基于冷备份多模冗余结构的BRAM自修复方法

随着现场可编程门阵列（FPGA）在空天电子系统中的广泛应用,受空间辐射恶劣环境影响,FPGA中重要的存储器电路BRAM,因采用SRAM技术极易发生位翻转故障,虽绝大部分情况表现为瞬时故障,但永久故障依然存在。针对BRAM自修复方法仅修复瞬时故障的现状,对能同时修复瞬时故障和永久故障的自修复方法进行研究,提出了一种冷备份多模冗余结构,用3个热备份模块和1个冷备份模块来构造BRAM,该结构可通过三模冗余刷新方法修复瞬时故障和冷备份替换方法修复永久故障。给出了整个BRAM自修复系统中各模块的电路结构和实现方法,实验验证了系统的自修复能力,并在可靠性、硬件资源和时间消耗3个方面,通过对比分析论证了自修复方法的有效性。     

胚胎电子细胞阵列中空闲细胞的配置

空闲细胞是胚胎电子细胞阵列(EECA)实现自修复的前提,空闲细胞越多,系统的可靠性越高,但过多的空闲细胞也将带来巨大的硬件资源消耗。在航空航天等领域,电子系统追求高可靠性的同时,硬件资源消耗也必须考虑,为优化胚胎电子细胞阵列中空闲细胞的配置,以阵列可靠性和硬件资源消耗为出发点,将多态系统理论引入到阵列的可靠性分析中,优化可靠性计算模型。针对经典胚胎电子细胞阵列,在不同自修复策略下,仿真并分析阵列的可靠性、硬件资源消耗与空闲细胞配置的关系。根据研究结果制定了不同自修复方式下空闲细胞的配置方法,同时兼顾可靠性和硬件资源消耗的要求。同时,研究了确定规模的胚胎电子细胞阵列自修复方式的选择方法。本文研究成果对推动胚胎电子细胞阵列的实际应用具有重要的意义。     

IMA平台重构中的人素和安全性研究

综合模块化航空电子(IMA)是一种建立在分布式计算环境之下的可以实现软硬件分离的架构,它可实现硬件模块应用的动态软件分配。即,IMA系统可以根据功能性和资源可用性来选择不同的配置。本文主要关注了IMA重构中涉及到的安全性及人素问题。解析了重构的过程以及人素与自动化方面的技术。事实证明,某些情况下安全有效的配置需要具备故障识别、安全要求、任务调度及资源分配限制以外的知识。并且平台的安全性设计还取决于人机系统是否实现了最佳结合。     

面向雷达天线平台的容错纠错策略及其FPGA实现

 针对雷达天线平台可能出现的传感器故障,提出了一种容错纠错策略。如果雷达天线平台周围的3条驱动腿中的某一个传感器发生故障,则可根据空间闭链机构约束,由其他正常工作驱动腿的传感器和中间从动腿的冗余传感器的测量值计算出故障传感器的应测值。推导了对应的位移传感器故障的容错重构算法,研究了基于现场可编程门阵列（FPGA）的上述容错策略的硬件实现方法。通过引入坐标旋转数字计算（CORDIC）算法使得FPGA运算中只需进行基本的移位和加/减操作;设计了基于FPGA的循环高速流水线处理器结构,使得重构算法的在线计算速度大大提高。仿真模拟了突变型传感器故障,结果表明,所提容错纠错方案能有效地保证雷达天线平台运行的安全性和可靠性。     

Fault self-repair strategy based on evolvable hardware and reparation balance technology

In the face of harsh natural environment applications such as earth-orbiting and deep space satellites, underwater sea vehicles, strong electromagnetic interference and temperature stress,the circuits faults appear easily. Circuit faults will inevitably lead to serious losses of availability or impeded mission success without self-repair over the mission duration. Traditional fault-repair methods based on redundant fault-tolerant technique are straightforward to implement, yet their area, power and weight cost can be excessive. Moreover they utilize all plug-in or component level circuits to realize redundant backup, such that their applicability is limited. Hence, a novel selfrepair technology based on evolvable hardware（EHW） and reparation balance technology（RBT） is proposed. Its cost is low, and fault self-repair of various circuits and devices can be realized through dynamic configuration. Making full use of the fault signals, correcting circuit can be found through EHW technique to realize the balance and compensation of the fault output-signals. In this paper, the self-repair model was analyzed which based on EHW and RBT technique, the specific self-repair strategy was studied, the corresponding self-repair circuit fault system was designed, and the typical faults were simulated and analyzed which combined with the actual electronic devices. Simulation results demonstrated that the proposed fault self-repair strategy was feasible. Compared to traditional techniques, fault self-repair based on EHW consumes fewer hardware resources, and the scope of fault self-repair was expanded significantly.     

应用设计过程的胚胎硬件细胞单元粒度优化方法

胚胎硬件的高可靠性主要由新颖的硬件体系和细胞电路结构来保障,缺乏应用设计过程的可靠性提高方法研究。分析了在应用设计过程中可调的胚胎硬件可靠性影响因素,针对细胞单元粒度不同会导致细胞面积变化从而影响细胞阵列可靠性的实际情况,对传统可靠性模型无法体现细胞面积变化的不足进行了改进,建立了新的可靠性模型。通过实例分析,总结出不同细胞单元粒度情况下的细胞阵列可靠性变化规律,进而给出细胞单元粒度优化选择方法,设计者基于该方法不需设计完整电路就能确定自身设计能力范围内获得最大可靠性的细胞单元粒度。     

Future architecture of flight control systems

The development of fault tolerant embedded control systems such as flight control systems (FCS) are currently highly specialized and time-consuming. We introduce a conceptual architecture for the next decade control system where all control and logic are distributed to a number of computer nodes locally linked to actuators and connected via a communication network. In this way, we substantially reduce the life-cycle cost of embedded systems and attain scalable fault tolerance. All fault tolerance is based on redundancy. Our philosophy is to cover permanent faults with hardware replication and handle all error processing caused by both permanent and transient faults with software techniques. With intelligent nodes and use of inherent redundancy we introduce a robust and simple fault tolerant system that utilizes minimum hardware and has bandwidth requirements of less than 300 kbits/s, which can be met with an electrical bus. The study is based on an FCS for JAS 39 Gripen, a multi-role combat aircraft that is statically unstable at subsonic speed.     

Optimal design of RTCs in digital circuit fault self-repair based on global signal optimization

Since digital circuits have been widely and thoroughly applied in various fields, electronic systems are increasingly more complicated and require greater reliability. Faults may occur in elec-tronic systems in complicated environments. If immediate field repairs are not made on the faults, elec-tronic systems will not run normally, and this will lead to serious losses. The traditional method for improving system reliability based on redundant fault-tolerant technique has been unable to meet the requirements. Therefore, on the basis of (evolvable hardware)-based and (reparation balance technology)-based electronic circuit fault self-repair strategy proposed in our preliminary work, the optimal design of rectification circuits (RTCs) in electronic circuit fault self-repair based on global sig-nal optimization is deeply researched in this paper. First of all, the basic theory of RTC optimal design based on global signal optimization is proposed. Secondly, relevant considerations and suitable ranges are analyzed. Then, the basic flow of RTC optimal design is researched. Eventually, a typical circuit is selected for simulation verification, and detailed simulated analysis is made on five circumstances that occur during RTC evolution. The simulation results prove that compared with the conventional design method based RTC, the global signal optimization design method based RTC is lower in hardware cost, faster in circuit evolution, higher in convergent precision, and higher in circuit evolution success rate. Therefore, the global signal optimization based RTC optimal design method applied in the elec-tronic circuit fault self-repair technology is proven to be feasible, effective, and advantageous.     

基于联合k/n(G)模型的DIMA系统可靠性建模与分析

针对分布式综合模块化航空电子（DIMA）系统的动态重构特性,分析了动态重构策略及重构过程,构建了面向DIMA系统的联合k/n（G）可靠性模型。以驻留于DIMA系统的综合显示功能为例进行了实验分析,讨论了系统重构过程可靠度与时间变化关系,给出了利用一般k/n（G）可靠性模型建模的可靠度变化曲线,通过对比分析验证了联合k/n（G）模型的适用性和合理性;通过参数敏感性分析,观察不同模块配置参数对系统可靠度的影响,得出相关结论,为提高DIMA系统动态重构过程的可靠性和优化资源配置提供指导。     

基于改进Q学习的IMA系统重构蓝图生成方法

重构蓝图定义了故障状态下系统软硬件资源的重新配置方案,是实现综合模块化航空电子系统重构容错的关键。提出了一种基于改进Q学习的重构蓝图生成方法,综合考虑负载均衡、重构影响、重构时间、重构降级等多优化目标,并应用模拟退火框架改进探索策略,提高了传统Q学习算法的收敛性能。实验结果表明,与模拟退火算法、差分进化算法、传统Q学习算法相比,本文提出的改进Q学习算法效率更高,所生成重构蓝图质量更高。     

容错航空蓄电池电源及其均衡管理

航空蓄电池在实际使用中会出现电池性能衰退与退化速率不一致,电池组容量与使用寿命降低,甚至可能出现严重的安全事故。针对电池单体不一致性和故障隔离问题,提出一种蓄电池电源系统容错体系结构和分级容错控制策略,提出基于电池单体动态重构的主动均衡管理新方法,设计基于"冒泡沉底（BS）择优上岗"的电池单体实时动态重构策略。开发容错航空镍镉电池电源原理样机,给出系统实验性能分析,实验结果表明所提出的系统技术方案可行有效,能够快速隔离故障失效电池单体,明显改善电池不一致性,提高了电池组容量利用率和剩余使用寿命。     

Design of Embryo-electronic Systems Capable of Self-diagnosing and Self-healing and Configuration Control

As aerospace vehicles travel in a hellish environment, the reliability of the measuring and controlling systems has played a critical role in the credibility of a whole airborne system. Embryo-electronic system is a bionic hardware capable of self-diag- nosing and self-healing. This article presents a new approach to design embryo-electronic systems and introduces their bionic principles, system structures and fault-tolerant mechanism. As the current methods cannot meet the requirements for large-scale embryo-electronic systems, this article advances a new shift-register-based configuration memory of embryonic system to solve the problem by using the inter-cell communication to reduce the gene storage capacity of a single cell. The article designs an overall structure of the shift-register-based configuration memories of the embryonic system and connects them into a chain structure. The article also designs an inner circuit of the cell, the control of shift-register-based configuration memory and the way of runtime dynamic configuration. The simulation of field programmable gate array (FPGA) evidences the realizability of the proposed design. Compared to the SRAM-based one, this memory can save 90% of the area when constructing embryonic systems larger than 128 × 128 under the same condition.     

模块化定子永磁风力发电机及其控制

针对海上风能开发和利用,提出和设计了一种新型结构的永磁风力发电机。所提出的电机由多个空间均匀移相的模块化定子永磁发电机(MSPMG)组成,每个MSPMG是独立的单相双凸极电机,每个定子模块包含永磁、齿极和线圈,减小了模块间的磁耦合和线圈互感。通过分析MSPMG的电磁特性和发电原理,基于变分原理推导出MSPMG的最优功率控制策略,利用单相H桥全控整流电路实现了对电枢电流的控制。有限元分析证明MSPMG各个模块间的磁路耦合很小,运行状态相互独立,因此该电机具有很强的容错运行能力。基于软件仿真证实了所设计电机及其控制策略的正确性和有效性。     

Real time recovery of fault tolerant processing elements

A critical problem in the design of ultra-reliable fault tolerant systems is that of how to bring a redundant member back on-line, after a transient fault, without degrading critical real-time functions. Recovery from transients is imperative to maintain necessary system reliability in the face of transient errors which have been estimated to occur at a rate of 5 to 100 times that of permanent failures. Excessive delays associated with recovery become a problem when as much as 1 Mbytes of RAM in the faulty processor must be made congruent with the processing majority while maintaining full functionality of critical, real-time control algorithms. This paper describes a hardware assisted recovery technique which uses memory “tags” to determine which memory segments need to be restored such that recovery can be performed incrementally without affecting real-time operational tasks. Also presented is performance data associated with this technique's application to a Draper Laboratory quad-redundant processor responsible for vehicle control of a manned undersea vehicle     

基于低冗余度的传感器故障诊断研究

对于大型飞机来说,飞行控制系统各部件(包括传感器)多采用高余度的硬件配置来提高系统的任务可靠性,但对小型飞机来说,由于受重量、空间及费用等原因的影响,一些传感器不适合安装三余度或四余度传感器。对于二余度或单传感器来说,如何鉴别故障传感器或判断传感器是否发生故障较为困难。同样,传统的故障诊断与隔离方法并不能隔离三余度传感器系统中的多个故障。为了解决低冗余度传感器故障诊断问题,提出一种不依赖数学模型的奇偶方程方法与小波分析相结合的传感器故障诊断方法。     

多相开路故障下的双三相PMSM统一容错控制策略

多相电机在定子开路故障下具有良好的容错性能,与此相关的设备和控制策略改进方面的研究理论也不断被提出。然而,却少有基于统一模型的适用于多相开路故障的容错控制策略。提出了一种应用于双三相永磁同步电机(PMSM)系统三相或三相以下开路故障的容错控制策略,并获得了良好的电机电力和动态性能。针对发生单相到三相开路故障的PMSM提出了统一数学模型,提取出每种故障下对应电机不对称性的矩阵。通过电压方程,推导出每种故障对应的解耦变换矩阵。为了对相电流中的每种谐波进行无差别抑制,建立了谐波子空间。考虑开路故障相数的增加,提出了用于三相开路的有中性点电流的容错控制策略,达到了降低相电流幅值和提升系统冗余度的目的。最后通过试验和仿真结果,验证了理论分析的正确性。     

第三类瞬时故障

 瞬时故障广泛存在于各种系统并导致功能失效。按照其导致系统故障的机理不同,瞬时故障可被划分为若干类。第一类瞬时故障具有这样的性质,其持续时间一旦超过某一界限即引起系统故障。第二类瞬时故障导致系统故障的概率与其出现时刻有关而与其持续时间无关。 本文讨论第三类瞬时故障并计算其在（0,t）时间内不导致系统故障的概率。第三类瞬时故障具有这样的性质,其导致系统故障的概率与其持续对间的关系服从某一分布。本文所建立的用于描述第三类瞬时故障的模型考虑了瞬时故障不出现状态FNP,以及瞬时故障不作用状态FN和瞬时故障作用状态FA向FNP的转移,但并没有假定状态之间的转移具有Markov性质。因而可被广泛接受。     

基于改进LS-SVM的航空发动机传感器故障诊断与自适应重构控制

提出了一种基于改进LS-SVM的航空发动机传感器故障诊断与自适应重构控制方法.该方法通过给误差变量赋予不同权值因子提高LS-SVM的鲁棒性,采用修剪算法提高LS-SVM的稀疏性;该方法从某涡扇发动机输入输出空间中建立其正常模型,采用阈值判别法对传感器故障进行实时监视与诊断,并用模型输出值代替故障传感器测量值反馈回闭环控制系统,实现对发动机的自适应重构控制.仿真结果表明,该方法能及时准确地定位故障,并进行有效的自适应重构控制.