A fault-tolerant air data/inertial reference system

The air data inertial reference system (ADIRS) described consists of a fault-tolerant air data inertial reference unit, a secondary air data attitude reference unit, and six air data modules. The ADIRS replaces the conventional inertial reference and air data systems and uses ARINC 629 bi-directional serial digital data bus interfaces. The ADIRS is designed to be the inertial and air data reference for the ARINC 651 integrated modular avionics (IMA) distributed architecture and provides low life cycle cost and high availability through high reliability, simple high integrity monitoring and deferred maintenance     

机载机电系统可靠性的计算机辅助分析方法

 为了提高机载机电系统的可靠性,机载机电系统常采用余度系统,以达到故障容错,进而实现整个飞机系统的高可靠性和安全性。开发适应于余度间耦合、动态性能降级的ReliaApp可靠性分析评价软件平台,通过有效综合故障模式影响（FMEA）、故障树分析（FTA）和Markov状态转移链法,实现不同容错设计方案的选择、机电系统的可靠性定量评价并给出系统的薄弱环节,为系统的余度配置和改进设计提供软件设计与评估平台,以确保飞机系统的高可靠性和安全性。实例应用表明该软件平台是飞机机载机电系统可靠性设计与评价有效的计算机辅助工具。     

机载供电系统双余度控制器的容错控制

介绍双发（Twin-engines）系统的战斗机的机载供电系统控制器的设计和实现。机载供电系统控制器是管理飞机的供电系统的航空电子设备,是飞机供电系统的核心设备,肩负飞机安全的使命。为了提高控制器的可靠性和灵活性,放弃传统的模拟方法,使用先进的数字化技术实现对飞机供电、配电系统的管理。在设计中为了提高可靠性,使用主动复制的容错技术,设计了双余度控制器,在发生单通道错误的情况下,整个系统能够正确工作。对机载供电系统控制器容错技术进行了研究,包括双余度系统的管理策略、同步控制机制、余度管理和故障综合、信号比较监控和通道切换逻辑。     

Ultra-reliable real-time control systems-future trends

Today's aircraft use ultra-reliable real-time controls for demanding functions such as Fly-By-Wire (FBW) flight control. Future aircraft, spacecraft and other vehicles will require greater use of these types of controls for functions that currently are allowed to fail, fail to degraded operation, or require human intervention in response to failure. Fully automated and autonomous functions will require ultra-reliable control. But ultra-reliable systems are very expensive to design and require large amounts of on-board equipment. This paper will discuss how the use of low-cost sensors with digital outputs, digitally commanded fault-tolerant actuation devices and interconnecting networks of low-cost data buses offer the promise of more affordable ultra-reliable systems. Specific technologies and concepts to be discussed include low-cost automotive and industrial data buses, “smart” actuation devices with integral fault masking capabilities, management of redundant sensors, and the fault detection and diagnosis of the data network. The advantages of integrating the control and distribution of electrical power with the control system will be illustrated. The design, installation, and upgrade flexibility benefits provided by an all-digital and shared network approach will be presented. The economic benefits of systems that can operate following failure and without immediate repair will be reviewed. The inherent ability of these redundant systems to provide effective built-in test and self-diagnostics capabilities will be described. The challenges associated with developing ultra-reliable software for these systems and the difficulties associated with exhaustive verification testing will be presented as will additional development hurdles that must be overcome     

临近空间艇载计算机余度管理策略研究

平流层飞艇是可靠性要求很高的系统,需要由具有容错能力的艇载计算机来进行控制和管理。针对艇载计算机采用的余度结构进行了软件管理策略的研究和设计,提出了基于异构总线的握手机制节点故障检测方法、基于“看门狗”与“心跳”相结合的 CPU 故障检测方法、基于节点健康矩阵的互援式总线重构方法及基于有限状态机的多 CPU 并行处理系统自适应重构方法。故障注入试验表明,艇载计算机在遇到故障时能实时检测出故障,诊断故障类型,并对故障进行处理,实现系统重构,保证了平流层飞艇长期驻空时的安全飞行。     

大型民机的非相似余度飞控计算机研究

 对中国自主研制的大型民机的余度飞行控制系统进行基础技术研究,设计了一套适合民机电传(FBW)系统的余度飞控计算机(FCC)新方案。提出了民机余度飞控计算机的2个设计准则：满足系统的可靠性指标和满足FO/FO/FO容错等级。然后根据这2个基本准则,给出了民机余度飞控计算机设计的7个建议,从而确定了民机余度飞行控制系统的余度数和余度结构：新型民机的余度飞行控制系统可采用非相似四余度,每个余度通道由两个支路构成比较监控结构,每个支路运行2套软件,保证软硬件系统的可靠性均衡。还确定了民机余度飞行控制系统的工作方式,使用Petri网分析了新方案的可靠性,并与B777和A320的余度飞控计算机进行了比较。     

Design of passive fault-tolerant flight controller against actuator failures

The problem of designing passive fault-tolerant flight controller is addressed when the normal and faulty cases are prescribed. First of all, the considered fault and fault-free cases are formed by polytopes. As considering that the safety of a post-fault system is directly related to the maximum values of physical variables in the system, peak-to-peak gain is selected to represent the relationships among the amplitudes of actuator outputs, system outputs, and reference commands. Based on the parameter dependent Lyapunov and slack methods, the passive fault-tolerant flight controllers in the absence/presence of system uncertainty for actuator failure cases are designed, respectively. Case studies of an airplane under actuator failures are carried out to validate the effectiveness of the proposed approach     

基于奇偶方程的FADS传感器故障检测方法

重复使用运载器（RLV）的嵌入式大气数据传感系统（FADS）中传感器的高可靠性是RLV飞行控制系统高可靠性的保障。结合FADS采用多个测压点冗余配置的特点,利用各传感器测量值之间存在的解析冗余关系,设计奇偶方程,实现对各个测压点故障传感器的有效检测。     

非相似余度飞控计算机

从容错的角度介绍了Boeing777和A320的数字飞行控制计算机系统。Boeing777和A320的飞控计算机都采用了非相似的余度技术,能容忍软件和硬件的共态故障,但在每个计算机的功能分配和整个飞控计算机系统的余度结构编排等方面体现了各自的特点。用广义随机Petri网描述了Boeing777余度结构和容错动态过程,并进行了系统的可靠性计算和容错度分析。针对中国"大型飞机"容错飞控系统的设计作了分析和建议。     

Design by extrapolation: an evaluation of fault tolerant avionics

Over the past 30 years, safety-critical avionics systems such as Fly-By-Wire (FBW) flight controls, full-authority digital engine controls, and other systems have been introduced on many commercial and military airplanes and spacecraft. Early FBW systems, such as on the F-16 and Airbus A320, were considered revolutionary and introduced with extreme caution. These early systems and their successors all make use of redundant and fault-tolerant avionics to provide the required dependability and safety, but have used significantly different architectures. This paper examines the different levels of criticality and fault tolerance required by different types of avionics systems, establishes architectural categories of fault-tolerant architectures, and identifies the discriminating features of the varied approaches. Examples of discriminators include the level of redundancy, methods of engaging backup systems, protection from software errors, and the use of dissimilar hardware and software. The strengths and weaknesses of the approaches will be identified. The paper concludes with some speculation on trends for future systems based on this evaluation of previous systems     

千兆三余度AFDX 帧管理的形式化建模与验证

为了提升新一代航空电子全双工交换以太网（AFDX）网络的传输速率和余度设计可靠性,在AFDX 网络标准的基础上（ARINC 664 p7）,建立千兆三余度AFDX 网络的帧管理机制模型并进行了形式化建模, 而且实现了AFDX 网络标准中描述的SkewMax 机制。使用UPPAAL 形式化工具对千兆三余度AFDX 网络帧 管理机制进行形式化验证,验证帧管理机制的完整性检查及冗余管理功能的可用性。结果表明,千兆三余度 AFDX 网络帧传输过程中不存在死锁。此外,针对标准AFDX 的冗余管理中一个帧的丢失可能会导致其冗余备 份的丢失的现象,提出在接收端设置一个队列,记录那些比连续帧更晚到达的冗余备份的帧序号,从而减少不 必要的丢帧,提高QoS 和数据完整性。形式化验证的结果可以作为千兆AFDX 网络标准制定和实际应用的参考。     

Reliability analysis of fault-tolerant IMU architectures withredundant inertial sensors

A systematic reliability analysis procedure for evaluating fault-tolerant inertial measurement unit (IMU) architectures is described. The procedure is based on modeling the system architecture, the component reliabilities, and the redundancy management. The component reliabilities are based on constant failure rates and exponential failure distributions. The overall reliability of the IMU and the major contributors to IMU reliability are computed. Three state-of-the-art fault-tolerant IMU architectures are evaluated and compared using the procedure     

卫星-惯性-星光最优组合导航系统在航天飞机导航中的应用

 文中对航天飞机星光-惯性导航系统进行了简要分析从最优系统组成原理、余度管理方法、系统性能分析等方面研究了卫星-惯性-星光组合导航系统的概念设计。     

High accuracy navigation and landing system using GPS/IMU systemintegration

In this paper, the accuracy, integrity and continuity of function requirements for automatic landing systems using satellite navigation systems are discussed. Such a landing system is the integrated navigation and landing system (INLS) developed by Deutsche Aerospace (DASA/Ulm, Germany). The system concepts of the INLS are presented. It is shown how an INLS, based on system integration of a satellite navigation system (e.g., GPS) in realtime differential mode with an inertial measurement unit (IMU) in the accuracy class of an attitude and heading reference system (AHRS), can meet the requirements: the results given are mainly devoted to the accuracy issues. Using Kalman filter techniques, an in-flight calibration of the IMU is performed. The advantage of system integration, especially in dynamic flight conditions and during phases of flight with satellite masking, is explained. The accuracy, integrity and continuity of function of the INLS were proven by means of flight tests in a commuter aircraft using a laser tracker as a reference. These flight tests have shown that the short-term accuracy (<60 seconds) of the AHRS used within the INLS has been improved from low cost sensor quality to the accuracy of a high quality laser inertial navigation system (LNIS). With the presented INLS, a landing at any airfield, not equipped with conventional Instrument Landing System (ILS) or Microwave Landing System (MLS), is possible by using a very cost effective system. The INLS is a high accuracy navigation and landing system designed to be used instead of conventional landing systems at small airfields and to fill operational gaps of conventional navigation and landing systems in cruise and approach on large airports     

基于鲁棒故障观测器的非线性离散系统容错控制设计

针对存在执行器故障以及未知干扰的非线性离散系统,提出了一种鲁棒故障估计与容错控制方法。首先在未知系统干扰作用下,设计鲁棒故障观测器实现系统状态和执行器故障的同步估计;然后根据鲁棒故障观测器得到的系统状态估计和故障估计信息设计容错控制器,进行状态反馈容错控制,同时基于D稳定与H_∞控制理论对鲁棒故障观测器和容错控制器进行设计,实现了多约束条件下的故障估计与容错控制;最后用飞行控制系统模型验证了所提方法的有效性。     

故障容错光交叉通道数据链路的可靠性

光交叉通道数据链路(OCCDL)是光传飞行控制系统余度计算机之间进行数据交换的重要途径.为了提高OCCDL系统的可靠性,提出一种新的具有多链路故障容错能力的OCCDL系统.给出了该OCCDL系统的结构配置,分析了系统正常工作和故障工作情况下的工作流程,设计了系统光开关故障、光链路等关键部分的故障容错逻辑,建立了基于马尔...     

飞机的模型参考容错控制

 本文针对飞机内部元件或控制元件的故障,用检测滤波器理论设计了相应的故障检测器和故障参数估计器,并用Lyapunov稳定性理论设计了模型参考自适应容错控制律,从而保证了在内部故障情况下飞行控制系统的稳定性。     

Distributed flight control system using fiber distributed datainterface (FDDI)

The design of fault-tolerant distributed control systems is discussed. The application described is a generic flight control system (FCS) for a fighter aircraft. The system is designed for high redundancy and expandability to meet various requirements. The communication network is based on the fiber distributed data interface (FDDI), which provides a high level of electromagnetic interference resistance and reliability. The choice of fiber optic media also provides an extremely high bandwidth and tremendous growth capability for future communications needs. This study is not specific to FDDI or flight control systems. The methods and configurations presented should be applicable to many real-time control implementations     

控制性能精确可控的自适应鲁棒容错控制方法研究

一般而言,实现控制性能约束精确可控与满足控制系统鲁棒的要求之间存在着难以两全的矛盾。容错控制也是如此,精准的控制性能要求与对故障诊断误差的鲁棒性之间也存在着这样的矛盾。针对这一问题,提出了将参数空间方法、变结构理论以及模型参考自适应理论相结合的自适应鲁棒容错控制方法。该方法的基本思路是将容错控制系统分为内外两部分,内部为基于参数空间的容错控制系统,可以灵活适应精确的控制性能约束(对应极点配置)和一定范围的控制性能约束(对应区域极点配置),外部则为基于变结构模型参考自适应方法的控制系统,主要目的是提高容错控制系统的鲁棒性。通过仿真证明了这种自适应鲁棒容错控制方法既能保证系统满足精确的控制性能约束,又能保证对故障诊断误差有较高的鲁棒性。     

基于RBF神经网络的FADS系统及其算法研究

以典型的十字形布局的大气数据传感系统及其跨声速应用为研究对象,基于RBF神经网络,设计了新的FADS算法和故障检测处理方法。将测压点按不同功能进行精细的划分和组合,形成更加精简、目的性更强且相互独立的RBF网络处理子模块,利用各子网络模块提供的冗余特性,使用基于故障特征向量表的方法,实施简单而有效的故障检测与处理。仿真验证表明,迎角与侧滑角的测量误差不大于0.5°,且故障检测是有效的。