空中加油软管“甩鞭”现象安全性分析与仿真验证

对于软管式空中加油系统，由于受到加油机尾流、大气紊流、受油机艏波、飞行员操作水平、燃油压力脉动等各种因素干扰，加油软管难以稳定在平衡位置，在对接时常发生软管“甩鞭”现象（HWP）。软管“甩鞭”现象严重影响了空中加油任务的安全性，降低对接成功率，是空中加油过程的一种典型危险。基于系统理论事故模型和过程模型（STAMP）理论和系统理论过程分析（STPA）方法对空中加油过程的典型危险——HWP，开展了具体的致因分析，从控制模型的角度系统分析导致HWP发生的不安全行为和相应的致因场景，从系统层、不安全控制行为层和致因因素层分别提出避免空中加油软管HWP发生的一系列安全约束。根据软管HWP的危险功能控制结构，利用Simulink工具搭建仿真验证平台，以对接速度、卷盘机构控制、软管长度关键致因为模型输入，验证所提安全约束的准确性和可行性。 

Safety analysis and simulation verification of HWP in aerial refueling

For the hose aerial refueling system, the refueling hose is difficult to stabilize in a balance position due to interference of tanker wake, atmospheric turbulence, receiver bow wave, pilot operation, fuel pressure pulsation, etc. Thus the Hose Whipping Phenomenon (HWP) usually takes place in the docking phase of aerial refueling, which could reduce the docking success rate and the safety of refueling, and it is a typical hazard in aerial refueling process. Based on the System-Theoretic Accident Model and Processes (STAMP) and the System Theoretic Process Analysis (STPA) method, the safety analysis of HWP in aerial refueling process was carried out to systematically identify the unsafe action and causal scenes by constructing the control model, and a series of operational constraints were proposed from system level, unsafe action level and causing factors. According to the hazard function control structure of the HWP, the simulation verification platform was built by Simulink. The key causes of docking speed, reel mechanism control, and hose design length were inputted to verify the accuracy and feasibility of the proposed safety constraints.