions, such as RPA, require the throughput, bandwidth, and memory provided by commercial processors and data buses. The primary issues needing resolution prior to implementation are related to operations in military rotorcraft environment, reliability, redundancy management, and fault and battle damage tolerance. In addition, some required network components presently do not exist in the preferred form factors. The ROSA project is providing effective laboratory demonstrations of COTS products and open systems specifications and standards to rotorcraft avionics. Preliminary cost estimates forecast large potential savings and create a compelling business case for follow-on research and transition to production systems. In addition, the project is developing a Rotorcraft Technical Architecture with the participation of many industry partners and will promote the resulting documentation as background materials for the JTA-A     

Modeling of reliability and performance assessment of a dissimilar redundancy actuation system with failure monitoring

Actuation system is a vital system in an aircraft, providing the force necessary to move flight control surfaces. The system has a significant influence on the overall aircraft performance and its safety. In order to further increase already high reliability and safety, Airbus has imple-mented a dissimilar redundancy actuation system (DRAS) in its aircraft. The DRAS consists of a hydraulic actuation system (HAS) and an electro-hydrostatic actuation system (EHAS), in which the HAS utilizes a hydraulic source (HS) to move the control surface and the EHAS utilizes an elec-trical supply (ES) to provide the motion force. This paper focuses on the performance degradation processes and fault monitoring strategies of the DRAS, establishes its reliability model based on the generalized stochastic Petri nets (GSPN), and carries out a reliability assessment considering the fault monitoring coverage rate and the false alarm rate. The results indicate that the proposed reli-ability model of the DRAS, considering the fault monitoring, can express its fault logical relation and redundancy degradation process and identify potential safety hazards.     

The Flight 2000 avionics suite: paving the way to free flight

The FAA's Flight 2000 project is an innovative initiative to implement and validate selected operational improvements leading to Free Flight. It integrates new avionics, new ground systems, new procedures, avionics certification, and operational approval. Approximately 2000 aircraft operating in Alaska, Hawaii, and Oceanic airspace will be equipped with new capabilities enabling benefits such as improved situational awareness, increased flexibility, and efficiency gains. By developing and fielding these operational improvements, the actual benefits of new procedures and capabilities will be validated and risks associated with national implementation will be reduced     

直流航空接触器熔焊故障分析及预防建议

直流航空接触器由于其体积小、负载大、高可靠性、长寿命等特点,广泛应用于航空器各大系统的电气部件中,是现代航空器的重要电气控制部件。直流航空接触器在断开和闭合过程中,触头会受到电侵蚀,当侵蚀达到一定程度后,动静触头将焊接在一起,接触器也将失去控制,造成航空器电源等重要系统故障。本文通过对某机型起动机接触器熔焊故障情况及触头熔焊分析,结合 2016—2019 年该型接触器平均故障万时率,统计其故障发生的时机和原因。结果表明：该直流航空接触器的维护属于时控件寿命曲线态势分布,建议对其按时控件管理。     

Research on a six-phase permanent magnet synchronous motor system at dual-redundant and fault tolerant modes in aviation application

With the development of more/all electrical aircraft technology,an electro-mechanical actuator (EMA) is more and more used in an aircraft actuation system.The motor system,as the crucial part of an EMA,usually adopts the redundancy technology or fault tolerance technology to improve the reliability.To compare the performances of these two motor systems,a 10-pole/ 12-slot six-phase permanent magnet synchronous motor (PMSM) is designed with the concentrated single-layer winding,which is able to operate at dual-redundant and fault tolerant modes.Furthermore,the position servo performances of the six-phase PMSM at dual-redundant and fault tolerant modes are analyzed,including the normal and fault conditions.In addition,a variable structure proportional-integral-derivative (PID) control strategy is proposed to solve the performance degradation problem caused by phase current saturation.Simulation and experimental results show that the fault tolerant PMSM has a better position servo performance than the dual-redundant PMSM,and the variable structure PID control strategy is able to improve the performance due to phase current saturation.     

航空发动机分布式控制系统结构分析

对近年来航空发动机分布式控制系统的研究作了简要分析。重点分析了航空发动机分布式控制系统的结构、功能和优点;比较了几种分布式数据总线和电源总线的优缺点,并指出了适用于航空发动机分布式控制系统的数据总线和电源总线选择;分析了发动机运行环境对开发分布式控制系统的影响,并提出了可能的解决方案;指出了开展航空发动机分布式控制系统研究的重要性和未来的发展方向。      

机载供电系统双余度控制器的容错控制

介绍双发（Twin-engines）系统的战斗机的机载供电系统控制器的设计和实现。机载供电系统控制器是管理飞机的供电系统的航空电子设备,是飞机供电系统的核心设备,肩负飞机安全的使命。为了提高控制器的可靠性和灵活性,放弃传统的模拟方法,使用先进的数字化技术实现对飞机供电、配电系统的管理。在设计中为了提高可靠性,使用主动复制的容错技术,设计了双余度控制器,在发生单通道错误的情况下,整个系统能够正确工作。对机载供电系统控制器容错技术进行了研究,包括双余度系统的管理策略、同步控制机制、余度管理和故障综合、信号比较监控和通道切换逻辑。     

面向航空发动机推力控制的大气参数测量系统设计

为了实现多发飞机推力控制匹配要求,以及提升机载控制参数测量可靠性要求,设计了一套适用于多发飞机的机载环境大气参数测量系统。通过对发动机推力控制需求和适航相关要求的分析,确定了系统设计原则,利用飞机和发动机的有限硬件资源,提出了一种适用于多发飞机的多余度机载环境大气参数测量系统架构。针对不同来源的信号,分别设计了相应信号故障诊断算法、表决算法以及多源信号故障切换逻辑,保证系统在信号发生故障时可及时切换到健康余度。通过仿真和试验对测量系统在信号发生故障时的容错能力进行了验证,结果表明：系统余度设计合理,故障诊断和表决逻辑有效,环境大气参数测量的可靠性和安全性得到了提升;当信号发生故障时,可实现故障重构,且切换过程产生的推力变化小于3%。     

QFT force loop design for the aerodynamic load simulator

A dynamic load simulator which can reproduce on-ground the aerodynamic hinge moment of a control surface is an essential rig for conducting performance and stability tests of aircraft actuation systems. The hinge moment varies widely over the flight envelope, depending on the specific flight condition and maneuvering status. To replicate the wide spectrum of this hinge moment variation within some accuracy hounds, a force controller is designed based on the Quantitative Feedback Theory (QFT). A dynamic model of the load actuation system Is derived, and compared with experimental results. Through this comparison, a nominal model of the load actuation system with some uncertainty bounds is developed. The efficacy of the QFT force controller is verified by a numerical simulation, in which combined aircraft dynamics, flight control law and hydraulic actuation system dynamics of the aircraft control surface are considered     

机载总线控制管理计算机系统设计与研究

以某型飞机为模型,根据航空电子系统所要完成的多种飞行任务,机载总线控制管理计算机的功能和性能,进行了机载总线控制管理计算机的系统设计,并对该系统的可行性进行实验室的综合仿真试验研究,为机载计算机软硬件的模块化和层次化设计提供了设计依据。     

宽体客机飞控电作动系统设计

为研究飞控电作动(EPA)系统技术,分析目前服役的国外多电客机空客A380、A350XWB飞控电作动系统、波音Boeing 787飞控电作动系统能源配置、作动器配置及技术特点,提出了国外多电客机飞控电作动系统发展趋势。结合中国电作动研制技术情况,提出中国宽体客机飞控电作动系统2H/2E能源配置方案及电作动系统配置方案,对电作动系统安全性、作动系统电功率、质量进行分析,为中国宽体客机飞控电作动系统研制提供有益参考。     

Evaluating sensor technology for UAS collision avoidance

The problem of "sense-and-avoid" for Unmanned Aircraft Systems (UAS) is genuinely multi-dimensional: there is a wide range of UAS sizes, speeds, and maneuverability, as well as missions for which these UAS will be used. There are also a variety of sensors that might be used for sense-and-avoid, which have widely varying capabilities to measure distance or angle to an obstacle, as well as closing rate, and time to collision. Most sensors are not able to provide all required information about the geometry of an encounter; therefore, using a combination of sensors offers one possible solution. We are investigating the concept that there may be a variety of possible sensor solutions for each distinct UAS capability or mission. By studying the breadth of UAS types and missions, and selectively testing certain sensors in the field, we are evaluating the limits to the capabilities of sensors and sensor combinations. This report is on the progress of this multi-dimensional evaluation. We have scoped the dimensions for evaluating UAS capabilities and the capabilities of sensors. We are experimentally evaluating sensor parameters on a variety of aircraft to validate the specified capabilities. This reports on our methodology for field evaluation of sensor technology and the lessons learned on evaluation platforms and capabilities.     

Application of Ground/Air Data Link to General Aviation Operations

The Federal Aviation Administration (FAA) is currently upgrading secondary surveillance radars with systems which will have an integral data link capability, the Mode Select (Mode S) beacon system. These new systems will allow two-way data communications between ground systems (e.g., weather databases and Air Traffic Control (ATC) systems) and aircraft that are equipped with data link compatible Mode S transponders and suitable display and input devices. Initial data link services include both weather information and ATC advisories. The MITRE Corporation* is developing an in-house capability to perform end-to-end operational evaluation of data link services. Initially, a low-cost, portable pilot position man-machine interface is being developed for use in general aviation operations. The objective is to explore operational issues in laboratory and limited flight test environments, and to demonstrate these services on a data link I/O device, a laptop portable personal computer (PC) with touch panel. A group of pilots will bench test the interface design, and the results will be incorporated into the design used in flight testing. This paper describes the project's objectives and results to date, including implementation details and pilot test results.     

Digital Electronic Flight Decks: The Outlook for Commercial Aviation

Digital avionics technology shows great promise in reducing overall airplane system cost. The new digital electronic components are very reliable and offer great flexibility in application. Development of modular control units, for the directional controls and engine throttles, will aid standardization and gradual refinement of such control devices. A network of multisystem digital data buses can be developed to handle the complex interchange of data between interrelated systems throughout the airplane.     

基于不确定传感器状态的机载系统多层故障诊断方法

准确的机载系统故障诊断是保证飞机安全飞行和实现经济效益最大化的重要途径。然而传感器受到内外部环境条件的影响而不可避免的存在检测状态的不确定性,因此基于单个传感器或局部区域传感器综合检测结果的方法难以完全保证故障诊断的有效性和正确性。针对飞机机载系统的结构和工作原理,充分利用系统中不同层级、不同区域传感器检测特征之间的关联关系,考虑单个传感器本身存在的不确定性,构建了传感器信息前向融合与反向校验相结合的分层诊断决策方法,实现了对系统状态和传感器状态的双重估计与更新,克服了单一传感器故障对系统诊断推理准确度的影响。该方法较传统故障诊断模型,不再依赖某一个或某一类传感器信息的绝对可靠,在实现系统级的准确故障诊断同时,还能判断具体某一传感器本身是否发生虚拟警。在飞机液压系统故障诊断案例中,新方法成功将系统故障诊断的虚警率降低了96%,传感器的不确定度降低了84%。     

飞机全电刹车机电作动系统上电自检测

提出了一种飞机全电刹车机电作动（EMA）系统的上电自检测（POST）方法,以保证系统在运行前处于安全工作区域。通过检测,可及时准确地定位和更换故障部件,提高飞机出勤率。在系统运行之前,尽可能在有限的检测次数内全面准确地检测敏感元件,定位故障部件,避免造成刹车系统的二次伤害。针对逆变器和电机三相绕组组成的驱动回路,利用母线电容放电产生电流,完成检测。检测过程利用电容电压而非电源为逆变器供电,可防止过高的短路电流对电源的冲击,且电容上存储的能量有限,可有效避免短路故障对系统的二次伤害。检测方法在原有电路的基础上并未增加传感器和检测电路,但实现了逆变器功率管以及电机绕组,短路和开路故障的全面检测,且可定位出故障部件和故障原因。该机电作动系统上电自检测方法能够保证在一秒内完成系统全面自检测,经过1 000次正常及带故障试验,故障的误报率和漏报率保持在1‰以下。在现场试验中,系统可抵御飞机复杂的电磁环境（EME）,工作性能稳定。通过软件设置不同故障阈值,可方便移植到其他机电作动系统中。