KR-20260066228-A - FLIGHT CONTROL SYSTEM AND FAULT DIAGNOSING METHOD THEREOF

KR20260066228AKR 20260066228 AKR20260066228 AKR 20260066228AKR-20260066228-A

Abstract

The present invention comprises: a plurality of control units mounted on an aircraft to control the flight of the aircraft; a link unit for connecting the plurality of control units so that they can communicate with each other; a plurality of diagnostic units connected to each of the plurality of control units, which receive and analyze data received by the connected control unit from another control unit and diagnose the state of the control unit that transmitted the data; and a fault verification unit for checking whether a fault has occurred in a control unit using the diagnostic results diagnosed by the plurality of diagnostic units; and can diagnose the state of each of the plurality of control units mounted on the aircraft and safely operate the aircraft.

Inventors

박제두
김재헌

Assignees

한화시스템 주식회사

Dates

Publication Date: 20260512
Application Date: 20241104

Claims (18)

A plurality of control units mounted on an aircraft to control the flight of the aircraft; A link unit for connecting the above plurality of control units so that they can communicate with each other; A plurality of diagnostic units connected to each of the above plurality of control units, and which receive and analyze data received by the connected control unit from another control unit to diagnose the state of the control unit that transmitted the data; and A flight control system comprising: a fault verification unit for verifying whether a fault has occurred in a control unit using the diagnostic results diagnosed by the plurality of diagnostic units.
In claim 1, The above diagnostic unit is, A first inspection unit for checking whether another control unit has operated normally by comparing and analyzing data output by a connected control unit with data output by another control unit received by the connected control unit; and A flight control system comprising: a second inspection unit for comparing and analyzing the operation timing of a connected control unit and another control unit to check whether the operation timing of another control unit is normally synchronized.
In claim 2, Each of the above plurality of control units can receive and process the same input signal, and The above-mentioned first inspection unit is, A data comparison unit for comparing a first value of data output by a connected control unit processing the input signal and a second value of data transmitted to a connected control unit by another control unit processing the input signal; and A flight control system comprising: a first determination unit for determining that an abnormality has occurred in a control unit that transmitted data having the second value when the comparison result of the data comparison unit is different from the first value and the second value.
In claim 2, Each of the above plurality of control units can generate a start signal to synchronize the operation time and transmit it to another control unit, and The above second inspection unit is, A time comparison unit for comparing the difference between the requested operation time requested by the start signal generated by the connected control unit and the actual operation time of another control unit that received the start signal with a preset value; and A flight control system comprising: a second judgment unit for determining that an abnormality has occurred in a control unit that receives a start signal when the difference between two operation times is greater than or equal to the set value as a result of comparison by the above time comparison unit.
In claim 2, The above diagnostic unit is, A flight control system further comprising a third inspection unit for checking whether a connected control unit and another control unit can normally share data with each other through the link unit.
In claim 2, A flight control system further comprising an isolation unit for isolating the control unit so that, when the fault detection unit identifies a control unit in which a fault has occurred, a signal is input to or output to the control unit to control the flight of the aircraft.
In claim 6, The above diagnostic unit is, A flight control system further comprising a fourth inspection unit for checking whether the control unit isolated by the isolation unit outputs a signal controlling the flight of the aircraft at preset intervals.
In claim 1, The above plurality of control units are three or more, and A flight control system in which the state of any one of the above-mentioned plurality of control units is diagnosed by two or more diagnostic units connected to different control units.
In claim 8, The above fault verification unit is, A diagnostic comparison unit for comparing diagnostic results in which two or more diagnostic units connected to different control units diagnose the same control unit; and A flight control system comprising: a final judgment unit that determines that a failure of the control unit has occurred when the diagnostic results of the diagnostic comparison unit above determine that an abnormality in the control unit has occurred in the same way.
In claim 9, The above fault verification unit is, A flight control system further comprising a fault data storage unit for storing the state of a control unit that the above-mentioned final judgment unit has determined has a fault.
A fault verification method for verifying a failure of a plurality of control units mounted on an aircraft to control the flight of the aircraft, A communication process for communicating the above plurality of control units with each other; A diagnostic process in which each of the above plurality of control units analyzes data received from another control unit and diagnoses the state of the control unit that transmitted the data; and A method for verifying a fault in a flight control system, comprising a fault verification process for verifying whether a faulty control unit has occurred using a diagnostic result.
In claim 11, The above diagnostic process is, A first inspection process for checking whether another control unit has operated normally by comparing and analyzing data output by one control unit and data output by another control unit received by the control unit; and A method for verifying a fault in a flight control system, comprising: a second inspection process for comparing and analyzing the operation timing of one control unit and another control unit to check whether the operation timing of the other control unit is normally synchronized.
In claim 12, Each of the above plurality of control units can receive and process the same input signal, and The above first inspection process is, A process of comparing a first value of data output by one control unit processing the input signal and a second value of data transmitted by another control unit processing the input signal multiple times; A process of counting the number of times the first value and the second value are different, and comparing with a preset number of times; and A method for confirming a fault in a flight control system, comprising: a process of determining that a fault has occurred in a control unit that transmitted data having the second value when the number of times the first value and the second value are different is greater than or equal to the set number of times.
In claim 12, Each of the above plurality of control units can generate a start signal to synchronize the operation time and transmit it to another control unit, and The above second inspection process is, A process of comparing the requested operation time requested by a start signal generated by one control unit with the actual operation time of another control unit that received the start signal; A process of comparing the difference between the above requested operation time and the above actual operation time with a preset setting value; and A method for confirming a fault in a flight control system, comprising: a process of determining that a fault has occurred in a control unit that receives a start signal when the difference between two operation times is greater than or equal to the above-mentioned set value.
In claim 12, The above diagnostic process is, A method for verifying a fault in a flight control system, further comprising a third inspection process for checking whether one control unit and another control unit can normally share data with each other through the above communication process.
In claim 11, The above plurality of control units are three or more, and The above diagnostic process performs the state of any one of the plurality of control units using a diagnostic unit connected to each of the other two or more control units, and The above fault verification process is, A process of comparing diagnostic results in which two or more diagnostic units connected to different control units diagnose the same control unit; and A method for confirming a fault in a flight control system, comprising: a process of finally determining that a fault has occurred in the control unit when the diagnostic results of all diagnostic units determine that an abnormality has occurred in the control unit.
In claim 16, A method for confirming a fault in a flight control system, further comprising an isolation process in which, if a control unit is identified as having a fault in the above fault confirmation process, a signal is input to or output to the control unit to prevent it from controlling the flight of the aircraft.
In claim 17, A method for verifying a fault in a flight control system, further comprising, after the above isolation process, a process of verifying at preset intervals whether the isolated control unit outputs a signal controlling the flight of the aircraft.

Description

Flight Control System and Falut Diagnosing Method Thereof The present invention relates to a flight control system and a method for verifying a fault therein, and more specifically, to a flight control system and a method for verifying a fault therein that can diagnose the status of each of a plurality of control units mounted on an aircraft and safely operate the aircraft. Generally, aircraft are equipped with a Flight Control Computer (FLCC). The FLCC can control the flight to ensure the aircraft operates safely. In this case, the flight control computer can be designed with a dual structure. For example, it may be equipped with a main flight control computer and an auxiliary flight control computer. Therefore, if a failure occurs while using the main flight control computer, the aircraft can be controlled by the auxiliary flight control computer to cope with the failure of the main flight control computer. However, errors or malfunctions can also occur in the auxiliary flight control computer during the standby process. Therefore, using an auxiliary flight control computer without guaranteed reliability may lead to other unexpected problems. FIG. 1 is a diagram showing the configuration of a flight control system according to an embodiment of the present invention. FIG. 2 is a flowchart illustrating a method for verifying a fault in a flight control system according to an embodiment of the present invention. Hereinafter, embodiments of the present invention will be described in more detail with reference to the attached drawings. However, the present invention is not limited to the embodiments disclosed below but may be implemented in various different forms, and these embodiments are provided merely to ensure that the disclosure of the present invention is complete and to fully inform those skilled in the art of the scope of the invention. To describe the invention in detail, the drawings may be exaggerated, and like reference numerals in the drawings refer to like elements. FIG. 1 is a diagram showing the configuration of a flight control system according to an embodiment of the present invention. Below, a flight control system according to an embodiment of the present invention will be described. A flight control system can control flight so that an aircraft can be operated safely. Referring to FIG. 1, the flight control system (100) includes a plurality of control units (110), a link unit (120), a plurality of diagnostic units (130), and a fault detection unit (140). At this time, the aircraft may be an unmanned aircraft capable of carrying a person. For example, the aircraft may be Advanced Air Mobility (AAM) or Urban Air Mobility (UAM). Accordingly, a flight control system (100) according to an embodiment of the present invention may be installed on the aircraft so that the aircraft can fly safely and automatically. Multiple control units (110) may be installed on the aircraft to control the flight of the aircraft. Three or more control units (110) may be provided. For example, the control units (110) may be flight control computers formed in the form of boards, and the board-shaped control units (110) may be housed within a single case. Additionally, the control units (110) may operate together. To this end, each of the multiple control units (110) may receive and process the same input signal, and each may generate a start signal to synchronize the timing of operation and transmit it to another control unit. The link unit (120) can be connected to allow multiple control units (110) to exchange data. Specifically, the link unit (120) can connect board-shaped control units (110) within a case. Accordingly, multiple control units (110) can communicate with each other and exchange data through the link unit (120). For example, when an input signal is input from the outside to any of the multiple control units (110), the corresponding control unit (110) can share the input signal with other control units (110) through the link unit (120), so that the same input signal can be input to the control units (110). After the control units (110) receive and process the same input signal, each can output the data processed from the input signal and transmit it to other control units (110) through the link unit (120). Additionally, each of the multiple control units (110) can generate a start signal to synchronize the operation time at which input signals, etc. are processed and transmit it to another control unit (110) through the link unit (120). Thus, the control units (110) can exchange various signals and data through the link unit (120). A plurality of diagnostic units (130) may be provided in the same number as the number of control units (110) and connected to each of the control units (110). Each of the diagnostic units (130) can diagnose the state of the control unit (110) that transmitted the data by analyzing data received from another control unit (110) by the connected control unit (110). For exam