CN-121979052-A - Data transmission circuit and system for double-control-unit ejection life saving device

CN121979052ACN 121979052 ACN121979052 ACN 121979052ACN-121979052-A

Abstract

The invention discloses a data transmission circuit and a system for a double-control-unit ejection life saving device, wherein the circuit comprises a first control unit and a second control unit, the first control unit comprises a first main processor and a first auxiliary processor, the second control unit comprises a second main processor and a second auxiliary processor, a data communication interface comprises a first internal communication interface, a second internal communication interface, an inter-unit communication interface and an external communication interface, a state monitoring circuit is connected between the first main processor and the second main processor and used for monitoring the working state of the first main processor, and a transmission path switching circuit is connected with the first main processor, the second main processor, the state monitoring circuit and the external communication interface and used for communicating the first main processor or the second main processor with the external communication interface based on signals of the state monitoring circuit. The invention can ensure that the data transmission is not interrupted when the first main processor fails, and improves the reliability and the safety of the ejection life-saving device.

Inventors

XU SUWEN
WANG TING
LI XIAOYU
SHI HONGLIANG
ZHANG YU
ZHANG ZHENG

Assignees

中国航空救生研究所

Dates

Publication Date: 20260505
Application Date: 20260129

Claims (10)

1. A data transmission circuit for a dual control unit ejection life saving device, comprising: the system comprises a first control unit and a second control unit, wherein the first control unit comprises a first main processor and a first auxiliary processor, and the second control unit comprises a second main processor and a second auxiliary processor; the data communication interface comprises a first internal communication interface for connecting the first auxiliary processor and the first main processor, a second internal communication interface for connecting the second auxiliary processor and the second main processor, an inter-unit communication interface for connecting the first main processor and the second main processor, and an external communication interface for transmitting data to external equipment; The state monitoring circuit is connected between the first main processor and the second main processor and is used for monitoring the working state of the first main processor; and the sending path switching circuit is connected with the first main processor, the second main processor, the state monitoring circuit and the external communication interface, and the first main processor or the second main processor is communicated with the external communication interface based on the signal of the state monitoring circuit.
2. The data transmission circuit for a dual control unit ejection life saving device of claim 1, wherein the first internal communication interface and the second internal communication interface are SCI serial communication interfaces, the inter-unit communication interface is an SPI serial peripheral interface, and the external communication interface is an RS422 interface.
3. The data transmission circuit for a dual control unit ejection life saving device of claim 1, wherein the status monitoring circuit comprises at least two interconnected IO ports connected between the first and second main processors.
4. The data transmission circuit for a dual control unit ejection life saving device of claim 3, wherein the status monitor circuit comprises a first monitor IO port and a second monitor IO port, and the working status of the first main processor is determined by detecting a level flip status on the first monitor IO port and the second monitor IO port.
5. The data transmission circuit for a double control unit ejection life saving device according to claim 4, wherein the judging by the state monitoring circuit includes setting a counting window and setting an initial flip count value larger than 0, when the first monitor IO port and the second monitor IO port are in normal flip level with a preset period in the window, the initial flip count value is increased, when the initial flip count value is larger than 0, the first main processor is judged to be normal, when the first monitor IO port and the second monitor IO port are not in normal flip level with the preset period in the window, the initial flip count value is decreased, and when the initial flip count value is smaller than 0, the first main processor is judged to be invalid.
6. The data transmission circuit for a dual control unit ejection life saving device according to claim 1, wherein the transmission path switching circuit includes a logic switch constituted by a nand gate and an optocoupler isolator.
7. The data transmission circuit for the double control unit ejection life saving device according to claim 6, wherein the data input end of the logic switch is respectively connected to the transmission pin of the first main processor and the transmission pin of the second main processor, the output end of the logic switch drives the transmission chip of the external communication interface, and the control end of the logic switch is controlled by the output signal of the state monitoring circuit and isolated by adopting an optocoupler isolator.
8. The data transmission circuit for a dual control unit ejection life saving device of claim 1, wherein the operation logic of the transmission path switching circuit includes the logic switch connecting the transmission pin of the first main processor to the external communication interface when the state monitoring circuit does not output a signal indicating that the first main processor is disabled, and the second main processor setting a dedicated control pin to a high level when the state monitoring circuit outputs a signal indicating that the first main processor is disabled, driving the optocoupler isolator to operate, and connecting the transmission pin of the second main processor to the external communication interface by the output terminal of the logic switch.
9. The data transmission circuit for a dual control unit ejection life saving device of claim 1, wherein the data of the first secondary processor received by the first primary processor from the first internal communication interface is integrated with own data; The second main processor integrates the data of the second auxiliary processor received from the second internal communication interface with the data of the second auxiliary processor; the first main processor receives the data integrated by the second main processor through the inter-unit communication interface and performs system level integration.
10. A data transmission system for a double control unit ejection life saving device, characterized by comprising a data transmission circuit for a double control unit ejection life saving device according to any one of claims 1 to 9.

Description

Data transmission circuit and system for double-control-unit ejection life saving device Technical Field The invention relates to the technical field of signal processing of ejection life-saving devices, in particular to a data transmission circuit and a system for a double-control-unit ejection life-saving device. Background The electronic control system of the ejection seat is used as a core control device of the ejection seat, has the universal adaptation capability of the high-altitude plain, and can be matched with the life-saving requirements of different flight environments of the high-altitude plain. The method is characterized in that main inertial navigation and atmospheric data of the aircraft are received in real time in a normal flight stage, own data are reported periodically, and after ejection is started, ejection control programs are accurately selected and ejection sequences are optimized according to relevant parameters of a person-chair system and an embedded control model, so that the method is a key for ensuring safety and life saving of pilots. In order to improve the safety and reliability of ejection life saving, the prior art generally adopts a redundant design of two sets of main and standby controllers, and simultaneously requires a control system to upload data in real time for on-board state monitoring. However, the prior art has remarkable limitations that, on one hand, for the model of only reserving a single-path data channel for a seat control system to transmit data to UMC (electromechanical management computer), independent data of two sets of main and standby controllers cannot be directly and efficiently reported, the existing scheme does not solve the problem of adapting to multi-processor data and single-channel transmission, on the other hand, the existing main and standby controller is designed to be in an independent operation mode and lacks an integrated system architecture, so that effective integration of the multi-processor data cannot be realized, and a redundancy guarantee mechanism of data transmission is not considered, namely, when a main transmission processor is abnormal, a data transmission path is difficult to be quickly and reliably switched, the risk of interruption or distortion of the data transmission exists, further, the on-board accurate monitoring of the state of the seat control system is affected, and the safety advantage of dual-controller redundancy design cannot be fully exerted. The prior art only stays on the basic level of 'dual-controller parallel deployment', does not propose an integration strategy for multiprocessor data, does not design an integrated solution for adapting single-channel transmission, does not consider an intelligent switching mechanism after a main sending node fails, and cannot meet the severe requirements of an ejection seat control system on the reliability and the integrity of data transmission. Disclosure of Invention The invention mainly aims to provide a data transmission circuit and a system for a double-control-unit ejection life saving device, which ensure that data transmission is not interrupted when a first main processor fails through an intelligent switching mechanism, and improve the reliability and safety of the ejection life saving device. The technical scheme adopted by the invention is that the data transmission circuit for the double-control unit ejection life-saving device comprises: the system comprises a first control unit and a second control unit, wherein the first control unit comprises a first main processor and a first auxiliary processor, and the second control unit comprises a second main processor and a second auxiliary processor; the data communication interface comprises a first internal communication interface for connecting the first auxiliary processor and the first main processor, a second internal communication interface for connecting the second auxiliary processor and the second main processor, an inter-unit communication interface for connecting the first main processor and the second main processor, and an external communication interface for transmitting data to external equipment; The state monitoring circuit is connected between the first main processor and the second main processor and is used for monitoring the working state of the first main processor; and the sending path switching circuit is connected with the first main processor, the second main processor, the state monitoring circuit and the external communication interface, and the first main processor or the second main processor is communicated with the external communication interface based on the signal of the state monitoring circuit. According to the technical scheme, the first internal communication interface and the second internal communication interface are SCI serial communication interfaces, the inter-unit communication interfaces are SPI serial peripheral interfaces, and the external communication