Mosterman, "Applying Model-Based Design to a Fault Detection, Isolation, and Recovery System," in Military Embedded Systems, Summer, 2006. The control channel contains two branches of master control and monitoring. The 2 × 2 redundancy flight control and management computer contains two control channels in a chassis. Mosterman and Jason Ghidella, "Model Reuse for the Training of Fault Scenarios in Aerospace," in Proceedings of the AIAA® Modeling and Simulation Technologies Conference, CD-ROM, paper 2004-4931, August 16 - 19, 2004, Rhode Island Convention Center, Providence, RI. Flight control and management computer and navigation sensor system with double redundancy are designed in 2 × 2 redundancy computer architecture. Installation of S-TEC System 65 two axis automatic flight guidance system, model ST-470.
This substate has no outgoing transitions so once an actuator enters the Isolated state, it remains in that state for the rest of the simulation. In the chart Mode Logic, the failure of an actuator is represented by the substate Isolated. When the fault detection system registers a failure in one of the actuators, that actuator can no longer be activated. As a result, the left outer actuator can then be activated in the event that the fault detection system registers another failure later in the simulation. In the chart, the condition !u.low_press becomes true, so the substate LO transitions from the Off mode to the Standby mode. For example, to bring the Hydraulic Circuit 1 back online, in the Failure Injection UI, clear the H1 check box and click Update. The fault detection control logic enables the system to recover from a hydraulic circuit failure. The substate LO enters the Off mode and sends the event E to the substate LI.īecause the substate LO is no longer in the Active mode, LI enters the Active mode.īecause the substate LI is now in the active mode, RI enters the Active mode and sends a second event E to the substate RO.Īfter the fault detection systems registers a failure in Hydraulic Circuit 1, the left outer actuator is turned off, the right outer actuator is placed on standby, and the inner actuators are activated. Images from Shuttle Crew Operations Manual, page 2.The truth table function L_switch broadcasts the event go_off to the substate LO.
Part of one string can be lost, and all avionics functions will still Which can be transferred to another GPC in case of failure. Provides failure protection during dynamic phases by allowingĮxclusive command of a specific group of vehicle hardware by one GPC, Redundant units are on different strings. All flight-critical hardware units are redundant, and the Redundant set, each is assigned a different string to maximize redundancy. GPC or MDM failure, and to allow for safe return to Earth in the eventĭuring ascent and entry, when there are four PASS GNC GPCs in the Mission operations in the event of a loss of one string caused by a In this paper we detail our effort to formalize and prove requirements for the Quad-redundant Flight Control System (QFCS) within NASAs Transport Class Model (. Vehicle hardware is segmented into these groups to facilitate GPCĬommand of these components for redundancy, to allow for nominal The aircraft has been updated with state-of-the-art technologies, including an automatic takeoff and landing capability, redundant flight control surfaces, enhanced avionics, and triple-redundant flight control computers. (FC1, 2, 3, or 4) and one from the second group (FC5, 6, 7, or 8). Currently in production, Predator XP has an endurance of 35 hours and can ascend up to 25,000 feet.
The four strings relate to Shuttle's (generally) quad redundant avionics, the three strings in your question imply that Falcon has triple.Ī string is composed of two FC data buses: one from the first group
Redundant flight control system software#
Some manufacturers use a common set of hardware and software to operate all of these vehicles by using custom flight phases and control channels. Here's a schematic from the Shuttle showing one flight computer (on the left, labled GPC for General Purpose Computer) interfacing to four separate flight control strings. UAV autopilot systems are available for all kinds of UAVs, including fixed wings, multirotors, helicopter drones, parafoils, blimps and tethered drones.
The SEC3 is only used for spoiler control, and does not participate in flight control system reconfiguration. No specific knowledge of Falcon, but a "string" in avionics terminology means a element of a redundant flight control system consisting of a flight computer and a data bus to a set of sensors and effectors. Each pair of flight control computers is redundant.
0 kommentar(er)
