故障注入器功能设计

对于容错计算机的验证 ,必须模拟在系统运行出现故障的情况下 ,容错计算机对故障的检测、隔离和定位能力。所以 ,需要研究故障注入技术。故障注入是通过一定的方法 ,按照一定的控制 ,改变计算机内部硬件或软件的状态 ,使其出现预先定义的故障状态 ,由此触发容错计算机的故障逻辑 ,验证故障逻辑的功能和性能。     

Reliability and safety analysis of redundant vehicle management computer system

Redundant techniques are widely adopted in vehicle management computer （VMC） to ensure that VMC has high reliability and safety. At the same time, it makes VMC have special characteristics, e.g., failure correlation, event simultaneity, and failure self-recovery. Accordingly, the reliability and safety analysis to redundant VMC system （RVMCS） becomes more difficult. Aimed at the difficulties in RVMCS reliability modeling, this paper adopts generalized stochastic Petri nets to establish the reliability and safety models of RVMCS. Then this paper analyzes RVMCS oper- ating states and potential threats to flight control system. It is verified by simulation that the reli- ability of VMC is not the product of hardware reliability and software reliability, and the interactions between hardware and software faults can reduce the real reliability of VMC obviously. Furthermore, the failure undetected states and false alarming states inevitably exist in RVMCS due to the influences of limited fault monitoring coverage and false alarming probability of fault mon- itoring devices （FMD）. RVMCS operating in some failure undetected states will produce fatal threats to the safety of flight control system. RVMCS operating in some false alarming states will reduce utility of RVMCS obviously. The results abstracted in this paper can guide reliable VMC and efficient FMD designs. The methods adopted in this paper can also be used to analyze other intelligent systems＇ reliability.     

Next generation functional test program development system

While superior-quality functional board test has been a goal for most high reliability electronics manufacturers, the time and effort for generating such test programs using today's tools and processes makes this difficult to achieve in a cost effective manner. This paper will introduce a revolutionary approach to functional board test program development that combines the comprehensiveness of software-based simulation with the speed and simplicity of hardware emulation. The result is a functional Test Program Set development system that can produce high fault coverage, diagnostic test programs in a fraction of the time it takes using traditional techniques, and at a lower unit cost. In this paper we will first provide a brief background on the strengths and weaknesses of current software and hardware TPS development techniques-simulation hot mock-up. Next, the new approach is described in detail and contrasted against the existing techniques. Finally, actual experience to date using a prototyped system is presented     

基于故障树的空管自动化系统分析

综合考虑软件和硬件对空管自动化系统可靠性的影响,建立空管自动化系统故障树模型,并进行定性和定量分析,确定影响系统可靠性的关键因素。结果表明,该方法有利于保证和提高系统的可靠性。     

临近空间艇载计算机余度管理策略研究

平流层飞艇是可靠性要求很高的系统,需要由具有容错能力的艇载计算机来进行控制和管理。针对艇载计算机采用的余度结构进行了软件管理策略的研究和设计,提出了基于异构总线的握手机制节点故障检测方法、基于“看门狗”与“心跳”相结合的 CPU 故障检测方法、基于节点健康矩阵的互援式总线重构方法及基于有限状态机的多 CPU 并行处理系统自适应重构方法。故障注入试验表明,艇载计算机在遇到故障时能实时检测出故障,诊断故障类型,并对故障进行处理,实现系统重构,保证了平流层飞艇长期驻空时的安全飞行。     

Methodology for cost-effective software fault tolerance formission-critical systems

A computing capabilities continue to advance, there will be a concurrent rise in the number of both hardware and software faults. These will be caused by the greater volume of more complex software, by the increased number of untested software states, and by more incidents of hardware/software interaction faults as a result of increased hardware speed and density. The traditional software implemented fault tolerance: approaches have been successfully utilized in life-critical systems, such as digital flight controls, where their additional costs can be easily justified. Examples include N-Version Programming and Recovery Block approaches. However, there is still a need for dependable computing for mission-critical applications as well. Often, these traditional techniques are avoided for mission-critical systems due to the difficulty in justifying their extra up-front development cost. We provide an alternative for the high “sunk cost” of traditional software fault tolerance techniques. The methodology, called data fusion integrity processes (DFIPs), is a simple, yet effective technique for mission-critical systems. In addition, the approach establishes a framework from which other costlier, more extensive traditional techniques can be added. We present details of the DFIP methodology and a DFIP framework for Ada programs. We also briefly discuss development of a DFIP code generation system which exploits Java that will enable users to quickly build a DFIP framework in Ada, and select reusable DFIP component methods     

基于改进归纳式监控算法的液体火箭发动机实时故障检测

对归纳式监控算法（IMS）应用于故障检测时虚警率高的问题,提出一种改进IMS.改进后的算法对测试时可能出现的野点进行了处理,降低了待测数据中野点对测试结果的干扰.以某型液体火箭发动机仿真试车数据为例,进行了使用IMS的实时故障检测实验.结果表明,原始IMS在进行故障检测时会出现多次虚警,改进后的IMS在实时准确的同时,虚警率大大降低,由37.5%降低至0,达到液体火箭发动机故障检测程序的要求.      

Future architecture of flight control systems

The development of fault tolerant embedded control systems such as flight control systems (FCS) are currently highly specialized and time-consuming. We introduce a conceptual architecture for the next decade control system where all control and logic are distributed to a number of computer nodes locally linked to actuators and connected via a communication network. In this way, we substantially reduce the life-cycle cost of embedded systems and attain scalable fault tolerance. All fault tolerance is based on redundancy. Our philosophy is to cover permanent faults with hardware replication and handle all error processing caused by both permanent and transient faults with software techniques. With intelligent nodes and use of inherent redundancy we introduce a robust and simple fault tolerant system that utilizes minimum hardware and has bandwidth requirements of less than 300 kbits/s, which can be met with an electrical bus. The study is based on an FCS for JAS 39 Gripen, a multi-role combat aircraft that is statically unstable at subsonic speed.     

基于故障注入的实时嵌入式软件仿真测试技术研究

由于强实时性、参与闭环控制、软硬件耦合及可靠性要求高等特点,飞行控制系统嵌入式软件在软件研制、测试及验收阶段往往缺少动态测试环境。本文在仿真测试技术基础上,针对飞行控制系统嵌入式软件的特点与测试需求,进行了基于故障注入技术的仿真测试技术研究,设计了一种实时嵌入式软件仿真测试平台方案。     

Software implemented transient fault detection in space computer

Computer systems operating in space environment are subject to different radiation phenomena, whose effects are often called “Soft Error”. Generally, these systems employ hardware techniques to address soft-errors, however, software techniques can provide a lower-cost and more flexible alternative. This paper presents a novel, software-only, transient-fault-detection technique, which is based on a new control flow checking scheme combined with software redundancy. The distinctive advantage of our approach over other fault tolerance techniques is the lower performance overhead with the higher fault coverage. It is able to cope with transient faults affecting data and the program control flow. By applying the proposed technique on several benchmark applications, we evaluate the error detection capabilities by means of several fault injection campaigns. Experimental results show that the proposed approach can detect more than 98% of the injected bit-flip faults with a mean execution time increase of 153%.     

MPC8270的MCP异常研究与分析

MPC8270处理器以其良好的性能和丰富的接口在航空机弹载嵌入式领域有广泛的应用.MPC8270提供丰富的异常机制供软件开发者使用,由于MCP的产生与硬件有紧密关系,并不会由于软件本身导致,因此往往软件开发者对其并不在意.结合在实际工作中碰到的故障事例,对MCP进行了详细的描述.对MCP正确的处理可以增加软件的可靠性.     

液氧煤油火箭发动机起动故障检测

针对液氧煤油发动机试车起动阶段故障检测需要,确定了采用时序模型和非线性回归模型的两种检测方法,提出了检测参数选取的一般性原则并结合液氧煤油发动机特点确定了检测参数,设计了故障检测所需的完整的软、硬件系统。经系统调试和试车同步验证,证明该检测系统能有效检测发动机起动阶段故障,对提高试车可靠性和安全性有重要意义。      

机载火箭发射器新型智能检测系统的设计与研究

为了对火箭发射器的各种故障进行快速准确的检测,提出了机载火箭发射器新型智能检测系统.介绍了该系统的硬件构成及软件程序设计.该系统以IPC-610型工业控制计算机为核心,在测量绝缘电阻模块中,采用直流升压技术,将9V直流电经过直流升压达到500V,实现了对发射器绝缘性能的精确测量;在故障诊断中,采用故障树模式对发射器的所有可能故障进行统计分析,实现了对故障位置快速准确的确定;在软件设计中,采用虚拟仪器技术并用Visual C 软件编程,使该系统具有操作简单和可靠性高等优点.     

涡轮泵故障检测系统

1引言随着可重复使用运载器(RLV)的出现与发展,要求涡轮泵具有较高的可重复使用率,因此,它的故障检测与状态监控工作也变得越来越重要[1]。马歇尔飞行中心(MSFC)和波音-加州坎诺加帕克(BCP)正在研究航天飞机主发动机(SSME)涡轮泵的先进实时振动监控系统(ARTVMS)[2]。我国也针对     

无人机捷联惯导系统测试设备的设计

针对某型无人机捷联惯导系统(SINS)的测试问题,采用虚拟仪器技术设计出了满足系统检测需求的测试设备.简单论述了该系统测试设备的总体设计,并对其软硬件设计进行了详细介绍.该测试设备以工业控制计算机为硬件平台,所有的测试板卡都安装在工业控制计算机插槽上,利用工业控制计算机的强大功能,完成信号采集、任务管理等功能.测试平台...     

AB PLC在天然气SCADA系统中的冗余设计

基于网络控制的PLC冗余系统,通过设备实现冗余所需的自动事件同步和无扰动切换,不会丢失信息,无需切换时间.避免由于单个CPU故障造成系统瘫痪,系统故障率接近于零,保证系统的可靠性、稳定性和实时性.提出在天然气SCADA(Supervisory Control And Data Acquisition)系统,即数据采集与监视控制系统中,采用Rockwell公司的ControlLogix PLC冗余系统,利用以太网和ControlNet控制网构建了系统的硬件组网冗余方案,实现数据的采集和对现场设备的自动控制,在实际的应用中取得了良好的效果.     

Fault-tolerance wide voltage conversion gain DC/DC converter for more electric aircraft

In this paper, a fault-tolerance wide voltage conversion gain DC/DC converter for More Electric Aircraft (MEA) is proposed. The proposed converter consists of a basic Cuk converter module and n expandable units. By adjusting the operation state of the expandable units, the voltage conversion gain of the proposed converter could be regulated, which makes it available for wide voltage conversion applications. Especially, since mutual redundancy can be realized between the basic Cuk converter module and the expandable units, the converter can continuously work when an unpredictable fault occurs to the fault-tolerant parts of the proposed converter, which reflects the fault tolerance of the converter and significantly improves the reliability of the system. Moreover, the advantages of small input current ripple, automatic current sharing and low voltage stress are also integrated in this converter. The working principle and features of the proposed converter are mainly introduced, and an experimental prototype with 800 W output power has been manufactured to verify the practicability and availability of the proposed converter.     

基于虚拟仪器的无人机故障诊断系统设计

介绍了一种基于虚拟仪器的无人机故障诊断系统,给出了系统的硬件及软件组成,并就故障诊断的原理及软件实现方法做了介绍。该系统可方便实现对无人机现场故障的检测和诊断,具有良好的使用性能和价值。     

基于航天测控的实时仿真系统设计

航天器发射试验具有高风险性,而承担航天器测控的测控系统规模庞大、关系复杂,其测控设备、软件的正确性关系到试验成败。仿真技术的广泛应用,使设备、软件的正确性在发射任务前就可以得到充分验证,从而提高发射试验的安全性。以航天器试验任务为背景设计的实时仿真系统,在航天测量船上得到了成功应用,取得了良好的效果。     

非相似余度飞控计算机

从容错的角度介绍了Boeing777和A320的数字飞行控制计算机系统。Boeing777和A320的飞控计算机都采用了非相似的余度技术,能容忍软件和硬件的共态故障,但在每个计算机的功能分配和整个飞控计算机系统的余度结构编排等方面体现了各自的特点。用广义随机Petri网描述了Boeing777余度结构和容错动态过程,并进行了系统的可靠性计算和容错度分析。针对中国"大型飞机"容错飞控系统的设计作了分析和建议。